Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/39uc7cc_wB-A79H8OpslaWI45LY.roa
File:                     39uc7cc_wB-A79H8OpslaWI45LY.roa (raw, json)
Hash identifier:          /znRYliaOZI3Ol+2OJe58sOFow6THhI+3ho8jjqf4/U=
Subject key identifier:   DF:DB:9C:ED:C7:3F:C0:1F:80:EF:D1:FC:3A:9B:25:69:62:38:E4:B6
Certificate issuer:       /CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864
Certificate serial:       0339
Authority key identifier: AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/39uc7cc_wB-A79H8OpslaWI45LY.roa
Signing time:             Sun 07 Feb 2021 13:02:44 +0000
ROA not before:           Sun 07 Feb 2021 13:02:44 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     134098
IP address blocks:        103.152.203.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 825 (0x339)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864
        Validity
            Not Before: Feb  7 13:02:44 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=DFDB9CEDC73FC01F80EFD1FC3A9B25696238E4B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:68:9e:19:cf:3a:86:6a:8f:0b:dd:a7:05:68:
                    d1:bd:62:72:d5:60:08:cb:be:bc:1d:55:f7:e3:1f:
                    24:1f:f0:fd:8e:6d:af:41:2d:60:24:04:80:3e:fa:
                    1c:7d:86:99:f1:68:94:fc:3c:56:98:b9:03:db:e9:
                    c7:ff:c7:3c:8d:b0:4f:11:32:2c:7a:72:0c:8b:43:
                    5b:ab:db:22:ae:24:af:b3:7c:b3:59:e9:dc:8c:d1:
                    08:ec:32:9b:ef:ba:1c:7a:0d:99:08:f4:eb:a9:fe:
                    9e:3a:5e:e6:b4:de:02:9e:92:e3:6f:31:7f:c6:bf:
                    60:79:f2:1f:5b:c1:b1:7f:a2:bd:c1:e5:ab:16:e0:
                    5e:18:34:29:6b:26:e3:10:d3:67:a0:2a:e4:ec:70:
                    6f:1c:95:6f:a9:9b:7d:f0:09:23:03:7e:32:f6:24:
                    f8:00:2f:6c:2f:ac:bb:dc:ed:85:b6:2f:30:27:0e:
                    26:23:e1:c8:d3:1c:db:62:ac:c7:98:e0:59:be:7a:
                    a5:40:f3:78:b6:22:cc:50:f1:be:91:82:a5:43:40:
                    55:99:4c:e3:19:9d:5c:91:95:e0:70:75:d7:1e:5c:
                    8b:0a:f5:eb:c5:b1:8f:08:b8:07:d6:31:d3:2a:4f:
                    2a:62:98:de:42:be:be:d7:d9:9a:2e:f8:b6:f1:c2:
                    28:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:DB:9C:ED:C7:3F:C0:1F:80:EF:D1:FC:3A:9B:25:69:62:38:E4:B6
            X509v3 Authority Key Identifier:
                keyid:AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/39uc7cc_wB-A79H8OpslaWI45LY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:77:38:da:43:4f:ae:cf:d2:ee:ab:7e:b4:02:3d:45:c2:4a:
         c6:27:01:75:0b:0a:60:30:0d:49:d3:2c:fd:b6:4d:e4:8a:4a:
         85:88:88:d1:52:b1:93:0e:6d:1a:c7:03:04:bf:9c:15:b6:8a:
         f7:d2:55:ee:1c:c6:de:64:66:24:67:c2:8a:ff:a4:04:6d:2b:
         fc:9c:54:bc:35:05:69:bc:d7:10:d9:9a:e6:4b:de:53:e5:f3:
         20:53:16:29:a9:cc:5e:ba:6a:af:9f:90:b8:ca:ec:49:95:c8:
         36:31:4c:db:17:d4:6f:62:7e:3a:e2:07:52:25:d6:99:13:41:
         c0:b8:c6:08:27:4a:69:15:b5:ac:bf:80:ab:3a:42:a4:00:3f:
         39:c3:d8:f5:87:73:5b:6c:0e:a9:b3:34:59:c1:90:08:47:50:
         f3:5d:a4:3f:62:fc:63:c1:9a:5d:14:cf:58:4f:e0:24:c6:b0:
         02:e8:bb:6d:29:aa:a5:5f:2c:16:28:81:a8:2a:20:bf:da:86:
         a8:46:b9:c1:40:8e:9e:65:0c:13:97:b4:b4:49:2f:da:61:83:
         b4:32:54:c2:a7:ae:fa:b1:72:eb:d7:47:9b:03:4b:f6:ac:e1:
         e1:a7:1b:4e:7a:5e:b3:c4:c0:78:01:d0:ba:90:f2:6c:0b:b7:
         15:b6:53:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:09 2023 by rpki-client on console-fra.rpki-client.org