Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qP0R_JCGzhPMWB9tcBkYFf89EXw.roa
File:                     qP0R_JCGzhPMWB9tcBkYFf89EXw.roa (raw, json)
Hash identifier:          HqRcUV8o6AU8z+6E86WI1UcavBA4bvdo6ommbLpDMjc=
Subject key identifier:   A8:FD:11:FC:90:86:CE:13:CC:58:1F:6D:70:19:18:15:FF:3D:11:7C
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1435
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qP0R_JCGzhPMWB9tcBkYFf89EXw.roa
Signing time:             Sun 07 Feb 2021 11:57:46 +0000
ROA not before:           Sun 07 Feb 2021 11:57:46 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        103.224.194.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5173 (0x1435)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb  7 11:57:46 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=A8FD11FC9086CE13CC581F6D70191815FF3D117C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:52:c6:76:42:77:04:35:2e:bf:2c:6a:1c:eb:
                    39:de:3d:c3:f4:17:8e:12:f4:a8:a2:a8:86:5f:d0:
                    67:68:10:22:ad:e6:79:b2:8b:e2:d5:1b:0e:af:fc:
                    9b:d7:d9:12:c6:f6:97:1e:a6:a9:ea:e5:c4:80:24:
                    97:1a:11:de:20:fc:a6:f7:e5:82:da:92:4f:b7:12:
                    81:5b:ef:48:23:ed:78:89:78:b0:ae:af:bd:91:d9:
                    03:23:ba:d3:6c:ee:17:fb:b5:1d:bd:c3:fa:77:56:
                    f6:25:91:49:4b:3e:84:9a:fb:45:fb:91:d0:31:3b:
                    5a:75:ad:b8:09:8a:ae:28:4d:83:6e:53:ee:6e:dc:
                    e9:c7:e2:13:0e:a8:b4:14:1a:2f:1a:ef:85:e7:1e:
                    89:4c:bc:65:6e:06:36:be:da:51:b0:38:ba:c8:4f:
                    be:a4:f1:9e:34:9b:d5:9d:d7:ac:5c:97:a1:a2:2f:
                    4c:56:51:4a:18:f2:e0:75:7d:bc:54:72:86:30:1b:
                    1b:86:08:ac:b3:ed:3c:53:96:64:92:c0:b4:a3:18:
                    72:37:3c:08:0a:e8:85:e2:4d:43:83:d5:01:ca:c2:
                    76:d6:df:dc:18:34:98:2a:21:bc:c9:37:d0:b5:09:
                    38:1f:7a:cd:c6:de:8d:5d:0a:28:d8:26:13:1e:d9:
                    a4:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:FD:11:FC:90:86:CE:13:CC:58:1F:6D:70:19:18:15:FF:3D:11:7C
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qP0R_JCGzhPMWB9tcBkYFf89EXw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.224.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:6b:ca:71:71:87:02:a6:92:12:39:57:8e:e3:43:bd:ea:e4:
         fb:35:b1:ba:13:a1:f0:3f:ab:23:9b:7d:41:9f:2a:08:79:6b:
         39:82:38:af:1c:4a:6b:4f:84:8c:79:16:6f:72:f7:b7:28:54:
         01:6b:21:36:9a:19:a9:19:47:9f:ee:63:d0:49:3d:c6:fe:6d:
         bd:3c:bb:60:18:4c:ab:df:5d:5e:63:86:ca:8d:17:80:52:e7:
         e3:7d:2e:61:94:93:c0:a6:d3:4d:2f:eb:47:3f:03:fc:e6:3b:
         26:5b:74:c8:5f:cb:26:9e:17:35:89:52:a8:91:41:5c:32:e9:
         75:7f:4e:12:bc:1d:c5:0c:93:ff:e3:7d:e8:70:a7:03:54:dd:
         50:5e:70:7d:87:64:29:42:fd:7d:42:52:a7:b9:96:9f:86:73:
         c2:36:35:8d:12:d0:7d:c9:99:4a:44:73:cd:06:31:b9:c2:ca:
         48:76:0e:58:ff:55:65:12:42:9d:24:de:7e:04:4b:62:b1:ad:
         b1:bc:8f:e5:3a:66:18:5e:0c:51:02:5d:8d:91:c5:ac:c1:fa:
         c5:f4:21:36:42:dd:ee:4f:d1:ee:5f:a8:bc:fc:1e:f4:83:15:
         05:10:90:6f:35:c5:53:24:61:ec:63:b4:c7:92:80:a9:ae:82:
         7c:24:3c:16
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFDUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTAyMDcx
MTU3NDZaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEE4RkQxMUZDOTA4NkNF
MTNDQzU4MUY2RDcwMTkxODE1RkYzRDExN0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDWUsZ2QncENS6/LGoc6znePcP0F44S9KiiqIZf0GdoECKt5nmy
i+LVGw6v/JvX2RLG9pcepqnq5cSAJJcaEd4g/Kb35YLakk+3EoFb70gj7XiJeLCu
r72R2QMjutNs7hf7tR29w/p3VvYlkUlLPoSa+0X7kdAxO1p1rbgJiq4oTYNuU+5u
3OnH4hMOqLQUGi8a74XnHolMvGVuBja+2lGwOLrIT76k8Z40m9Wd16xcl6GiL0xW
UUoY8uB1fbxUcoYwGxuGCKyz7TxTlmSSwLSjGHI3PAgK6IXiTUOD1QHKwnbW39wY
NJgqIbzJN9C1CTgfes3G3o1dCijYJhMe2aTRAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUqP0R/JCGzhPMWB9tcBkYFf89EXwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3FQMFJfSkNHemhQTVdCOXRj
QmtZRmY4OUVYdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn
4MIwDQYJKoZIhvcNAQELBQADggEBAJxrynFxhwKmkhI5V47jQ73q5Ps1sboTofA/
qyObfUGfKgh5azmCOK8cSmtPhIx5Fm9y97coVAFrITaaGakZR5/uY9BJPcb+bb08
u2AYTKvfXV5jhsqNF4BS5+N9LmGUk8Cm000v60c/A/zmOyZbdMhfyyaeFzWJUqiR
QVwy6XV/ThK8HcUMk//jfehwpwNU3VBecH2HZClC/X1CUqe5lp+Gc8I2NY0S0H3J
mUpEc80GMbnCykh2Dlj/VWUSQp0k3n4ES2KxrbG8j+U6ZhheDFECXY2RxazB+sX0
ITZC3e5P0e5fqLz8HvSDFQUQkG81xVMkYexjtMeSgKmugnwkPBY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:58 2024 by rpki-client on console-fra.rpki-client.org