Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/1EK8fyRofm81xjT-bSsgyWCdyX8.roa
File:                     1EK8fyRofm81xjT-bSsgyWCdyX8.roa (raw, json)
Hash identifier:          rJXjpHvi8HlM7vmcg7YiRQc0tnPQUGN+7VA609fai58=
Subject key identifier:   D4:42:BC:7F:24:68:7E:6F:35:C6:34:FE:6D:2B:20:C9:60:9D:C9:7F
Certificate issuer:       /CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864
Certificate serial:       03EC
Authority key identifier: AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/1EK8fyRofm81xjT-bSsgyWCdyX8.roa
Signing time:             Wed 29 Sep 2021 02:37:46 +0000
ROA not before:           Wed 29 Sep 2021 02:37:46 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     17415
IP address blocks:        2406:3540:fff0::/46 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1004 (0x3ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864
        Validity
            Not Before: Sep 29 02:37:46 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=D442BC7F24687E6F35C634FE6D2B20C9609DC97F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:19:e8:bf:84:e9:de:07:aa:c3:24:9c:28:d7:
                    db:8c:7a:fd:95:97:8a:4a:4e:c5:34:c9:d6:b5:5f:
                    75:58:98:e8:dc:87:5b:c9:c8:36:b4:d9:87:eb:10:
                    92:a5:3b:5b:a3:df:07:a3:59:7e:2c:78:02:91:c2:
                    64:4d:75:bf:32:11:82:24:22:0a:d4:fc:9f:06:55:
                    c2:ec:cf:81:dd:d2:2b:e1:07:05:eb:fd:2f:c5:99:
                    47:d1:93:10:d6:80:ec:3d:dd:bb:b6:bf:cb:52:ce:
                    d8:5f:13:4a:85:50:7f:cd:69:d2:ce:e3:8b:97:f7:
                    c9:05:7e:fd:e6:3b:35:27:fa:3b:3c:90:38:0a:72:
                    c2:0b:ab:94:8e:9c:21:33:df:df:7d:7a:a0:05:04:
                    b1:da:aa:e3:c8:14:2b:37:01:f7:60:84:25:d3:27:
                    8c:4b:15:7a:3a:00:97:6d:3e:35:be:2c:37:bf:c4:
                    77:74:15:31:5e:ad:e6:33:43:c5:10:2f:f1:d7:b5:
                    06:20:fa:b1:eb:64:17:0b:81:37:19:ba:53:ce:c5:
                    77:39:cf:06:4d:9c:80:ea:69:4e:6a:2b:77:a3:62:
                    bc:e9:ec:e0:53:19:bb:6f:b8:d2:e8:6e:7f:a4:bc:
                    de:e9:72:2e:ba:be:cc:3f:14:77:a7:e2:10:08:47:
                    47:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:42:BC:7F:24:68:7E:6F:35:C6:34:FE:6D:2B:20:C9:60:9D:C9:7F
            X509v3 Authority Key Identifier:
                keyid:AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/1EK8fyRofm81xjT-bSsgyWCdyX8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:3540:fff0::/46

    Signature Algorithm: sha256WithRSAEncryption
         2f:c5:82:cc:e6:b6:b7:21:06:3d:23:fe:7b:49:45:60:33:d0:
         80:39:dc:cc:c2:83:22:78:ed:46:e3:83:9f:00:88:57:2f:62:
         bc:9b:00:c7:48:76:1a:67:45:54:55:66:59:ed:5c:a4:ca:13:
         a1:b7:c1:70:fa:17:fe:a9:8d:42:8e:3a:ca:80:a3:7e:3f:1b:
         d7:b0:e5:df:77:c3:e4:97:0f:7c:6c:f6:4a:5d:d4:a6:07:1a:
         84:5c:50:2d:cc:b4:9b:d6:b3:a2:d6:5e:20:97:9e:19:1f:e1:
         04:1a:f4:cb:bb:8e:aa:7d:e3:f0:14:b9:ec:2f:a8:e4:ac:88:
         75:45:c4:78:8c:1b:e4:10:73:e3:2c:11:68:b2:2c:6a:c8:e8:
         60:54:fc:a7:41:c2:58:30:32:9f:c0:38:7e:29:84:f2:a0:36:
         e8:25:2e:f9:5b:90:fa:67:0e:ea:09:f9:12:f3:63:2c:af:f1:
         a2:04:6a:1e:c7:63:9c:9b:1a:6c:3a:04:b2:01:f7:b0:34:1a:
         c3:10:9a:82:12:9d:b3:74:67:d4:4a:31:76:64:12:cf:14:44:
         da:b1:e7:fa:96:7e:37:22:db:d9:77:dc:16:69:23:bd:61:d0:
         75:af:3e:aa:13:61:8f:9d:bd:90:ac:51:d8:b9:5b:a1:96:3a:
         12:9c:bf:dc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:11 2024 by rpki-client on console-ams.rpki-client.org