Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vpNyWav7hr5hPlyl4o-loODThFw.roa
File:                     vpNyWav7hr5hPlyl4o-loODThFw.roa (raw, json)
Hash identifier:          9gKBAmBONroezQSC75ZgQkmIuR5GeUJOA0BumrnyO5g=
Subject key identifier:   BE:93:72:59:AB:FB:86:BE:61:3E:5C:A5:E2:8F:A5:A0:E0:D3:84:5C
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vpNyWav7hr5hPlyl4o-loODThFw.roa
Signing time:             Thu 15 Sep 2022 02:53:56 +0000
ROA not before:           Thu 15 Sep 2022 02:53:56 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38841
IP address blocks:        106.1.46.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8098 (0x1fa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 15 02:53:56 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=BE937259ABFB86BE613E5CA5E28FA5A0E0D3845C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f2:cb:71:51:75:42:47:72:3b:a2:cf:4a:cf:
                    67:e7:45:fe:be:48:7d:2e:21:13:af:6f:26:d3:fa:
                    46:95:a7:53:ad:7f:f5:a4:17:68:c6:29:74:64:59:
                    20:42:65:44:ff:10:5a:b1:a1:24:15:ba:d3:79:c7:
                    76:95:ca:6b:73:7f:11:ad:7c:1a:46:e8:8b:e8:8f:
                    ae:dd:9b:4d:13:f6:98:b2:2e:81:62:b2:95:f2:eb:
                    80:a2:6c:1c:d8:9a:e4:76:e3:b6:81:aa:67:da:b2:
                    7b:6f:67:c8:ce:f6:ec:32:44:05:7a:77:9e:bf:89:
                    c0:38:3e:6f:81:f5:a9:2b:95:13:86:e5:4d:91:63:
                    51:65:0b:2c:6d:2b:81:e1:58:49:17:66:eb:99:9d:
                    b9:53:d5:d5:db:5b:bf:d5:19:30:ad:ca:d3:f9:0d:
                    5f:5d:c3:d3:a5:7f:84:30:70:03:cc:dc:7e:b7:a4:
                    c3:7e:03:84:3e:cc:90:59:50:ba:35:2d:0d:3d:70:
                    a8:f8:bb:5d:ab:3a:c1:4d:20:a2:47:b7:0e:22:c2:
                    1a:45:9f:ef:d1:b8:54:ec:0f:1d:9b:8f:f3:9a:92:
                    f1:39:00:86:4a:cf:cb:76:22:6a:04:0b:1f:a1:19:
                    7d:79:1f:91:13:9c:1f:68:97:81:57:93:ca:0c:16:
                    3b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:93:72:59:AB:FB:86:BE:61:3E:5C:A5:E2:8F:A5:A0:E0:D3:84:5C
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vpNyWav7hr5hPlyl4o-loODThFw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:72:10:77:ce:32:5d:87:99:d0:f0:2d:63:aa:b9:06:73:67:
         95:f5:5b:6b:2f:43:8b:04:3b:1e:e6:c6:47:58:5f:a1:3c:16:
         f2:28:c0:f6:d1:30:40:3e:ef:ec:aa:dd:83:93:c3:42:c4:89:
         fd:1f:7a:77:54:19:c5:bf:cd:0c:be:ed:45:c5:fe:65:8b:5c:
         d2:98:d1:c8:e6:81:ce:67:53:f8:f1:6e:86:56:4b:a0:07:06:
         e2:e8:f2:56:f3:5f:a6:e9:e4:56:9d:fa:f2:0d:36:e2:d9:79:
         f0:d0:f6:da:e4:45:60:e3:9c:d4:e5:1b:1d:38:a1:6c:81:3d:
         ed:b6:2d:55:f7:89:c8:0e:20:1f:16:b2:b2:02:51:d8:bb:f9:
         e3:53:e1:32:60:1a:97:d0:3a:e6:e8:77:7a:9a:f6:4d:a5:3d:
         16:7f:c7:67:c0:03:80:d6:03:06:97:8e:62:b8:ff:0c:07:93:
         5d:ec:f3:e0:e3:cf:78:37:d2:ef:fb:b5:57:4f:c2:04:4d:3e:
         09:60:0d:29:22:18:19:60:6c:d7:ef:eb:8e:74:85:1d:0a:12:
         ef:2e:5f:3c:75:54:08:95:79:a7:b0:62:66:39:ff:67:c6:e7:
         71:7f:1a:21:a3:39:83:3e:4b:38:90:4d:b6:5e:3f:95:ee:d0:
         1a:a6:21:5a
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjUzNTZaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEJFOTM3MjU5QUJGQjg2
QkU2MTNFNUNBNUUyOEZBNUEwRTBEMzg0NUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/8stxUXVCR3I7os9Kz2fnRf6+SH0uIROvbybT+kaVp1Otf/Wk
F2jGKXRkWSBCZUT/EFqxoSQVutN5x3aVymtzfxGtfBpG6Ivoj67dm00T9piyLoFi
spXy64CibBzYmuR247aBqmfasntvZ8jO9uwyRAV6d56/icA4Pm+B9akrlROG5U2R
Y1FlCyxtK4HhWEkXZuuZnblT1dXbW7/VGTCtytP5DV9dw9Olf4QwcAPM3H63pMN+
A4Q+zJBZULo1LQ09cKj4u12rOsFNIKJHtw4iwhpFn+/RuFTsDx2bj/OakvE5AIZK
z8t2ImoECx+hGX15H5ETnB9ol4FXk8oMFjs9AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUvpNyWav7hr5hPlyl4o+loODThFwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3ZwTnlXYXY3aHI1aFBseWw0
by1sb09EVGhGdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq
AS4wDQYJKoZIhvcNAQELBQADggEBAAlyEHfOMl2HmdDwLWOquQZzZ5X1W2svQ4sE
Ox7mxkdYX6E8FvIowPbRMEA+7+yq3YOTw0LEif0fendUGcW/zQy+7UXF/mWLXNKY
0cjmgc5nU/jxboZWS6AHBuLo8lbzX6bp5Fad+vINNuLZefDQ9trkRWDjnNTlGx04
oWyBPe22LVX3icgOIB8WsrICUdi7+eNT4TJgGpfQOubod3qa9k2lPRZ/x2fAA4DW
AwaXjmK4/wwHk13s8+Djz3g30u/7tVdPwgRNPglgDSkiGBlgbNfv6450hR0KEu8u
Xzx1VAiVeaewYmY5/2fG53F/GiGjOYM+SziQTbZeP5Xu0BqmIVo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:00 2024 by rpki-client on console-fra.rpki-client.org