Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/6Cn1iXj2IVfesRFbhEkF1-GaxAY.roa
File:                     6Cn1iXj2IVfesRFbhEkF1-GaxAY.roa (raw, json)
Hash identifier:          MdivrzoOjKSaiRBAt9bq/v+0ojRmeTZJslD9LA+XCO4=
Subject key identifier:   E8:29:F5:89:78:F6:21:57:DE:B1:11:5B:84:49:05:D7:E1:9A:C4:06
Certificate issuer:       /CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864
Certificate serial:       14
Authority key identifier: AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/6Cn1iXj2IVfesRFbhEkF1-GaxAY.roa
Signing time:             Fri 03 Jul 2020 12:59:57 +0000
ROA not before:           Fri 03 Jul 2020 12:59:57 +0000
ROA not after:            Fri 02 Jul 2021 02:22:24 +0000
asID:                     207469
IP address blocks:        2406:3540:f000::/36 maxlen: 64
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20 (0x14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864
        Validity
            Not Before: Jul  3 12:59:57 2020 GMT
            Not After : Jul  2 02:22:24 2021 GMT
        Subject: CN=E829F58978F62157DEB1115B844905D7E19AC406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:be:34:3e:18:9a:2c:4f:ee:17:07:a2:90:ee:
                    95:21:6e:9b:45:84:d3:9e:7c:b8:8e:83:a7:d9:17:
                    1d:4e:80:dc:97:a2:0f:4f:a0:7b:8e:d3:b6:84:83:
                    4e:b3:63:d2:5d:5c:48:2a:9b:19:89:1d:c4:9f:21:
                    a1:c7:4b:46:40:7e:7f:49:2a:d5:15:ae:3a:66:fb:
                    9a:7d:58:1c:8b:99:d8:5e:42:5f:26:c0:f3:73:98:
                    d2:cb:93:20:8f:88:87:19:71:2e:39:af:16:49:7d:
                    49:ac:b3:5f:8c:77:74:bb:41:ed:36:ff:05:09:61:
                    03:1e:c4:4e:80:12:ef:66:b8:14:ce:89:08:d1:ad:
                    5a:79:e2:9b:5d:26:06:f1:6f:9d:35:b2:4c:1c:a9:
                    ee:5c:54:8d:ba:38:43:8c:79:4b:ec:86:60:e5:fc:
                    65:d4:eb:e6:22:14:c3:42:ac:20:fe:95:24:76:78:
                    82:46:07:9b:43:1c:c8:98:b0:3f:d7:e2:69:ca:d4:
                    c7:c8:eb:11:28:6e:6b:ef:4b:ee:74:ce:0e:01:04:
                    50:8b:2f:c9:cf:88:88:0f:5f:02:b5:58:77:12:83:
                    06:bc:5a:28:42:1d:01:93:17:2c:ea:d2:50:16:ce:
                    dc:91:3a:98:fe:0b:45:e3:48:85:96:c2:bc:20:77:
                    9a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:29:F5:89:78:F6:21:57:DE:B1:11:5B:84:49:05:D7:E1:9A:C4:06
            X509v3 Authority Key Identifier:
                keyid:AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/6Cn1iXj2IVfesRFbhEkF1-GaxAY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:3540:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         04:3c:0b:ec:63:ee:e8:c7:ca:84:97:28:d5:db:42:35:ac:3b:
         4b:17:9e:31:7b:d3:37:41:e2:99:a3:f6:ec:d7:b2:63:69:f3:
         65:c9:0a:7b:e3:bd:74:c2:63:d5:fe:90:cf:08:b4:af:7d:88:
         db:ec:49:e2:d2:42:0d:eb:b4:8f:be:df:a8:91:11:74:6c:35:
         43:9d:34:a0:38:68:ef:2d:d0:88:3f:fc:05:ca:c1:94:6d:fe:
         07:f8:59:4d:50:e1:7f:93:97:43:67:5f:de:89:65:aa:e4:c7:
         70:d7:8b:00:e3:31:e8:f6:a9:5f:4f:d9:23:e4:f0:d3:89:66:
         ae:f2:34:51:36:36:f8:98:be:eb:df:b3:3f:5f:d3:c8:52:86:
         d3:c1:27:60:fb:76:17:af:a5:4e:27:be:df:de:31:c2:53:50:
         32:c4:95:60:45:8e:bd:e7:74:5f:d2:d8:35:66:60:d3:41:45:
         fc:e9:e2:26:36:b1:23:b0:24:93:60:87:26:ec:73:74:fd:83:
         0d:4a:b5:f9:5a:fc:b8:ff:2f:b9:23:5a:7b:28:ae:82:e4:94:
         34:af:01:fe:16:48:10:61:ce:17:8d:aa:4d:70:f1:1b:8b:17:
         59:6f:52:ce:a8:64:e7:5b:ad:d2:11:f1:f4:a2:2e:e8:b7:45:
         95:a2:a9:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:59:22 2025 by rpki-client