Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/gDo_a7MmzO2-QCCiGVfQrOvQuJQ.roa
File:                     gDo_a7MmzO2-QCCiGVfQrOvQuJQ.roa (raw, json)
Hash identifier:          1pE+UDV84pUAenvvfGcgZXk6J1OtRDtKmYTaa8aRdBE=
Subject key identifier:   80:3A:3F:6B:B3:26:CC:ED:BE:40:20:A2:19:57:D0:AC:EB:D0:B8:94
Certificate issuer:       /CN=57A994BD60555145CB6452DC6A980FC851136BDA
Certificate serial:       014A
Authority key identifier: 57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/gDo_a7MmzO2-QCCiGVfQrOvQuJQ.roa
Signing time:             Thu 21 Jan 2021 17:07:59 +0000
ROA not before:           Thu 21 Jan 2021 17:07:59 +0000
ROA not after:            Tue 05 Oct 2021 04:04:36 +0000
asID:                     60614
IP address blocks:        2406:8dc0:2002::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 330 (0x14a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A994BD60555145CB6452DC6A980FC851136BDA
        Validity
            Not Before: Jan 21 17:07:59 2021 GMT
            Not After : Oct  5 04:04:36 2021 GMT
        Subject: CN=803A3F6BB326CCEDBE4020A21957D0ACEBD0B894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7e:f7:c8:fa:52:b9:b6:0a:27:97:ca:2c:b5:
                    6d:a0:d0:41:9f:76:69:0b:0f:c9:1a:78:0b:0d:66:
                    d1:dc:ac:11:d5:0b:34:a9:98:8b:81:58:ac:9c:3d:
                    7b:3e:32:77:4c:91:0f:00:ba:78:ae:64:c9:f6:9f:
                    79:e0:ed:54:4f:9c:8f:d8:d9:77:c3:30:fd:b0:e8:
                    99:10:97:68:95:07:6e:e2:80:f5:7a:64:f7:d1:2b:
                    90:1b:41:24:ee:e2:cf:fc:4c:75:eb:22:15:31:62:
                    b6:b4:95:14:05:e1:c9:c2:be:39:82:98:12:aa:58:
                    0d:a5:00:da:56:3a:3f:16:74:7a:03:ef:c9:06:a3:
                    5a:5b:e7:0b:9c:32:44:15:68:f4:79:09:35:7c:bf:
                    cd:43:af:41:34:4f:6f:95:72:16:90:af:3f:bc:96:
                    54:86:26:35:9b:2d:0e:ec:45:f6:d2:b1:5b:05:fb:
                    16:7d:63:bb:8d:a3:0e:0a:4b:a6:6c:9f:67:d5:7c:
                    6e:2f:8c:6e:7d:53:be:4e:86:84:4a:36:61:a1:4f:
                    9f:a7:31:2c:09:2f:5a:74:36:70:1d:9d:32:d5:bc:
                    a8:be:66:68:02:fd:ff:93:61:64:38:28:ef:24:7c:
                    79:b5:e1:2c:14:e4:1b:8d:d1:7d:91:e9:f1:93:3d:
                    17:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:3A:3F:6B:B3:26:CC:ED:BE:40:20:A2:19:57:D0:AC:EB:D0:B8:94
            X509v3 Authority Key Identifier:
                keyid:57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/gDo_a7MmzO2-QCCiGVfQrOvQuJQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:8dc0:2002::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:ff:1d:e4:83:15:db:1e:ad:17:a5:66:a7:35:b0:32:63:df:
         ad:07:1a:a5:d1:b1:b6:26:95:d8:ac:00:16:ee:de:aa:37:f8:
         68:68:f2:be:da:e4:ac:2f:2a:33:82:b5:a6:52:0a:22:8e:1a:
         1e:28:ed:94:58:02:d0:63:7e:9a:51:ba:27:cb:a3:22:bb:14:
         0c:a7:47:ea:50:5f:f7:b0:32:8e:42:0b:56:c8:2c:8c:1b:ae:
         55:f7:a9:7c:e3:96:b5:c1:31:43:a3:71:2e:58:4d:fd:17:73:
         bf:aa:02:45:d7:ad:2a:f2:8d:32:25:02:c7:ea:20:41:d5:a2:
         5e:46:b9:7a:41:f3:72:39:9d:8c:90:a8:b2:3d:ac:51:46:a7:
         1e:0c:a4:a3:62:f5:83:d4:d1:58:34:b4:c0:6f:ea:17:41:81:
         19:e8:29:5a:6d:5a:a0:36:39:b9:e9:ef:08:be:0c:0d:3f:9a:
         86:fb:c2:3f:d5:26:97:38:cc:58:32:09:2a:1d:00:38:81:86:
         8b:56:70:bb:b1:9f:ba:8d:56:35:f6:8f:38:9b:79:a7:63:2c:
         ca:9b:c3:50:cb:c7:99:c1:14:21:b6:5c:f4:09:b3:d6:3b:c7:
         ca:5f:38:f8:4a:6b:78:f4:4f:ed:6c:33:1d:98:74:56:f0:b3:
         62:20:87:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:30 2024 by rpki-client on console-fra.rpki-client.org