Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/3cWPmVU3pTdjAy1QyTjRHPzuifM.roa
File:                     3cWPmVU3pTdjAy1QyTjRHPzuifM.roa (raw, json)
Hash identifier:          T1cgpLTPyRGEEhoY9iFDZp2x8OepjR8eE0qGMW5BDpo=
Subject key identifier:   DD:C5:8F:99:55:37:A5:37:63:03:2D:50:C9:38:D1:1C:FC:EE:89:F3
Certificate issuer:       /CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864
Certificate serial:       03F3
Authority key identifier: AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/3cWPmVU3pTdjAy1QyTjRHPzuifM.roa
Signing time:             Wed 29 Sep 2021 02:37:48 +0000
ROA not before:           Wed 29 Sep 2021 02:37:48 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     131682
IP address blocks:        103.152.202.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1011 (0x3f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864
        Validity
            Not Before: Sep 29 02:37:48 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=DDC58F995537A53763032D50C938D11CFCEE89F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:36:1a:b2:23:7e:a1:35:83:84:30:62:57:2f:
                    2b:0f:72:63:54:f7:28:55:27:16:92:06:a8:bc:ba:
                    db:02:ee:2c:3d:77:a4:25:f4:5a:ec:24:2d:db:fc:
                    7d:c8:7b:e5:fb:89:d5:5b:a2:49:02:b6:8d:58:6d:
                    e9:ff:33:9e:15:51:fe:d8:dc:85:6f:67:19:20:c8:
                    17:9c:2a:07:54:05:8b:f9:d6:ca:1a:ec:b6:97:f8:
                    82:51:d3:3f:ab:3c:d8:8a:30:f7:bb:7b:a2:61:40:
                    6f:be:6f:17:08:a5:b5:ec:76:db:b3:d3:83:df:e9:
                    f4:f7:f6:3d:e8:e9:25:c8:6f:ba:93:0a:a9:a2:c6:
                    c7:42:11:ec:cd:d8:1b:2f:fe:5d:de:7c:22:70:d8:
                    36:81:86:47:d9:f4:d7:4f:03:2c:07:05:fb:e1:01:
                    17:4c:bf:a9:cf:ad:7f:2a:dc:54:97:c2:76:26:f5:
                    31:16:60:9b:10:91:f9:50:bc:fb:69:02:80:19:62:
                    eb:bd:80:ea:af:ab:21:3d:d7:a0:48:70:54:d3:ff:
                    78:50:7b:9b:8f:47:8e:6b:16:90:5f:e7:25:12:8f:
                    9d:9c:99:d9:29:e4:06:43:02:d3:68:37:ef:5f:ac:
                    60:05:9c:58:10:fe:21:9a:47:3f:7e:2f:1d:05:80:
                    13:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:C5:8F:99:55:37:A5:37:63:03:2D:50:C9:38:D1:1C:FC:EE:89:F3
            X509v3 Authority Key Identifier:
                keyid:AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/3cWPmVU3pTdjAy1QyTjRHPzuifM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:5f:e0:fe:36:f4:98:fa:86:d2:9f:80:7c:0c:d2:23:82:7e:
         fa:ec:d7:c5:37:96:61:e8:a0:74:5c:18:ad:ab:39:c9:ec:3c:
         3c:aa:bf:f0:77:ff:60:1b:68:b2:53:da:f5:bd:70:e4:25:b8:
         cc:47:cf:62:ff:4a:2a:83:10:f7:61:a6:48:3d:24:fb:e6:c1:
         16:f2:73:fb:e9:59:07:b0:89:e6:55:ec:13:2c:ac:5f:56:53:
         02:84:ec:28:a4:4f:21:aa:e4:b1:58:72:58:c7:25:8b:3f:06:
         5b:8a:9a:dc:ea:31:7b:cc:59:ad:9e:53:73:28:28:ba:0d:e9:
         af:99:33:32:af:a3:64:20:17:68:4b:43:b8:df:6c:54:f1:94:
         c1:a6:ea:03:f9:49:0a:63:78:c6:7e:21:d0:cf:59:20:0a:77:
         f3:2e:1a:2d:55:22:0d:b2:a0:74:b1:1a:38:d5:40:8e:b4:27:
         68:6d:07:63:13:c2:44:10:5d:67:63:3d:6b:b9:86:ab:5a:61:
         6b:ad:c7:1a:35:1c:83:d8:c9:ba:10:29:c3:c1:a4:f1:41:f7:
         01:f0:7f:3f:16:9b:a8:91:b3:aa:59:b9:c4:22:1e:59:b8:68:
         25:b4:60:2f:7b:70:f6:34:6d:4b:f8:11:85:c9:fb:7a:08:e9:
         ff:0e:39:00
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICA/MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQURG
RTZFNTZEQUY4NDkyRUM3REU4OEIzQTkwNkIzMTM5QjU1Qjg2NDAeFw0yMTA5Mjkw
MjM3NDhaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEREQzU4Rjk5NTUzN0E1
Mzc2MzAzMkQ1MEM5MzhEMTFDRkNFRTg5RjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDJNhqyI36hNYOEMGJXLysPcmNU9yhVJxaSBqi8utsC7iw9d6Ql
9FrsJC3b/H3Ie+X7idVbokkCto1Yben/M54VUf7Y3IVvZxkgyBecKgdUBYv51soa
7LaX+IJR0z+rPNiKMPe7e6JhQG++bxcIpbXsdtuz04Pf6fT39j3o6SXIb7qTCqmi
xsdCEezN2Bsv/l3efCJw2DaBhkfZ9NdPAywHBfvhARdMv6nPrX8q3FSXwnYm9TEW
YJsQkflQvPtpAoAZYuu9gOqvqyE916BIcFTT/3hQe5uPR45rFpBf5yUSj52cmdkp
5AZDAtNoN+9frGAFnFgQ/iGaRz9+Lx0FgBObAgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQU3cWPmVU3pTdjAy1QyTjRHPzuifMwHwYDVR0jBBgwFoAUrf5uVtr4SS7H3oiz
qQazE5tVuGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR1lJ
VEVBL3JmNXVWdHI0U1M3SDNvaXpxUWF6RTV0VnVHUS5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvcmY1dVZ0cjRTUzdIM29penFRYXpFNXRWdUdRLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR1lJVEVBLzNjV1BtVlUzcFRk
akF5MVF5VGpSSFB6dWlmTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAFnmMowDQYJKoZIhvcNAQELBQADggEBADdf4P429Jj6htKfgHwM0iOCfvrs
18U3lmHooHRcGK2rOcnsPDyqv/B3/2AbaLJT2vW9cOQluMxHz2L/SiqDEPdhpkg9
JPvmwRbyc/vpWQewieZV7BMsrF9WUwKE7CikTyGq5LFYcljHJYs/BluKmtzqMXvM
Wa2eU3MoKLoN6a+ZMzKvo2QgF2hLQ7jfbFTxlMGm6gP5SQpjeMZ+IdDPWSAKd/Mu
Gi1VIg2yoHSxGjjVQI60J2htB2MTwkQQXWdjPWu5hqtaYWutxxo1HIPYyboQKcPB
pPFB9wHwfz8Wm6iRs6pZucQiHlm4aCW0YC97cPY0bUv4EYXJ+3oI6f8OOQA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:39 2024 by rpki-client on console-fra.rpki-client.org