Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vhcTsimSU-ss700X7rFHKu6r2WE.roa
File:                     vhcTsimSU-ss700X7rFHKu6r2WE.roa (raw, json)
Hash identifier:          b1CmtqJXnxAifG2W9KxGlMduGbRxSujdaQkV+9nRTSI=
Subject key identifier:   BE:17:13:B2:29:92:53:EB:2C:EF:4D:17:EE:B1:47:2A:EE:AB:D9:61
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       0E40
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vhcTsimSU-ss700X7rFHKu6r2WE.roa
Signing time:             Tue 29 Sep 2020 09:55:31 +0000
ROA not before:           Tue 29 Sep 2020 09:55:31 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38841
IP address blocks:        106.1.156.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3648 (0xe40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 09:55:31 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=BE1713B2299253EB2CEF4D17EEB1472AEEABD961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c8:18:8c:b7:47:38:84:d5:4e:ee:80:ba:f9:
                    e0:93:ab:58:5e:f4:9d:9f:89:f4:a7:d6:60:da:f1:
                    e8:42:79:09:e3:29:72:89:ff:39:4a:83:96:f7:6e:
                    07:d0:50:84:1e:c4:2a:8b:4f:74:2a:bf:e7:fc:ea:
                    1c:cb:99:e9:14:28:ee:06:3c:10:e0:e5:cb:a3:45:
                    78:8e:7d:bd:c7:ab:d7:95:64:e7:8f:cd:78:3c:70:
                    c6:36:29:b0:33:cc:3c:26:07:da:15:d4:9c:2d:8f:
                    98:51:19:35:e7:6b:a0:bc:b7:ae:16:8d:5a:56:d0:
                    b7:dc:a5:8a:2d:f7:84:f0:01:9e:fb:33:c6:f4:65:
                    71:12:69:c0:df:27:83:57:a0:25:8f:8e:5c:2b:b0:
                    28:d2:ad:4b:b9:8e:04:63:f9:71:92:ca:42:d9:9a:
                    b3:fc:4b:a8:2e:85:b8:ae:95:b1:30:5b:5f:5c:36:
                    36:8c:e2:21:a0:03:43:3c:f1:eb:c8:f6:57:69:13:
                    12:ca:ad:cc:0a:09:06:02:b2:be:5d:09:75:d1:e7:
                    6d:bb:53:6b:69:0b:de:39:81:06:44:c2:05:95:4a:
                    e8:3b:e8:1d:a8:79:6f:03:d2:d8:80:05:d6:49:8c:
                    94:66:84:77:bf:5a:dc:b9:88:ee:77:51:fb:67:ed:
                    8f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:17:13:B2:29:92:53:EB:2C:EF:4D:17:EE:B1:47:2A:EE:AB:D9:61
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vhcTsimSU-ss700X7rFHKu6r2WE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:42:f5:d8:6d:95:ac:62:aa:69:a9:f2:00:75:c5:83:5e:61:
         13:65:f1:22:ff:80:d5:f7:0b:6f:07:a0:ab:42:b9:71:b8:56:
         c7:3c:d0:3e:47:7c:22:67:e5:4a:44:43:e2:1c:71:95:02:ba:
         94:2d:b6:d7:f4:05:7f:c5:b8:62:24:7d:3f:9b:e7:24:30:6b:
         55:be:ab:9b:62:ff:bd:7b:46:51:d5:c0:86:65:c7:ea:70:14:
         4c:8f:d8:4e:55:76:52:f5:b7:1a:94:09:d8:12:05:ba:d6:28:
         e7:91:95:46:a7:57:54:37:80:54:9a:d6:2a:ea:98:a4:92:02:
         0d:aa:2a:80:85:62:55:e9:09:e1:e8:29:eb:53:96:15:27:06:
         f7:6f:8a:72:c9:2e:c5:33:de:60:a1:5f:c8:1b:db:65:2d:f1:
         1f:0b:a1:fb:2c:98:3f:40:c6:c7:f1:b2:ff:a2:4e:21:df:07:
         de:56:59:4f:5b:21:d9:e3:ea:0d:48:0b:3f:5c:17:2a:05:f0:
         c8:da:d5:0a:79:3b:14:26:04:6a:06:d8:2f:d7:84:6e:ae:92:
         c4:24:c1:38:b2:a0:df:7f:34:05:7c:02:5f:a6:d7:0b:f8:f0:
         7f:23:e2:ef:41:eb:79:4d:6e:ca:52:54:6d:a6:81:29:67:ef:
         98:d4:1a:3f
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDkAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU1MzFaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEJFMTcxM0IyMjk5MjUz
RUIyQ0VGNEQxN0VFQjE0NzJBRUVBQkQ5NjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDFyBiMt0c4hNVO7oC6+eCTq1he9J2fifSn1mDa8ehCeQnjKXKJ
/zlKg5b3bgfQUIQexCqLT3Qqv+f86hzLmekUKO4GPBDg5cujRXiOfb3Hq9eVZOeP
zXg8cMY2KbAzzDwmB9oV1Jwtj5hRGTXna6C8t64WjVpW0LfcpYot94TwAZ77M8b0
ZXESacDfJ4NXoCWPjlwrsCjSrUu5jgRj+XGSykLZmrP8S6guhbiulbEwW19cNjaM
4iGgA0M88evI9ldpExLKrcwKCQYCsr5dCXXR5227U2tpC945gQZEwgWVSug76B2o
eW8D0tiABdZJjJRmhHe/Wty5iO53Uftn7Y/fAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUvhcTsimSU+ss700X7rFHKu6r2WEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3ZoY1RzaW1TVS1zczcwMFg3
ckZIS3U2cjJXRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq
AZwwDQYJKoZIhvcNAQELBQADggEBAJpC9dhtlaxiqmmp8gB1xYNeYRNl8SL/gNX3
C28HoKtCuXG4Vsc80D5HfCJn5UpEQ+IccZUCupQtttf0BX/FuGIkfT+b5yQwa1W+
q5ti/717RlHVwIZlx+pwFEyP2E5VdlL1txqUCdgSBbrWKOeRlUanV1Q3gFSa1irq
mKSSAg2qKoCFYlXpCeHoKetTlhUnBvdvinLJLsUz3mChX8gb22Ut8R8LofssmD9A
xsfxsv+iTiHfB95WWU9bIdnj6g1ICz9cFyoF8Mja1Qp5OxQmBGoG2C/XhG6uksQk
wTiyoN9/NAV8Al+m1wv48H8j4u9B63lNbspSVG2mgSln75jUGj8=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:30 2023 by rpki-client on console-ams.rpki-client.org