Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/hvpmjCGSE2cKwuwVWw-LwDpHNhA.roa
File:                     hvpmjCGSE2cKwuwVWw-LwDpHNhA.roa (raw, json)
Hash identifier:          qlVHbC1WgqLRskNz6uUy7wSszM5EzO/ioST4TcWGIBE=
Subject key identifier:   86:FA:66:8C:21:92:13:67:0A:C2:EC:15:5B:0F:8B:C0:3A:47:36:10
Certificate issuer:       /CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
Certificate serial:       08F1
Authority key identifier: 00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/hvpmjCGSE2cKwuwVWw-LwDpHNhA.roa
Signing time:             Mon 08 Feb 2021 16:40:56 +0000
ROA not before:           Mon 08 Feb 2021 16:40:56 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38047
IP address blocks:        2402:c340:e168::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2289 (0x8f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
        Validity
            Not Before: Feb  8 16:40:56 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=86FA668C219213670AC2EC155B0F8BC03A473610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:cb:07:fa:3f:c7:a2:20:2e:b6:1d:97:6a:0a:
                    1e:3c:6c:7d:cf:2a:2e:2c:76:7c:6b:b4:e8:ba:38:
                    28:d4:06:c0:d8:d3:c5:b9:32:d7:3c:9d:43:1d:b0:
                    d1:da:74:ae:ff:40:2d:dc:58:dd:52:a8:26:25:81:
                    c3:4f:bc:75:52:e9:3d:a7:15:e1:59:0e:80:e9:00:
                    cd:53:59:56:e2:1b:83:4d:a3:e1:da:2f:fe:48:da:
                    3d:6a:78:49:02:6c:9d:1c:72:57:be:93:e5:63:9e:
                    84:6e:3f:20:60:0d:db:15:cf:4f:fb:74:49:f4:67:
                    ac:5d:0b:ec:01:52:8e:e3:59:55:4f:48:a7:82:6d:
                    55:87:36:0d:ed:3e:3d:12:8c:7b:7a:7e:81:6e:35:
                    ae:08:3b:3e:93:6d:83:f9:4d:e4:a3:70:33:78:68:
                    79:17:65:63:6c:42:e6:9b:ef:78:f1:d8:ee:da:53:
                    46:17:85:e4:00:18:cd:b9:c7:36:88:8f:84:ad:73:
                    a7:d9:71:b8:56:81:d6:42:eb:17:ca:2d:29:29:84:
                    ff:71:be:bf:71:2b:dc:c8:dd:5f:e8:24:bc:ea:57:
                    a9:a6:07:13:05:cb:86:87:b5:e8:2a:24:c0:23:4c:
                    c7:b8:50:9d:52:65:db:b0:15:ef:61:22:5c:b0:4c:
                    32:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:FA:66:8C:21:92:13:67:0A:C2:EC:15:5B:0F:8B:C0:3A:47:36:10
            X509v3 Authority Key Identifier:
                keyid:00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/hvpmjCGSE2cKwuwVWw-LwDpHNhA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:c340:e168::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:49:bb:fd:7c:06:99:7a:af:4a:4b:77:5e:36:b5:e2:a2:68:
         21:6a:bb:0e:c8:0c:da:fc:f9:24:57:94:c3:93:af:8f:5e:71:
         67:bb:30:e3:5c:24:86:a0:59:16:76:50:6b:b4:34:a7:51:dc:
         2b:7e:7e:11:96:13:ba:62:a9:ad:62:c8:6b:a5:b5:89:3c:19:
         43:9c:ad:df:eb:89:ed:a3:65:32:6f:3b:19:f8:a1:ae:39:4a:
         16:73:ef:0e:3c:37:7e:5d:58:34:7f:34:26:e4:5c:1b:36:a6:
         15:ed:36:d4:02:b9:c1:f2:40:03:92:64:bd:0e:d5:11:6e:1f:
         e7:f1:fd:4d:8f:4f:28:99:21:89:f4:78:c0:d2:30:cc:cc:f4:
         bc:3c:a7:df:60:ed:cc:8c:0b:76:f4:cc:ee:d2:f6:86:26:7f:
         ea:0c:3e:53:ac:aa:65:f7:10:50:d0:bc:37:80:89:9d:3f:f8:
         66:a9:b6:13:5e:9e:a8:50:04:ca:f7:1c:46:c8:f3:30:2c:09:
         63:b3:75:6f:ea:d9:7d:2d:82:3a:ff:b3:44:24:30:6b:bc:4c:
         ec:01:a8:04:aa:f7:b8:fd:93:c1:53:2f:ab:06:77:ab:94:e3:
         4a:21:c3:cc:41:c2:be:84:85:01:6e:43:0a:09:57:b7:45:e6:
         f3:1e:8e:32
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:20 2024 by rpki-client on console-ams.rpki-client.org