Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/N8KV-QGEoJE4QZ8GzlGioMHACn4.roa
File:                     N8KV-QGEoJE4QZ8GzlGioMHACn4.roa (raw, json)
Hash identifier:          lFVsCpvCoaDo1z+SUXZBsCmvB9Og60TCyCpv70s+UKQ=
Subject key identifier:   37:C2:95:F9:01:84:A0:91:38:41:9F:06:CE:51:A2:A0:C1:C0:0A:7E
Certificate issuer:       /CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
Certificate serial:       0AA4
Authority key identifier: 00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/N8KV-QGEoJE4QZ8GzlGioMHACn4.roa
Signing time:             Thu 15 Sep 2022 02:44:12 +0000
ROA not before:           Thu 15 Sep 2022 02:44:12 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38047
IP address blocks:        2402:c340::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2724 (0xaa4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
        Validity
            Not Before: Sep 15 02:44:12 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=37C295F90184A09138419F06CE51A2A0C1C00A7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a8:ac:54:63:fe:c8:f0:29:41:9a:17:fa:51:
                    49:5b:91:0c:b2:ae:04:bc:f3:de:ef:01:ae:b5:56:
                    36:47:19:1b:17:c4:be:7a:53:b8:8e:80:c7:e7:f1:
                    0c:31:6e:5b:32:cf:14:d5:51:8f:0d:79:1f:37:4a:
                    db:06:e7:9f:48:10:c5:b1:87:14:b3:81:69:48:fb:
                    4e:a6:5c:8c:4a:3f:55:93:70:8b:64:dc:08:5c:43:
                    f5:af:4e:ab:10:c1:95:25:97:46:51:06:31:aa:e3:
                    db:b3:e2:be:ec:95:7e:89:34:3e:f1:d7:b2:01:4d:
                    69:2b:65:19:e2:0f:83:1f:da:d5:16:14:1c:f1:c2:
                    2a:7b:85:46:d5:46:a7:a9:2a:70:e2:33:ce:fa:40:
                    e3:e3:23:cc:65:cc:77:5b:2a:5a:f7:8a:d1:ae:ba:
                    ed:48:68:93:d5:71:4e:85:13:55:b5:87:39:19:b1:
                    87:a6:e7:89:37:e4:fa:65:6f:5d:45:de:68:4e:bf:
                    f4:73:59:62:75:29:12:79:e8:72:60:be:49:bd:ba:
                    4a:98:5e:93:bc:ea:eb:10:48:75:55:f4:f2:32:47:
                    b5:7f:24:39:36:11:4a:ae:c2:c9:c7:61:ea:b8:07:
                    8f:c4:30:b4:da:07:ff:6a:4e:14:d2:08:91:c3:d3:
                    3c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:C2:95:F9:01:84:A0:91:38:41:9F:06:CE:51:A2:A0:C1:C0:0A:7E
            X509v3 Authority Key Identifier:
                keyid:00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/N8KV-QGEoJE4QZ8GzlGioMHACn4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:c340::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:00:b0:42:82:f3:bb:0a:57:69:50:f1:a6:1a:f2:a7:f0:f4:
         89:45:42:3c:63:79:34:54:53:92:7c:a4:6c:c2:1e:bd:7c:74:
         1c:6c:23:a1:ee:2e:4f:9d:4d:57:68:43:03:45:eb:e7:f5:2d:
         f3:7e:9f:93:fb:0e:c7:92:1a:42:f6:bc:7a:b4:6c:c4:83:bd:
         f2:96:24:b3:de:e3:eb:44:eb:07:e6:73:63:66:96:b2:85:5a:
         d5:ef:38:a8:18:fe:53:db:3f:db:95:87:97:29:cf:8c:7d:bb:
         83:3f:c1:b9:a3:59:3c:8d:b4:a7:17:27:44:20:ca:27:e8:d6:
         78:e4:b9:f4:2a:ae:f2:53:f6:bd:65:d3:26:53:05:15:21:95:
         47:31:2f:fc:72:87:5a:d3:bb:f3:dd:ee:4e:45:9b:8a:d8:d2:
         36:09:ed:bc:25:a5:24:74:6c:a7:65:80:82:62:fd:62:ef:15:
         c2:30:bb:c1:80:1e:72:51:26:3b:99:5c:a7:a9:d5:26:e2:57:
         90:07:52:fd:86:50:57:18:95:8a:02:58:72:3d:2a:4a:e0:76:
         29:b8:f0:55:63:49:ee:a2:be:3f:d2:ae:78:ec:8e:85:f3:6e:
         86:f1:a5:33:03:55:3d:77:cc:57:ee:f2:65:85:8a:89:03:49:
         35:29:3f:00
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgICCqQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDA1
NzJFOTlDNjRFRDY1MkZBODFENTAxRUZBMTZDRjlENDRBRTk5QzAeFw0yMjA5MTUw
MjQ0MTJaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDM3QzI5NUY5MDE4NEEw
OTEzODQxOUYwNkNFNTFBMkEwQzFDMDBBN0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDlqKxUY/7I8ClBmhf6UUlbkQyyrgS8897vAa61VjZHGRsXxL56
U7iOgMfn8QwxblsyzxTVUY8NeR83StsG559IEMWxhxSzgWlI+06mXIxKP1WTcItk
3AhcQ/WvTqsQwZUll0ZRBjGq49uz4r7slX6JND7x17IBTWkrZRniD4Mf2tUWFBzx
wip7hUbVRqepKnDiM876QOPjI8xlzHdbKlr3itGuuu1IaJPVcU6FE1W1hzkZsYem
54k35Pplb11F3mhOv/RzWWJ1KRJ56HJgvkm9ukqYXpO86usQSHVV9PIyR7V/JDk2
EUquwsnHYeq4B4/EMLTaB/9qThTSCJHD0zzhAgMBAAGjggH1MIIB8TAdBgNVHQ4E
FgQUN8KV+QGEoJE4QZ8GzlGioMHACn4wHwYDVR0jBBgwFoAUAFcumcZO1lL6gdUB
76Fs+dRK6ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0hJTkNI
RU5HL0FGY3VtY1pPMWxMNmdkVUI3NkZzLWRSSzZady5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvQUZjdW1jWk8xbEw2Z2RVQjc2RnMtZFJLNlp3LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0hJTkNIRU5HL044S1YtUUdFb0pF
NFFaOEd6bEdpb01IQUNuNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC
MAcDBQAkAsNAMA0GCSqGSIb3DQEBCwUAA4IBAQAcALBCgvO7CldpUPGmGvKn8PSJ
RUI8Y3k0VFOSfKRswh69fHQcbCOh7i5PnU1XaEMDRevn9S3zfp+T+w7HkhpC9rx6
tGzEg73yliSz3uPrROsH5nNjZpayhVrV7zioGP5T2z/blYeXKc+MfbuDP8G5o1k8
jbSnFydEIMon6NZ45Ln0Kq7yU/a9ZdMmUwUVIZVHMS/8coda07vz3e5ORZuK2NI2
Ce28JaUkdGynZYCCYv1i7xXCMLvBgB5yUSY7mVynqdUm4leQB1L9hlBXGJWKAlhy
PSpK4HYpuPBVY0nuor4/0q547I6F826G8aUzA1U9d8xX7vJlhYqJA0k1KT8A
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:44 2024 by rpki-client on console-fra.rpki-client.org