Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/0PHTSxtIAZrnayBjWrQwIydJ3VM.roa
File:                     0PHTSxtIAZrnayBjWrQwIydJ3VM.roa (raw, json)
Hash identifier:          Pinvfq/TzZqIuHboV9gRtTicHKHGaiofRAIUs5eur7k=
Subject key identifier:   D0:F1:D3:4B:1B:48:01:9A:E7:6B:20:63:5A:B4:30:23:27:49:DD:53
Certificate issuer:       /CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864
Certificate serial:       033F
Authority key identifier: AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/0PHTSxtIAZrnayBjWrQwIydJ3VM.roa
Signing time:             Sun 07 Feb 2021 13:06:17 +0000
ROA not before:           Sun 07 Feb 2021 13:06:17 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     17415
IP address blocks:        103.152.202.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 831 (0x33f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864
        Validity
            Not Before: Feb  7 13:06:17 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=D0F1D34B1B48019AE76B20635AB430232749DD53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f3:10:83:ad:38:fe:34:0e:a4:ea:15:20:73:
                    71:a4:08:ca:28:d8:c1:af:86:97:3b:c0:ea:ba:cf:
                    f6:1b:96:25:f3:dc:91:56:31:f7:80:8e:4c:d4:70:
                    bd:8f:6c:07:9b:10:87:69:b2:25:ec:dd:b8:1b:fc:
                    d3:d0:5d:80:67:d3:e2:20:75:3c:6f:37:65:2a:88:
                    22:51:b6:9e:38:15:12:f9:5b:8f:0d:f5:69:28:40:
                    56:f8:fb:ed:d6:23:87:7a:8c:3d:d2:0e:30:79:b9:
                    bd:26:ec:83:54:f5:a1:d7:ed:8b:2e:5b:08:44:d6:
                    bb:ed:de:4d:26:ab:f6:0b:d6:4d:9f:16:70:86:8b:
                    73:c4:6a:1b:89:23:d4:be:a7:7f:b3:a4:38:27:30:
                    de:25:e4:48:a8:ab:06:87:d8:5a:9e:c1:da:41:c1:
                    d3:30:a5:48:d2:d5:66:b6:b2:4c:27:bf:3c:78:0c:
                    4c:32:0a:4c:06:39:ec:50:31:ca:c4:30:c7:80:2e:
                    83:14:7a:f8:93:f3:2e:80:ca:79:ff:7a:65:8a:3d:
                    ed:e7:aa:cd:08:0e:30:f8:ee:9c:45:18:4e:4f:ca:
                    be:3f:6d:0e:57:21:4b:1f:e3:6f:1d:07:55:4b:0f:
                    fd:64:23:8f:ab:08:0e:d4:27:b2:20:75:9d:b0:f6:
                    43:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:F1:D3:4B:1B:48:01:9A:E7:6B:20:63:5A:B4:30:23:27:49:DD:53
            X509v3 Authority Key Identifier:
                keyid:AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/0PHTSxtIAZrnayBjWrQwIydJ3VM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:cf:01:c3:34:38:e4:d3:46:9e:af:93:de:c9:14:ec:98:ec:
         d5:40:6b:1f:2d:9e:62:ed:03:ee:40:c6:a9:6f:69:86:94:5b:
         c8:8a:23:66:4b:52:8b:f7:28:46:1f:90:05:f8:10:48:42:da:
         42:05:73:ee:ae:27:08:81:1e:a6:4a:bd:58:df:c1:9a:f0:08:
         49:ec:c3:8d:c0:ff:4c:ab:bb:07:18:73:d9:cc:bb:d0:6d:86:
         09:43:8e:fa:15:9d:96:2d:ba:e4:f5:dd:18:ee:d5:d6:72:f8:
         66:80:50:2e:b3:0c:9a:21:86:4b:84:a1:7a:c0:ec:46:3b:80:
         31:e8:79:e3:0b:5f:8d:5a:89:18:fa:f6:79:ec:e1:aa:7f:eb:
         c7:90:a7:1e:3e:61:e3:26:fb:9f:2d:28:f7:3a:42:80:b7:d8:
         97:6f:47:27:5e:6a:d9:db:21:3b:45:02:9e:82:a2:71:4f:70:
         e0:80:54:e0:68:af:d0:97:57:7f:97:d6:7d:91:86:5b:f5:f0:
         bf:09:c4:6c:cf:ff:a0:73:d9:61:d7:3e:59:1c:90:48:71:42:
         f2:62:da:1a:b6:e9:7d:bf:31:95:93:ce:bc:5f:d7:51:c2:23:
         c8:91:53:db:dc:55:b2:91:88:d5:38:6b:20:03:8c:06:7a:72:
         c1:46:c4:16
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICAz8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQURG
RTZFNTZEQUY4NDkyRUM3REU4OEIzQTkwNkIzMTM5QjU1Qjg2NDAeFw0yMTAyMDcx
MzA2MTdaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEQwRjFEMzRCMUI0ODAx
OUFFNzZCMjA2MzVBQjQzMDIzMjc0OURENTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCw8xCDrTj+NA6k6hUgc3GkCMoo2MGvhpc7wOq6z/YbliXz3JFW
MfeAjkzUcL2PbAebEIdpsiXs3bgb/NPQXYBn0+IgdTxvN2UqiCJRtp44FRL5W48N
9WkoQFb4++3WI4d6jD3SDjB5ub0m7INU9aHX7YsuWwhE1rvt3k0mq/YL1k2fFnCG
i3PEahuJI9S+p3+zpDgnMN4l5EioqwaH2FqewdpBwdMwpUjS1Wa2skwnvzx4DEwy
CkwGOexQMcrEMMeALoMUeviT8y6Aynn/emWKPe3nqs0IDjD47pxFGE5Pyr4/bQ5X
IUsf428dB1VLD/1kI4+rCA7UJ7IgdZ2w9kPLAgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQU0PHTSxtIAZrnayBjWrQwIydJ3VMwHwYDVR0jBBgwFoAUrf5uVtr4SS7H3oiz
qQazE5tVuGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR1lJ
VEVBL3JmNXVWdHI0U1M3SDNvaXpxUWF6RTV0VnVHUS5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvcmY1dVZ0cjRTUzdIM29penFRYXpFNXRWdUdRLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR1lJVEVBLzBQSFRTeHRJQVpy
bmF5QmpXclF3SXlkSjNWTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAFnmMowDQYJKoZIhvcNAQELBQADggEBAEzPAcM0OOTTRp6vk97JFOyY7NVA
ax8tnmLtA+5AxqlvaYaUW8iKI2ZLUov3KEYfkAX4EEhC2kIFc+6uJwiBHqZKvVjf
wZrwCEnsw43A/0yruwcYc9nMu9BthglDjvoVnZYtuuT13Rju1dZy+GaAUC6zDJoh
hkuEoXrA7EY7gDHoeeMLX41aiRj69nns4ap/68eQpx4+YeMm+58tKPc6QoC32Jdv
RydeatnbITtFAp6ConFPcOCAVOBor9CXV3+X1n2Rhlv18L8JxGzP/6Bz2WHXPlkc
kEhxQvJi2hq26X2/MZWTzrxf11HCI8iRU9vcVbKRiNU4ayADjAZ6csFGxBY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:39 2024 by rpki-client on console-fra.rpki-client.org