Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGJING/_7kGIXcC8PyiN5M9tb0yt8Kq1RU.roa
File:                     _7kGIXcC8PyiN5M9tb0yt8Kq1RU.roa (raw, json)
Hash identifier:          n3UNEjwboi+u366Q2IgYeZBQxdcjlZsF8cGJLfKdRQU=
Subject key identifier:   FF:B9:06:21:77:02:F0:FC:A2:37:93:3D:B5:BD:32:B7:C2:AA:D5:15
Certificate issuer:       /CN=4E721C5DD3459DFF85348F1B39DDA9DD50586234
Certificate serial:       0F43
Authority key identifier: 4E:72:1C:5D:D3:45:9D:FF:85:34:8F:1B:39:DD:A9:DD:50:58:62:34
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJING/_7kGIXcC8PyiN5M9tb0yt8Kq1RU.roa
Signing time:             Thu 15 Sep 2022 02:38:51 +0000
ROA not before:           Thu 15 Sep 2022 02:38:51 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     48024
IP address blocks:        2404:2a40::/32 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3907 (0xf43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E721C5DD3459DFF85348F1B39DDA9DD50586234
        Validity
            Not Before: Sep 15 02:38:51 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=FFB906217702F0FCA237933DB5BD32B7C2AAD515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f9:54:7c:c5:b6:ef:31:8c:6a:5c:31:9d:9c:
                    96:e3:71:6a:c7:fd:ca:71:b2:b9:1b:bb:b9:c5:ba:
                    ed:c9:0b:dd:90:72:ce:1c:8b:e3:0c:35:01:76:f3:
                    8d:be:39:8c:f3:63:5d:ef:75:fa:5d:7b:73:07:f7:
                    d7:52:b1:70:a4:71:0f:33:1f:61:24:85:23:47:06:
                    30:96:ee:0a:f0:5d:0e:b7:ff:c2:d6:ad:6e:e8:3d:
                    d7:b7:a6:79:4b:c1:4d:34:a1:55:3e:bf:ed:74:87:
                    bb:9d:d2:0a:a5:16:57:84:3b:52:a4:3a:8e:e7:e2:
                    7d:02:d2:2b:46:47:c5:7d:f0:79:1e:9b:bf:b5:7d:
                    d8:12:38:24:b1:af:aa:1b:ae:10:db:9d:00:a9:9a:
                    53:01:39:8f:b9:3b:49:85:6b:c5:8d:1e:7c:89:d3:
                    39:6e:df:4b:5b:74:9f:8f:16:c8:fb:fc:69:74:2b:
                    10:74:59:6a:46:d2:74:b0:ed:41:3c:d8:b2:83:d5:
                    58:1a:61:35:95:08:88:cc:05:73:6e:3f:66:b5:34:
                    8a:18:46:fc:17:ca:7b:e9:0d:55:5d:62:4f:45:3e:
                    cc:dd:fc:42:65:6b:14:69:8d:cf:e0:da:89:21:8f:
                    e1:6c:e6:ac:62:77:83:84:ab:49:93:a7:5d:12:e0:
                    43:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:B9:06:21:77:02:F0:FC:A2:37:93:3D:B5:BD:32:B7:C2:AA:D5:15
            X509v3 Authority Key Identifier:
                keyid:4E:72:1C:5D:D3:45:9D:FF:85:34:8F:1B:39:DD:A9:DD:50:58:62:34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJING/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJING/_7kGIXcC8PyiN5M9tb0yt8Kq1RU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:2a40::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:97:a6:cd:df:21:23:dc:4d:c1:36:29:0b:49:3b:2c:3b:d3:
         2d:51:e1:b9:fd:05:4d:78:fb:96:0a:ba:b8:2c:31:dc:be:3f:
         f7:eb:00:4c:b9:89:11:b2:e2:8b:38:d3:76:b4:6c:33:c4:a5:
         c1:09:7b:b1:12:87:ca:63:71:70:ae:ee:c8:c9:3d:cb:73:39:
         f2:3b:23:06:00:02:0d:15:7b:e2:73:18:a2:a8:01:2b:d8:41:
         ec:74:6d:6e:d0:37:8d:f0:91:8c:36:ca:69:45:98:62:28:9a:
         32:0b:b8:f0:1c:75:b8:25:d7:31:97:6b:67:86:5d:39:83:a3:
         c3:40:f2:d8:0f:46:a0:7c:58:65:e3:b7:f0:71:fe:78:b4:f4:
         bc:23:7c:44:1b:c2:5e:66:f2:76:9c:2c:00:27:c4:34:22:02:
         9d:77:19:6e:21:43:10:ef:d4:f0:7e:e2:91:20:22:5b:9a:a2:
         6b:b2:1f:22:43:13:ad:45:ab:56:b6:29:e4:29:42:f9:b2:12:
         d0:db:00:8c:c0:82:54:d9:7b:e0:58:15:9b:c8:89:40:3c:fa:
         63:c9:89:3a:da:82:be:a0:ea:f6:84:c2:cc:28:af:df:ad:75:
         dc:17:18:49:b8:ca:3d:e3:2d:bd:2e:64:2e:17:0c:5d:ac:d4:
         80:4e:44:97
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICD0MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEU3
MjFDNUREMzQ1OURGRjg1MzQ4RjFCMzlEREE5REQ1MDU4NjIzNDAeFw0yMjA5MTUw
MjM4NTFaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEZGQjkwNjIxNzcwMkYw
RkNBMjM3OTMzREI1QkQzMkI3QzJBQUQ1MTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC3+VR8xbbvMYxqXDGdnJbjcWrH/cpxsrkbu7nFuu3JC92Qcs4c
i+MMNQF2842+OYzzY13vdfpde3MH99dSsXCkcQ8zH2EkhSNHBjCW7grwXQ63/8LW
rW7oPde3pnlLwU00oVU+v+10h7ud0gqlFleEO1KkOo7n4n0C0itGR8V98Hkem7+1
fdgSOCSxr6obrhDbnQCpmlMBOY+5O0mFa8WNHnyJ0zlu30tbdJ+PFsj7/Gl0KxB0
WWpG0nSw7UE82LKD1VgaYTWVCIjMBXNuP2a1NIoYRvwXynvpDVVdYk9FPszd/EJl
axRpjc/g2okhj+Fs5qxid4OEq0mTp10S4ENVAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQU/7kGIXcC8PyiN5M9tb0yt8Kq1RUwHwYDVR0jBBgwFoAUTnIcXdNFnf+FNI8b
Od2p3VBYYjQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR0pJ
TkcvVG5JY1hkTkZuZi1GTkk4Yk9kMnAzVkJZWWpRLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9UbkljWGRORm5mLUZOSThiT2QycDNWQllZalEuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9NSU5HSklORy9fN2tHSVhjQzhQeWlO
NU05dGIweXQ4S3ExUlUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAH
AwUAJAQqQDANBgkqhkiG9w0BAQsFAAOCAQEAAZemzd8hI9xNwTYpC0k7LDvTLVHh
uf0FTXj7lgq6uCwx3L4/9+sATLmJEbLiizjTdrRsM8SlwQl7sRKHymNxcK7uyMk9
y3M58jsjBgACDRV74nMYoqgBK9hB7HRtbtA3jfCRjDbKaUWYYiiaMgu48Bx1uCXX
MZdrZ4ZdOYOjw0Dy2A9GoHxYZeO38HH+eLT0vCN8RBvCXmbydpwsACfENCICnXcZ
biFDEO/U8H7ikSAiW5qia7IfIkMTrUWrVrYp5ClC+bIS0NsAjMCCVNl74FgVm8iJ
QDz6Y8mJOtqCvqDq9oTCzCiv36113BcYSbjKPeMtvS5kLhcMXazUgE5Elw==
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:13:26 2025 by rpki-client