Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/aEZPCj0ZzzerrVlzMyJg4SwbecY.roa
File:                     aEZPCj0ZzzerrVlzMyJg4SwbecY.roa (raw, json)
Hash identifier:          arO88IpGS6MdXGFS3EKYQEVwISM6+PcybCZM/qLLgDs=
Subject key identifier:   68:46:4F:0A:3D:19:CF:37:AB:AD:59:73:33:22:60:E1:2C:1B:79:C6
Certificate issuer:       /CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864
Certificate serial:       04DD
Authority key identifier: AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/aEZPCj0ZzzerrVlzMyJg4SwbecY.roa
Signing time:             Thu 15 Sep 2022 02:38:24 +0000
ROA not before:           Thu 15 Sep 2022 02:38:24 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     17415
IP address blocks:        2406:3540::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1245 (0x4dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864
        Validity
            Not Before: Sep 15 02:38:24 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=68464F0A3D19CF37ABAD5973332260E12C1B79C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b6:8b:b9:33:37:ff:fc:c9:1d:2b:f1:f7:fc:
                    3b:70:00:ad:f7:6d:ba:8f:97:b1:89:83:2b:c7:91:
                    8c:5b:0e:fc:d7:4e:57:70:8b:23:de:80:f4:98:8c:
                    3c:b3:c5:0d:c2:df:ab:c8:1d:64:72:42:1c:6e:54:
                    81:f5:8f:f9:37:fa:3b:75:49:80:74:05:c8:7a:38:
                    de:bc:72:4b:22:59:99:19:64:50:96:5a:75:02:39:
                    9e:6a:26:f5:29:39:b6:31:73:58:c6:d2:3b:e5:c5:
                    61:59:2c:eb:30:76:85:6a:78:da:af:65:6a:2e:de:
                    09:7d:7f:09:b0:d4:61:85:37:89:8e:ea:95:0a:61:
                    aa:c0:e6:ef:95:4f:82:49:f7:e6:5c:9e:a1:6b:67:
                    49:b4:6c:e1:3f:fb:c6:6a:d7:ed:05:7d:33:9c:c5:
                    fc:ac:c8:e1:5e:fa:f9:dd:99:19:84:80:a2:f3:25:
                    ad:ad:19:32:2d:e6:0b:e1:60:13:6b:95:48:56:71:
                    a6:a8:8a:0a:69:35:17:ab:52:76:fb:3f:bd:55:37:
                    b3:87:04:c1:d5:6d:de:fd:d4:4e:eb:55:ac:2a:a8:
                    1f:38:a8:89:7a:90:49:fe:7d:42:bf:e7:5c:9c:f1:
                    43:84:2c:b1:3a:09:ef:bc:74:28:19:7d:d6:53:f4:
                    9e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:46:4F:0A:3D:19:CF:37:AB:AD:59:73:33:22:60:E1:2C:1B:79:C6
            X509v3 Authority Key Identifier:
                keyid:AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/aEZPCj0ZzzerrVlzMyJg4SwbecY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:3540::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:79:de:f4:44:69:34:78:bb:64:fc:e5:6d:7a:c4:25:2e:cb:
         70:40:8e:7e:2e:b8:d8:28:bc:38:c7:70:53:ad:1d:56:cb:eb:
         80:cc:42:53:e9:b6:10:43:3f:0a:49:20:18:34:65:e1:f6:15:
         b8:79:4f:70:d1:08:f8:8f:a3:68:8b:10:b4:ae:10:c6:4f:ee:
         e2:21:22:38:d1:e8:88:0b:51:06:7a:29:00:50:a5:0a:37:45:
         4a:c7:db:0e:4c:a1:e2:a5:34:3c:68:b2:69:56:3e:c8:08:83:
         63:48:31:07:65:ae:7a:14:19:4c:44:a4:c5:f3:24:d0:e6:ac:
         69:3a:be:ac:0f:dd:fc:fb:4e:84:e4:05:3f:aa:c0:ab:d3:39:
         2a:79:cb:1f:d6:7b:81:76:65:31:35:24:3b:d5:e1:0d:0a:77:
         b9:2d:24:81:43:01:02:d3:e2:c5:23:c5:bf:84:bb:89:96:6c:
         18:2e:37:05:90:e1:27:2b:13:c4:11:b5:f7:fe:17:d4:fc:27:
         e9:85:d9:c0:3c:2f:71:9d:6d:58:6f:62:42:30:8d:94:83:b3:
         a1:5d:e3:37:9b:4e:d2:7e:cc:fd:83:13:dc:fd:44:ae:99:95:
         f5:ba:cb:c0:c7:95:f8:ab:83:f9:55:d7:41:14:5c:d7:34:8e:
         ab:d8:6f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:39 2024 by rpki-client on console-fra.rpki-client.org