Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/INFORICH/YythSt-5H8Et4p9oe6NxjgKR5MM.roa
File:                     YythSt-5H8Et4p9oe6NxjgKR5MM.roa (raw, json)
Hash identifier:          xVCuy5ezZWL13MGd2jGLYV7750s7z4Y3so8fTEs59v4=
Subject key identifier:   63:2B:61:4A:DF:B9:1F:C1:2D:E2:9F:68:7B:A3:71:8E:02:91:E4:C3
Certificate issuer:       /CN=9197E979AFBB1BEC2EFC2647207560561BE900B6
Certificate serial:       0230
Authority key identifier: 91:97:E9:79:AF:BB:1B:EC:2E:FC:26:47:20:75:60:56:1B:E9:00:B6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/kZfpea-7G-wu_CZHIHVgVhvpALY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/INFORICH/YythSt-5H8Et4p9oe6NxjgKR5MM.roa
Signing time:             Wed 29 Sep 2021 02:40:59 +0000
ROA not before:           Wed 29 Sep 2021 02:40:59 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     131677
IP address blocks:        2406:3a40::/32 maxlen: 64

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 560 (0x230)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9197E979AFBB1BEC2EFC2647207560561BE900B6
        Validity
            Not Before: Sep 29 02:40:59 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=632B614ADFB91FC12DE29F687BA3718E0291E4C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:20:cf:7a:ed:73:4c:35:7b:a5:7f:e9:d7:08:
                    9c:e0:2b:78:3d:ad:33:fc:46:c1:d6:c1:42:69:23:
                    22:82:c6:a0:63:05:be:9a:df:35:19:6f:e7:5b:e0:
                    f1:1e:ce:e6:a9:d3:5b:71:77:7f:b6:b3:08:7b:ed:
                    19:88:88:7d:e7:90:67:da:b9:4e:3f:ef:ef:e7:6f:
                    9e:a9:0a:00:5b:07:96:07:66:98:c5:bb:38:9f:2b:
                    bb:5b:34:64:ba:74:d0:f9:4c:8e:ef:a6:5e:bf:b2:
                    75:f0:d2:04:37:e1:f1:58:aa:bd:7e:5c:a3:21:14:
                    ef:42:2e:9b:f9:a0:1e:d8:02:cc:24:a0:ba:28:83:
                    3f:58:c6:b5:ac:1e:ab:f9:8f:87:a7:52:61:7e:90:
                    6f:73:d2:6b:c6:fc:ba:01:05:0b:5d:ae:10:cf:c2:
                    ac:4f:f2:38:50:58:8d:c2:fd:9e:25:52:9b:d2:1e:
                    11:60:6a:f0:1e:91:3c:b7:ac:d4:66:e3:5d:59:65:
                    a6:47:e4:44:3b:08:05:97:98:1b:c7:9f:01:ac:bb:
                    40:de:5b:9c:54:fc:e3:e9:66:97:78:76:2d:f0:7a:
                    de:fb:b6:f2:7e:12:fc:ff:fe:ff:77:33:21:1c:bc:
                    bc:c9:c2:47:3d:26:aa:cf:ad:93:1c:0c:89:75:52:
                    48:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:2B:61:4A:DF:B9:1F:C1:2D:E2:9F:68:7B:A3:71:8E:02:91:E4:C3
            X509v3 Authority Key Identifier:
                keyid:91:97:E9:79:AF:BB:1B:EC:2E:FC:26:47:20:75:60:56:1B:E9:00:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/INFORICH/kZfpea-7G-wu_CZHIHVgVhvpALY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/kZfpea-7G-wu_CZHIHVgVhvpALY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/INFORICH/YythSt-5H8Et4p9oe6NxjgKR5MM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:3a40::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:14:7a:f8:16:50:3a:c3:61:41:4c:5d:94:fc:48:a8:04:03:
         69:c9:0b:8d:71:aa:13:5a:77:4e:cb:b8:91:4e:33:a3:c3:38:
         db:59:8d:84:e2:35:3d:cc:d2:72:3b:1b:db:e6:41:65:86:cd:
         8f:e8:95:5b:30:58:31:2a:4b:57:66:03:04:01:2e:68:ae:3b:
         2e:37:d1:dd:9f:d5:5e:6e:58:f9:d3:c4:25:e8:6f:b8:a3:4d:
         65:2e:ca:65:7b:78:f2:59:09:bd:17:21:de:0b:f9:7d:3e:b6:
         64:e0:86:38:aa:dd:8a:e0:cf:ae:b7:9c:8a:50:9f:2e:35:89:
         54:9b:49:28:61:59:1f:6e:4a:a8:46:54:e6:82:28:69:cf:d9:
         b1:77:60:8a:74:93:b8:57:d3:9b:68:b3:c0:46:c8:e7:82:f3:
         2f:98:71:d9:e2:83:ac:00:ee:a1:af:11:25:7c:02:f9:e6:14:
         44:88:8a:c2:18:cb:62:cc:82:76:8c:e7:8b:c2:64:e1:9e:8c:
         02:1c:50:65:1a:88:88:45:b8:5a:6f:97:5a:25:11:4a:53:b9:
         7b:82:fd:b1:7c:d5:6b:29:48:4c:b9:a2:1e:ec:fc:85:de:76:
         80:65:41:f3:f3:c3:88:6f:23:cc:36:d0:fd:23:23:6c:7a:e6:
         bc:b8:96:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:09 2024 by rpki-client on console-ams.rpki-client.org