Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/PxfaF0fD2BQ-fjg12pcUsnk_g8A.roa
File:                     PxfaF0fD2BQ-fjg12pcUsnk_g8A.roa (raw, json)
Hash identifier:          2ElFd2k4u5f9HGfJsJCD0+V/APuzMcwpu0W5Bcb1VIo=
Subject key identifier:   3F:17:DA:17:47:C3:D8:14:3E:7E:38:35:DA:97:14:B2:79:3F:83:C0
Certificate issuer:       /CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864
Certificate serial:       06
Authority key identifier: AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/PxfaF0fD2BQ-fjg12pcUsnk_g8A.roa
Signing time:             Thu 02 Jul 2020 19:06:55 +0000
ROA not before:           Thu 02 Jul 2020 19:06:55 +0000
ROA not after:            Fri 02 Jul 2021 02:22:24 +0000
asID:                     131682
IP address blocks:        103.152.202.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864
        Validity
            Not Before: Jul  2 19:06:55 2020 GMT
            Not After : Jul  2 02:22:24 2021 GMT
        Subject: CN=3F17DA1747C3D8143E7E3835DA9714B2793F83C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:cf:7f:48:3b:08:86:c9:70:ce:d7:22:94:81:
                    4d:32:26:38:28:ad:12:7c:04:97:d2:c6:af:54:d8:
                    b9:e1:68:f9:de:96:d1:31:01:93:7b:42:17:fd:d0:
                    fd:07:94:f7:e3:6a:09:19:c3:02:e1:90:26:0a:71:
                    90:b4:aa:04:53:a1:05:72:2d:7f:8c:55:7e:fa:2f:
                    03:b2:20:e0:5b:5f:fc:05:ad:10:77:a3:07:42:04:
                    1f:ed:95:6e:9a:c4:48:87:13:04:78:1a:19:2a:60:
                    f3:c2:dd:7b:8f:53:5f:43:f6:98:62:37:f0:cd:4f:
                    ca:2f:b7:c4:0f:d0:f0:37:1e:19:06:1a:d4:8d:b4:
                    10:09:8e:12:23:5a:06:4d:7e:37:09:38:e6:58:01:
                    ba:57:7f:88:36:d3:97:d2:95:26:4f:70:cc:4e:ba:
                    c3:05:db:6f:21:f9:04:38:14:f6:7a:1b:29:89:43:
                    ce:f4:49:6c:d2:58:87:05:bb:17:81:9e:5c:e2:26:
                    2f:44:e5:54:ec:06:25:da:26:0d:fe:92:16:00:6e:
                    75:99:b2:62:c0:bd:c5:10:78:6f:45:8d:1f:16:fa:
                    39:2c:d2:27:92:0b:2f:af:a1:f6:f6:14:c8:b2:c2:
                    f6:67:9e:50:84:76:5f:bc:21:11:df:7f:02:16:5a:
                    b8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:17:DA:17:47:C3:D8:14:3E:7E:38:35:DA:97:14:B2:79:3F:83:C0
            X509v3 Authority Key Identifier:
                keyid:AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/PxfaF0fD2BQ-fjg12pcUsnk_g8A.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:63:59:ea:e1:83:ac:7e:dc:3d:0a:21:12:77:6c:06:a6:cd:
         57:c9:3c:3c:75:dc:e9:b9:2a:3c:85:a0:b2:8a:26:28:e7:a6:
         db:10:92:35:e8:37:40:f5:00:f8:42:c2:18:e1:65:51:39:dc:
         62:a6:92:de:0b:3b:6f:99:98:69:7f:dc:3e:45:b8:8d:8c:fb:
         91:19:39:df:1b:1c:88:52:86:df:3f:2c:b9:d3:b1:6d:18:5e:
         9e:85:1f:a5:b2:17:10:0a:21:f9:99:c2:77:8f:4d:98:4e:ac:
         33:db:b5:5f:52:74:14:02:10:61:6a:38:58:8f:24:33:6a:87:
         a7:64:0a:5c:1f:a1:48:34:20:88:48:ba:ac:51:a4:2a:60:0f:
         d2:39:a8:06:56:ab:00:2a:e5:1e:27:8e:3e:53:c2:dc:69:17:
         f8:e6:2c:6d:4e:df:19:34:57:40:0f:55:92:0f:d9:43:49:85:
         a5:85:5f:d4:b1:88:8d:cc:43:20:92:3d:2b:51:97:94:7b:ce:
         ee:24:cf:1b:48:0c:24:57:8b:6e:4f:56:04:fb:a9:be:db:dd:
         e1:8c:eb:2c:3a:5f:ee:79:d6:ea:8c:66:f0:e1:c4:52:03:1a:
         da:c8:d4:0b:68:4c:27:fb:c0:25:67:f0:6c:bb:6f:1a:f3:ab:
         ca:7b:18:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:11 2024 by rpki-client on console-ams.rpki-client.org