Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/tUtVFRj_sPgnb86upmtB-uxGDu8.roa
File:                     tUtVFRj_sPgnb86upmtB-uxGDu8.roa (raw, json)
Hash identifier:          YBrmdMpc3beAMlUP1BxNU7hGS3X0hOO3Ufx7wJjMPtM=
Subject key identifier:   B5:4B:55:15:18:FF:B0:F8:27:6F:CE:AE:A6:6B:41:FA:EC:46:0E:EF
Certificate issuer:       /CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864
Certificate serial:       04DD
Authority key identifier: AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/tUtVFRj_sPgnb86upmtB-uxGDu8.roa
Signing time:             Thu 15 Sep 2022 02:38:22 +0000
ROA not before:           Thu 15 Sep 2022 02:38:22 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24171
IP address blocks:        2406:3540:fff4::/46 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1245 (0x4dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864
        Validity
            Not Before: Sep 15 02:38:22 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=B54B551518FFB0F8276FCEAEA66B41FAEC460EEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:23:c6:ff:31:c2:16:a4:f6:a9:f5:d4:3d:e3:
                    95:bc:ec:14:e5:ed:ed:13:bf:d2:6b:d3:2d:4c:d2:
                    13:c4:99:26:a1:11:aa:4b:33:8f:83:5e:ba:1c:64:
                    9c:4a:f3:1b:91:c2:41:9e:14:24:7c:e6:0b:09:63:
                    d8:26:c1:8e:41:e0:49:96:2a:d4:c5:a8:b6:53:35:
                    01:5f:2c:1d:71:03:38:31:3a:10:aa:b8:74:ae:d6:
                    35:63:05:bb:d3:a2:4e:b4:6d:ea:1d:f2:8a:95:d7:
                    1e:dd:fe:df:0f:5e:7d:9e:39:04:9f:5d:a3:56:f5:
                    d2:f5:be:17:bd:27:f7:e4:78:14:3c:71:23:c0:93:
                    71:e0:99:02:89:a6:f3:a3:23:d1:f9:cf:0a:04:4d:
                    08:4b:4d:e0:76:43:67:5e:d2:6f:c4:bf:45:1a:a2:
                    c2:c8:34:cf:f1:66:e3:93:72:0c:d9:75:a9:4f:d8:
                    dc:67:ac:25:a0:e7:40:30:8c:06:c3:4f:99:4e:b4:
                    87:7d:61:63:8b:6b:61:ba:cc:44:b2:42:0c:59:b5:
                    1d:8d:6e:f3:21:9d:c0:fb:1b:03:75:82:9b:e3:4b:
                    8e:b1:a6:a2:12:d4:31:12:6d:8e:25:ba:56:8f:c4:
                    cf:fb:a3:ed:79:17:63:24:31:1f:e0:3a:64:6b:34:
                    6c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:4B:55:15:18:FF:B0:F8:27:6F:CE:AE:A6:6B:41:FA:EC:46:0E:EF
            X509v3 Authority Key Identifier:
                keyid:AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/tUtVFRj_sPgnb86upmtB-uxGDu8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:3540:fff4::/46

    Signature Algorithm: sha256WithRSAEncryption
         93:d6:99:b5:8e:f5:23:0e:64:a5:80:7d:6c:10:b5:c1:6d:9b:
         8a:6e:75:58:c1:86:7e:5f:3c:93:bc:ab:39:44:77:ea:38:cd:
         13:48:ac:af:18:ea:79:6a:a5:f8:01:aa:00:d4:02:64:a7:25:
         08:f2:a7:01:cc:53:aa:95:c3:26:c3:c0:29:76:68:db:85:0b:
         c6:a8:2c:5f:64:5e:6d:3a:b5:63:9e:9d:40:97:b3:ed:51:c0:
         ae:3f:f5:be:e0:31:f6:2a:8a:8b:57:f4:43:28:9f:00:05:8c:
         ca:c4:cc:42:9f:f6:d3:af:fe:75:29:6a:44:0a:a9:a4:09:8f:
         18:60:39:b5:63:72:7d:d7:88:d7:4d:81:9c:63:a1:43:98:ef:
         87:70:e3:61:27:db:89:0b:0e:54:6f:9b:c3:5a:ff:53:e3:44:
         5f:bf:16:d3:00:95:2d:f5:30:02:f3:a2:75:f5:68:90:24:8b:
         0a:4c:7e:e5:a2:bb:a4:5e:34:93:8a:4b:7c:04:41:ab:55:98:
         be:6e:9e:de:e6:3e:5c:64:15:63:1a:66:14:ba:79:50:e2:f1:
         34:e0:97:3d:5a:e0:c5:f7:c4:91:93:f2:5a:a7:f6:bc:10:10:
         5a:86:44:a4:3e:85:de:73:00:36:41:34:98:49:48:d1:3f:15:
         dd:d8:c4:02
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:11 2024 by rpki-client on console-ams.rpki-client.org