Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vrrY440AyoMQ3sp03xwkkf0Ixfw.roa
File:                     vrrY440AyoMQ3sp03xwkkf0Ixfw.roa (raw, json)
Hash identifier:          putveVEH33mK1OlN7mh7dQ9auYumTX4iyp5NpHBRm+0=
Subject key identifier:   BE:BA:D8:E3:8D:00:CA:83:10:DE:CA:74:DF:1C:24:91:FD:08:C5:FC
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       1AF3
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vrrY440AyoMQ3sp03xwkkf0Ixfw.roa
Signing time:             Wed 29 Sep 2021 02:45:57 +0000
ROA not before:           Wed 29 Sep 2021 02:45:57 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38841
IP address blocks:        106.1.47.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6899 (0x1af3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Sep 29 02:45:57 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=BEBAD8E38D00CA8310DECA74DF1C2491FD08C5FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3f:82:c2:28:9f:a8:e7:e1:cb:7a:c5:4f:e6:
                    3c:23:d4:59:ae:62:7f:3d:1a:0a:08:4d:bd:16:0b:
                    70:c0:13:f7:4c:e5:84:6e:9d:10:d6:5a:b3:fd:f3:
                    b0:2a:54:a5:9d:7a:93:1a:f7:02:d7:9c:78:ce:cb:
                    c6:5d:0a:6c:01:c1:d1:92:25:a1:39:ff:6f:7c:79:
                    4c:1c:bd:3e:26:0e:4d:13:4f:25:85:7e:26:89:8e:
                    90:2f:52:d9:bc:02:f4:99:8b:05:15:1c:28:9f:f1:
                    29:50:ab:04:cb:75:27:0d:64:03:92:3c:6f:a4:2b:
                    84:4c:6e:45:db:18:4d:47:84:45:d5:79:4a:40:97:
                    ce:dd:1f:82:ec:f1:87:e5:9b:70:48:65:4a:ae:a6:
                    c3:e2:2b:d7:65:9f:b3:22:e2:af:d8:c8:06:d7:60:
                    cf:bc:1e:11:9c:79:c7:7f:96:f3:10:f7:bf:7a:d6:
                    e1:6f:38:5a:f9:b3:fb:30:2b:1c:fc:35:9b:dc:36:
                    57:9e:25:04:10:b0:20:67:3a:50:cc:61:63:33:74:
                    11:a0:29:84:aa:7a:f6:02:98:f4:fe:06:65:3c:a8:
                    d4:f7:42:42:00:d9:15:59:b9:6b:b4:2f:39:72:38:
                    18:cf:ec:c3:2b:2d:4e:ed:17:49:45:d0:a0:87:f1:
                    4e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:BA:D8:E3:8D:00:CA:83:10:DE:CA:74:DF:1C:24:91:FD:08:C5:FC
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vrrY440AyoMQ3sp03xwkkf0Ixfw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:86:d4:b0:1e:17:da:50:4c:7a:46:dd:2c:2d:95:c1:59:9e:
         59:e7:b3:b0:74:7a:9c:75:2f:26:56:9b:67:bd:8c:f2:17:5b:
         71:76:7d:d2:37:11:70:66:6e:b7:30:95:2c:68:d8:14:79:82:
         ce:5d:2d:59:76:05:e2:ff:b2:09:9c:a9:b6:ba:2c:91:65:e6:
         7c:37:fb:1e:15:9f:5e:05:8e:8c:b3:99:5a:21:84:cd:90:04:
         94:d8:49:97:8f:22:0f:65:5d:99:c7:fa:88:24:27:46:d3:fc:
         f5:69:c0:e6:a9:b7:b8:45:b9:77:a2:8c:78:f5:ff:f9:42:cc:
         78:b0:10:ce:d3:6c:65:c0:04:29:7b:79:d0:da:03:fd:35:08:
         78:bd:db:73:ed:21:95:6c:ec:8b:ef:50:b0:7f:4b:04:d8:99:
         96:0e:17:4c:37:2e:d1:d1:54:4f:e8:a1:36:04:fd:31:d8:e6:
         de:c2:22:47:d6:e6:f9:cf:43:34:1f:4c:8c:3e:f9:01:8b:39:
         fd:5a:ce:4a:52:cb:01:f5:a6:ed:70:87:6d:2b:cc:9e:6b:b2:
         ae:20:2e:9b:d3:97:8e:ec:a7:d3:01:62:94:24:aa:93:49:f2:
         8c:54:e1:5c:06:fd:7b:df:36:a6:76:64:e3:fe:f9:e5:6a:c2:
         bb:61:eb:b4
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGvMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMTA5Mjkw
MjQ1NTdaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEJFQkFEOEUzOEQwMENB
ODMxMERFQ0E3NERGMUMyNDkxRkQwOEM1RkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCoP4LCKJ+o5+HLesVP5jwj1FmuYn89GgoITb0WC3DAE/dM5YRu
nRDWWrP987AqVKWdepMa9wLXnHjOy8ZdCmwBwdGSJaE5/298eUwcvT4mDk0TTyWF
fiaJjpAvUtm8AvSZiwUVHCif8SlQqwTLdScNZAOSPG+kK4RMbkXbGE1HhEXVeUpA
l87dH4Ls8Yflm3BIZUqupsPiK9dln7Mi4q/YyAbXYM+8HhGcecd/lvMQ97961uFv
OFr5s/swKxz8NZvcNleeJQQQsCBnOlDMYWMzdBGgKYSqevYCmPT+BmU8qNT3QkIA
2RVZuWu0LzlyOBjP7MMrLU7tF0lF0KCH8U7dAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUvrrY440AyoMQ3sp03xwkkf0IxfwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3Zyclk0NDBBeW9NUTNzcDAz
eHdra2YwSXhmdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq
AS8wDQYJKoZIhvcNAQELBQADggEBALqG1LAeF9pQTHpG3SwtlcFZnlnns7B0epx1
LyZWm2e9jPIXW3F2fdI3EXBmbrcwlSxo2BR5gs5dLVl2BeL/sgmcqba6LJFl5nw3
+x4Vn14FjoyzmVohhM2QBJTYSZePIg9lXZnH+ogkJ0bT/PVpwOapt7hFuXeijHj1
//lCzHiwEM7TbGXABCl7edDaA/01CHi923PtIZVs7IvvULB/SwTYmZYOF0w3LtHR
VE/ooTYE/THY5t7CIkfW5vnPQzQfTIw++QGLOf1azkpSywH1pu1wh20rzJ5rsq4g
LpvTl47sp9MBYpQkqpNJ8oxU4VwG/XvfNqZ2ZOP++eVqwrth67Q=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:00 2024 by rpki-client on console-fra.rpki-client.org