Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/_-j1et4yQNm_WNACP2hlyWMUDz0.roa
File:                     _-j1et4yQNm_WNACP2hlyWMUDz0.roa (raw, json)
Hash identifier:          kBRHmI9ie4wIrdE2GdgrGewIWVST9JMTOUsCv8gIiZU=
Subject key identifier:   FF:E8:F5:7A:DE:32:40:D9:BF:58:D0:02:3F:68:65:C9:63:14:0F:3D
Certificate issuer:       /CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
Certificate serial:       0AA4
Authority key identifier: 00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/_-j1et4yQNm_WNACP2hlyWMUDz0.roa
Signing time:             Thu 15 Sep 2022 02:44:10 +0000
ROA not before:           Thu 15 Sep 2022 02:44:10 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38047
IP address blocks:        2402:c340:eeee::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2724 (0xaa4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
        Validity
            Not Before: Sep 15 02:44:10 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=FFE8F57ADE3240D9BF58D0023F6865C963140F3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e6:75:45:64:9b:50:af:46:1d:72:9c:a2:9b:
                    ac:09:41:51:18:b2:e0:84:11:32:b6:01:dd:37:dc:
                    7c:45:04:cd:fa:e4:e9:29:d5:6d:3a:4e:36:c7:56:
                    fc:0c:e9:5f:8e:22:db:18:ac:4d:87:45:34:53:17:
                    ea:43:32:6a:61:d0:0c:9f:e6:86:af:09:0f:81:61:
                    e1:65:17:04:de:f2:f5:01:4a:11:2f:e3:0a:d4:a9:
                    53:72:17:e6:11:7f:53:25:fb:e3:78:d9:94:bd:58:
                    70:d6:3e:f6:bf:4f:1b:46:29:1f:e2:8e:e5:43:bb:
                    9f:a9:c6:df:1e:04:5c:c2:67:9e:29:c4:ee:d3:23:
                    5d:55:84:4d:ee:de:cf:c0:ba:55:e2:4b:e3:b9:8c:
                    be:fb:0f:ff:3f:26:ee:0f:3f:09:b1:93:92:8b:f2:
                    1f:dc:bc:8c:c6:cb:34:3c:6c:a6:06:28:5d:9b:b1:
                    87:d6:38:db:0b:56:0c:bd:3e:70:f8:2c:68:87:18:
                    a3:d1:9a:76:4f:89:b5:dd:ca:58:00:e3:bd:0c:23:
                    ce:e4:c5:2a:7e:79:62:7b:ac:54:c5:53:ce:ef:17:
                    8c:51:3e:1b:7d:f7:77:89:98:12:11:ac:83:25:78:
                    59:05:10:b7:49:59:2b:a0:90:8c:cc:f1:bc:d1:cd:
                    a1:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:E8:F5:7A:DE:32:40:D9:BF:58:D0:02:3F:68:65:C9:63:14:0F:3D
            X509v3 Authority Key Identifier:
                keyid:00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/_-j1et4yQNm_WNACP2hlyWMUDz0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:c340:eeee::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:e8:9d:06:92:37:ee:6d:f6:15:8a:b5:8a:a4:87:5c:dd:e7:
         5a:c4:8e:da:df:01:dd:be:27:8a:de:02:f0:4e:26:a1:dc:2d:
         9a:3a:58:c3:32:3b:c5:8d:e9:cf:6a:85:1b:98:a4:77:c8:62:
         2c:c8:a4:e7:32:7e:40:30:44:4a:68:71:dd:3d:f8:2f:97:cb:
         6a:74:d3:a6:bc:4b:62:f3:13:0a:13:f5:6d:de:2f:a1:34:61:
         92:db:d1:57:c9:48:34:e4:be:45:fe:7e:f7:58:43:ce:5c:7b:
         34:02:ab:7c:57:20:c8:0c:11:1e:3b:e3:e8:29:8c:67:31:72:
         f8:d0:2f:4a:34:29:90:da:82:75:b8:22:e3:bb:38:3b:f5:62:
         d7:66:61:f3:30:7b:3a:e2:fa:cf:d6:8f:02:9f:5d:b3:8f:47:
         d1:79:e7:9d:e5:b0:28:99:5a:de:db:d5:96:76:7a:05:b8:8b:
         b2:9a:9c:f0:b3:69:81:d8:01:32:79:a3:c7:bc:28:4e:83:5d:
         82:2c:05:a9:8c:cb:4f:44:10:fc:f5:f5:0b:db:7c:1f:88:33:
         95:eb:87:0d:45:00:d9:2e:ab:34:0b:89:8e:ba:27:b2:55:6a:
         e0:26:77:a5:1a:bb:28:11:00:63:01:48:bd:66:56:8b:da:e9:
         b8:88:00:56
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:20 2024 by rpki-client on console-ams.rpki-client.org