Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/Abc15auhWmd-xtix11tHovUINsw.roa
File:                     Abc15auhWmd-xtix11tHovUINsw.roa (raw, json)
Hash identifier:          YOEVhwD6FpMQzb8aFZs5X6qQRSmogOvtlzSpkEg9bwI=
Subject key identifier:   01:B7:35:E5:AB:A1:5A:67:7E:C6:D8:B1:D7:5B:47:A2:F5:08:36:CC
Certificate issuer:       /CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
Certificate serial:       0AA4
Authority key identifier: 00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/Abc15auhWmd-xtix11tHovUINsw.roa
Signing time:             Thu 15 Sep 2022 02:44:10 +0000
ROA not before:           Thu 15 Sep 2022 02:44:10 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38047
IP address blocks:        2402:c340:54::/48 maxlen: 64

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2724 (0xaa4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
        Validity
            Not Before: Sep 15 02:44:10 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=01B735E5ABA15A677EC6D8B1D75B47A2F50836CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:96:0b:9c:c9:36:ba:d2:a7:93:5f:4d:71:b1:
                    3d:24:86:51:ff:b1:8b:f0:41:eb:21:ff:17:1f:f9:
                    86:2d:85:a6:2c:fe:4c:ac:74:75:8a:47:90:4d:4e:
                    24:a0:3f:4d:14:af:02:2a:a5:b9:a4:49:57:1b:fb:
                    90:ff:12:6f:d2:93:57:bd:95:97:1a:46:3d:62:78:
                    4e:2d:e1:15:1a:d5:7c:6d:19:c9:17:f1:9f:26:b7:
                    31:cc:d5:0a:4c:ac:24:a5:f4:d9:9b:8c:e8:cf:82:
                    c5:60:c6:7b:e6:cb:a9:59:d1:7c:8e:62:46:0d:66:
                    6e:2b:40:66:3f:75:c2:e9:6a:e0:fa:97:9f:ee:28:
                    d9:62:53:53:01:83:f9:7e:1b:e4:52:fa:22:05:2a:
                    de:82:9d:31:a3:5b:e0:27:48:b0:a8:4e:47:8c:6f:
                    ff:3b:0b:03:62:97:51:6f:4f:21:80:48:c8:19:8d:
                    ee:ee:50:dc:e9:81:99:5e:9e:0b:77:eb:7e:ad:f0:
                    da:31:ae:ac:0e:36:be:23:06:54:eb:14:b9:28:72:
                    28:11:df:69:48:d3:4e:14:4b:49:da:93:a0:68:73:
                    16:2f:70:1b:f2:5b:51:94:bc:a1:8f:fe:5f:a3:fa:
                    25:fa:1b:ed:5c:a3:98:95:aa:94:49:ca:2d:64:8a:
                    43:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B7:35:E5:AB:A1:5A:67:7E:C6:D8:B1:D7:5B:47:A2:F5:08:36:CC
            X509v3 Authority Key Identifier:
                keyid:00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/Abc15auhWmd-xtix11tHovUINsw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:c340:54::/48

    Signature Algorithm: sha256WithRSAEncryption
         02:fd:e3:0e:89:88:3a:a5:dc:9e:17:d0:2a:c2:64:8f:76:03:
         65:b2:ee:9f:d3:06:24:e1:4c:98:c8:ab:26:6c:97:72:c1:f8:
         ef:65:9a:5f:a5:0f:fb:ec:f0:d0:da:85:6d:99:d9:4c:8e:26:
         ef:72:f1:3a:d8:ad:12:74:72:4c:dd:9b:fa:c1:11:f6:0a:28:
         e0:3c:82:42:c5:1f:5a:ec:79:e5:80:ae:2a:69:e1:a2:e5:44:
         89:58:2d:68:15:51:02:ae:64:60:e5:8f:89:ce:12:bc:1d:c4:
         17:a7:cd:63:79:9d:0f:78:bc:ca:dc:80:a3:5f:ee:f7:d2:be:
         84:ba:c7:73:6b:bb:ee:d8:fe:d9:b0:ae:01:8b:51:9a:4a:60:
         1b:a2:c0:6d:c5:6f:51:74:91:5e:46:4b:f0:ad:91:20:62:82:
         77:1e:76:fd:86:e8:dd:d2:e4:de:a0:02:1e:fe:7e:97:6c:b8:
         12:8e:ba:80:32:da:d7:56:0c:9f:d9:aa:5b:e4:a4:61:75:58:
         e0:f2:84:17:79:69:a5:17:10:cd:53:19:4c:ef:58:4a:d2:51:
         3f:9d:47:6c:bf:f2:57:8c:93:ea:b9:98:09:b7:b8:45:59:3e:
         b2:ff:b4:e4:70:54:a2:ac:66:19:bf:c0:7d:6f:c6:73:54:f7:
         f4:07:d9:79
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:20 2024 by rpki-client on console-ams.rpki-client.org