Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/1QaP2TJKJvVZ7dDpGdk1ueTQyNM.roa
File:                     1QaP2TJKJvVZ7dDpGdk1ueTQyNM.roa (raw, json)
Hash identifier:          jOIG6WieplKhCBb6BJsjTxX0I+BEs03qE1O9VOc0LiQ=
Subject key identifier:   D5:06:8F:D9:32:4A:26:F5:59:ED:D0:E9:19:D9:35:B9:E4:D0:C8:D3
Certificate issuer:       /CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
Certificate serial:       0998
Authority key identifier: 00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/1QaP2TJKJvVZ7dDpGdk1ueTQyNM.roa
Signing time:             Wed 29 Sep 2021 02:44:39 +0000
ROA not before:           Wed 29 Sep 2021 02:44:39 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38047
IP address blocks:        2402:c340:cacb::/48 maxlen: 64

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2456 (0x998)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
        Validity
            Not Before: Sep 29 02:44:39 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=D5068FD9324A26F559EDD0E919D935B9E4D0C8D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:52:d8:d4:ba:ef:1c:ed:2e:4f:44:a1:a0:00:
                    e2:07:e1:80:01:64:fd:b0:69:08:71:41:ea:81:3d:
                    46:8b:0f:28:bd:bf:ee:70:6d:5a:81:ad:8e:ac:07:
                    17:e3:fc:f9:e5:21:65:b2:cb:6e:60:4c:2c:79:c4:
                    e6:23:52:20:5c:e3:a4:42:a1:c8:db:9c:42:60:eb:
                    1e:9b:73:ba:bd:6a:6e:88:d5:8f:d5:d9:e0:53:97:
                    c0:61:dc:8f:de:4f:61:e6:85:19:a2:e9:e8:54:29:
                    4f:6f:60:35:a5:5b:91:cf:60:36:ad:ee:47:ce:cd:
                    99:f1:1a:08:be:3c:67:3a:43:62:39:e0:79:76:a4:
                    72:0c:ac:93:7f:b9:a3:f4:2b:62:50:85:8d:c0:a1:
                    8b:20:64:77:24:c8:80:81:7f:6b:c5:88:b2:19:fb:
                    72:61:63:e3:b9:45:fc:00:2c:a7:32:11:69:03:40:
                    69:de:5e:a0:0d:47:93:74:d6:81:da:e1:77:8a:b8:
                    fc:7a:bc:ef:dd:9e:af:4e:9c:dd:ca:4b:4e:00:41:
                    36:fc:6d:9b:ed:bf:31:64:6c:06:fc:04:1f:99:d7:
                    d6:be:85:9d:51:07:9e:dd:bd:c9:1e:90:1a:3b:53:
                    cb:e1:1d:ea:a8:09:4f:54:16:2e:77:55:1f:ac:29:
                    dd:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:06:8F:D9:32:4A:26:F5:59:ED:D0:E9:19:D9:35:B9:E4:D0:C8:D3
            X509v3 Authority Key Identifier:
                keyid:00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/1QaP2TJKJvVZ7dDpGdk1ueTQyNM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:c340:cacb::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:f9:92:d9:a6:89:2a:02:f7:ea:bd:0f:bc:b6:4a:e9:a2:02:
         44:17:ab:7a:3f:dc:5f:a5:83:66:cd:eb:d7:6c:3d:ce:9d:7d:
         60:39:d0:c9:50:5d:a5:6d:fb:67:e0:d7:43:60:3b:43:34:83:
         11:d2:31:91:87:fc:88:81:76:5c:5c:56:75:f7:79:0e:9f:5d:
         0e:c5:80:22:35:2b:73:37:0b:6f:92:47:64:02:09:d0:e5:f4:
         34:e4:e1:59:7c:e5:f3:7d:10:c4:b5:45:e4:46:60:10:fd:d7:
         26:af:68:8b:d4:19:86:a0:0c:51:2d:df:3c:5a:ad:07:0e:f6:
         a8:57:86:bc:6a:25:18:e8:2b:e2:0c:2d:9b:b0:33:53:ef:2a:
         1d:fc:41:61:1d:f5:0c:b7:9f:c1:63:ad:67:11:18:a9:ed:84:
         9a:3f:b8:76:e2:4e:9c:30:a7:f7:cc:82:09:ef:be:b9:de:31:
         8f:4b:6d:fd:67:1a:9b:85:7c:70:e5:c5:c4:f6:a1:32:17:f9:
         0d:7d:c7:c5:5e:93:6a:77:5f:05:c0:56:90:66:14:11:2e:67:
         b8:bd:03:2c:b4:f5:87:01:f0:68:e9:c6:d9:7f:4c:4d:b2:99:
         c9:0d:60:45:59:3f:d8:61:8d:91:8e:68:80:c2:f5:42:35:05:
         d8:cd:eb:22
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:44 2024 by rpki-client on console-fra.rpki-client.org