Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/eYH_LP0Nr7mwBexhRX5Fq2i9XfY.roa
File:                     eYH_LP0Nr7mwBexhRX5Fq2i9XfY.roa (raw, json)
Hash identifier:          Uzo07W2KPo66PaygVCLLidQAO/Rsb6g8GIas8n+fXAY=
Subject key identifier:   79:81:FF:2C:FD:0D:AF:B9:B0:05:EC:61:45:7E:45:AB:68:BD:5D:F6
Certificate issuer:       /CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864
Certificate serial:       04DD
Authority key identifier: AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/eYH_LP0Nr7mwBexhRX5Fq2i9XfY.roa
Signing time:             Thu 15 Sep 2022 02:38:22 +0000
ROA not before:           Thu 15 Sep 2022 02:38:22 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     17415
IP address blocks:        2406:3540:fff0::/46 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1245 (0x4dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864
        Validity
            Not Before: Sep 15 02:38:22 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=7981FF2CFD0DAFB9B005EC61457E45AB68BD5DF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7e:67:93:27:a5:23:95:de:8a:bd:da:ff:af:
                    75:c9:fa:2b:45:55:43:b9:36:f0:5d:48:99:67:be:
                    94:ca:9e:25:8c:28:0c:ef:e0:f9:b5:5c:14:a5:ec:
                    d1:68:e1:02:d7:e3:fc:cc:5a:67:c7:ad:77:53:19:
                    d7:4e:3f:2c:8c:f0:2f:82:d6:3f:06:3c:ee:67:44:
                    0f:f6:4e:4f:56:8f:b3:2b:ca:f1:61:fa:97:70:d1:
                    c2:e8:15:e8:35:da:cf:0e:9f:6b:e1:de:35:5f:7c:
                    bf:f9:9d:e4:25:e3:7c:25:50:43:e1:5a:bd:fd:56:
                    5e:db:37:a6:66:15:6d:2d:fe:83:cd:cf:dd:83:88:
                    84:c9:9a:80:5b:06:7d:28:a7:0a:fc:e3:72:e7:40:
                    15:ac:c1:86:49:02:1a:b8:d8:3b:b1:2a:80:27:9d:
                    04:be:69:63:cb:56:e5:95:a1:1d:26:bc:00:0f:26:
                    1f:ac:38:d1:4b:f0:e3:fd:e5:30:9b:a4:04:d8:47:
                    16:1e:88:b4:3f:03:00:31:75:18:c6:de:c8:ff:b8:
                    35:cf:e4:3d:1b:53:44:62:5d:74:db:58:e5:ac:7b:
                    41:81:9d:53:1b:d1:8c:01:aa:d2:30:ce:95:4d:75:
                    e0:a3:19:a0:c8:cb:cb:b7:67:78:f8:b1:f5:5c:3d:
                    b3:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:81:FF:2C:FD:0D:AF:B9:B0:05:EC:61:45:7E:45:AB:68:BD:5D:F6
            X509v3 Authority Key Identifier:
                keyid:AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/eYH_LP0Nr7mwBexhRX5Fq2i9XfY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:3540:fff0::/46

    Signature Algorithm: sha256WithRSAEncryption
         b2:6a:d9:1d:90:6e:72:a5:f6:a7:aa:55:ea:10:82:dd:7c:d9:
         fd:f4:e5:4b:9e:c0:7d:cf:1c:af:a8:9f:7f:dc:1e:6f:57:28:
         bb:79:df:e4:5c:2c:db:c0:a7:a4:3b:8e:09:0d:78:49:9d:88:
         6a:38:50:7b:52:d5:f7:67:48:93:7b:8d:d7:3a:e0:ff:ec:3f:
         0a:91:e2:14:ad:e7:31:a3:b2:3a:41:5e:dd:a2:73:b4:1d:41:
         90:2c:c3:73:8d:56:d5:dc:3d:dd:07:06:f2:7c:99:2a:d3:aa:
         34:f6:bf:6e:c7:69:b4:91:36:53:d3:91:17:83:a2:cf:61:a5:
         79:59:17:ec:c5:12:be:58:b4:c4:9e:72:58:11:62:79:66:21:
         66:df:b3:2f:4a:5f:1c:c7:b8:fe:d6:d9:ed:db:a4:56:2a:f3:
         51:72:c3:2e:e7:be:ce:10:db:94:0f:51:1c:a1:1c:a2:79:43:
         cc:11:42:ab:d6:04:77:3f:25:b6:1e:7d:80:b2:6b:f1:2d:61:
         e3:25:aa:50:27:f8:bd:de:8d:ef:d0:1a:07:fa:a5:b9:74:a9:
         d7:b5:67:e9:13:93:7a:39:9f:d2:8a:ef:d0:bb:bd:63:9e:de:
         41:6d:91:ae:32:57:c7:2f:a3:9f:4b:73:39:86:d1:0b:ac:9d:
         be:10:f9:ad
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICBN0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQURG
RTZFNTZEQUY4NDkyRUM3REU4OEIzQTkwNkIzMTM5QjU1Qjg2NDAeFw0yMjA5MTUw
MjM4MjJaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDc5ODFGRjJDRkQwREFG
QjlCMDA1RUM2MTQ1N0U0NUFCNjhCRDVERjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDAfmeTJ6Ujld6Kvdr/r3XJ+itFVUO5NvBdSJlnvpTKniWMKAzv
4Pm1XBSl7NFo4QLX4/zMWmfHrXdTGddOPyyM8C+C1j8GPO5nRA/2Tk9Wj7MryvFh
+pdw0cLoFeg12s8On2vh3jVffL/5neQl43wlUEPhWr39Vl7bN6ZmFW0t/oPNz92D
iITJmoBbBn0opwr843LnQBWswYZJAhq42DuxKoAnnQS+aWPLVuWVoR0mvAAPJh+s
ONFL8OP95TCbpATYRxYeiLQ/AwAxdRjG3sj/uDXP5D0bU0RiXXTbWOWse0GBnVMb
0YwBqtIwzpVNdeCjGaDIy8u3Z3j4sfVcPbMZAgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQUeYH/LP0Nr7mwBexhRX5Fq2i9XfYwHwYDVR0jBBgwFoAUrf5uVtr4SS7H3oiz
qQazE5tVuGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR1lJ
VEVBL3JmNXVWdHI0U1M3SDNvaXpxUWF6RTV0VnVHUS5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvcmY1dVZ0cjRTUzdIM29penFRYXpFNXRWdUdRLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR1lJVEVBL2VZSF9MUDBOcjdt
d0JleGhSWDVGcTJpOVhmWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwIkBjVA//AwDQYJKoZIhvcNAQELBQADggEBALJq2R2QbnKl9qeqVeoQgt18
2f305UuewH3PHK+on3/cHm9XKLt53+RcLNvAp6Q7jgkNeEmdiGo4UHtS1fdnSJN7
jdc64P/sPwqR4hSt5zGjsjpBXt2ic7QdQZAsw3ONVtXcPd0HBvJ8mSrTqjT2v27H
abSRNlPTkReDos9hpXlZF+zFEr5YtMSeclgRYnlmIWbfsy9KXxzHuP7W2e3bpFYq
81Fywy7nvs4Q25QPURyhHKJ5Q8wRQqvWBHc/JbYefYCya/EtYeMlqlAn+L3eje/Q
Ggf6pbl0qde1Z+kTk3o5n9KK79C7vWOe3kFtka4yV8cvo59LczmG0Qusnb4Q+a0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:39 2024 by rpki-client on console-fra.rpki-client.org