Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/poreJfdsbAXT3f6WopbFFE4NP1E.roa
File:                     poreJfdsbAXT3f6WopbFFE4NP1E.roa (raw, json)
Hash identifier:          e9Wh40oYD3b2/HCZ4H7etzhkUxPWf6/2REEqINdNk/Q=
Subject key identifier:   A6:8A:DE:25:F7:6C:6C:05:D3:DD:FE:96:A2:96:C5:14:4E:0D:3F:51
Certificate issuer:       /CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
Certificate serial:       08F3
Authority key identifier: 00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/poreJfdsbAXT3f6WopbFFE4NP1E.roa
Signing time:             Mon 08 Feb 2021 16:41:14 +0000
ROA not before:           Mon 08 Feb 2021 16:41:14 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38047
IP address blocks:        2402:c340::/32 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2291 (0x8f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
        Validity
            Not Before: Feb  8 16:41:14 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=A68ADE25F76C6C05D3DDFE96A296C5144E0D3F51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:68:68:d6:4e:28:b2:ab:22:3f:de:75:d3:db:
                    8c:85:e3:f9:84:44:1c:bd:59:10:31:8a:50:d5:82:
                    4f:20:cf:75:7c:6b:c3:36:61:41:42:ce:b4:43:5a:
                    a9:0c:78:7f:1a:c3:44:4e:40:6c:ec:d2:cd:28:63:
                    61:82:6a:f2:12:96:c3:50:a3:e5:d6:59:8c:38:9f:
                    fa:da:37:23:19:8c:d4:0d:cb:7d:6e:fe:16:11:21:
                    d4:96:5c:de:d2:66:b7:04:1f:5d:a6:4f:d4:26:e4:
                    d4:fe:f6:67:48:19:27:89:e4:a0:1b:57:b2:e5:b3:
                    d6:24:7a:fc:6d:02:e8:8e:bc:28:91:41:70:36:4c:
                    83:c4:70:79:d2:ea:30:e0:e2:75:e0:be:3c:20:f2:
                    2c:4d:37:fb:97:67:a9:68:9b:de:3d:5f:b5:61:0b:
                    14:15:5e:63:e4:7d:f9:0f:e0:70:82:60:99:a8:9f:
                    7a:2d:bc:1c:5c:fe:83:51:ba:39:99:f0:45:1b:05:
                    18:45:a4:95:4d:a3:57:eb:4f:9c:b9:8d:1e:c2:0e:
                    5e:a8:8b:91:5b:55:f8:3a:3f:c1:76:a5:7a:28:77:
                    d6:15:45:76:a2:75:47:1d:9b:5f:8e:74:af:80:f8:
                    31:47:16:29:71:07:1a:1e:3c:c6:5f:25:0a:3b:7a:
                    4d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:8A:DE:25:F7:6C:6C:05:D3:DD:FE:96:A2:96:C5:14:4E:0D:3F:51
            X509v3 Authority Key Identifier:
                keyid:00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/poreJfdsbAXT3f6WopbFFE4NP1E.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:c340::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:b7:6a:11:8b:f9:1c:ec:33:78:ac:41:9e:ab:ae:24:6c:30:
         96:28:15:82:d7:40:a4:62:cb:2a:67:21:e5:89:7e:11:87:ca:
         4c:88:e3:1d:b7:6d:cd:b6:73:bf:07:79:70:e6:21:13:cf:ac:
         0f:48:c3:73:6e:65:90:9c:37:8f:2b:88:72:9b:b1:e6:69:71:
         fa:0f:4d:71:d5:6d:0b:b4:44:aa:ac:a6:5f:0d:04:08:46:0e:
         3a:80:12:3b:5a:40:0c:41:9b:40:fe:d0:cf:4e:e0:c7:ec:da:
         32:18:8f:9e:be:1d:e3:b0:f9:0b:5d:ef:ef:6b:5c:64:76:0e:
         63:20:f9:9f:d7:43:22:1c:62:69:00:a7:45:6d:8e:b5:b0:32:
         cc:8e:e7:76:b1:ae:d8:c7:61:bc:99:d6:ec:8b:36:91:37:ff:
         bb:27:22:25:bb:7d:6a:9c:b8:fa:c3:3c:10:4f:ab:a9:fb:a0:
         03:b0:df:55:cd:d2:3e:33:57:ca:3e:bb:f3:ba:93:bc:ac:ca:
         18:78:6f:53:e6:16:71:ef:1f:f1:0a:7b:1f:17:bf:f3:8d:c0:
         ad:83:cf:3e:2e:a1:fc:2d:0e:ce:9e:35:46:53:61:f7:fc:1d:
         1a:02:45:35:bc:a7:c2:f9:c9:a4:af:50:4e:30:fa:9a:c0:b3:
         04:83:5c:30
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgICCPMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDA1
NzJFOTlDNjRFRDY1MkZBODFENTAxRUZBMTZDRjlENDRBRTk5QzAeFw0yMTAyMDgx
NjQxMTRaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEE2OEFERTI1Rjc2QzZD
MDVEM0RERkU5NkEyOTZDNTE0NEUwRDNGNTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCtaGjWTiiyqyI/3nXT24yF4/mERBy9WRAxilDVgk8gz3V8a8M2
YUFCzrRDWqkMeH8aw0ROQGzs0s0oY2GCavISlsNQo+XWWYw4n/raNyMZjNQNy31u
/hYRIdSWXN7SZrcEH12mT9Qm5NT+9mdIGSeJ5KAbV7Lls9YkevxtAuiOvCiRQXA2
TIPEcHnS6jDg4nXgvjwg8ixNN/uXZ6lom949X7VhCxQVXmPkffkP4HCCYJmon3ot
vBxc/oNRujmZ8EUbBRhFpJVNo1frT5y5jR7CDl6oi5FbVfg6P8F2pXood9YVRXai
dUcdm1+OdK+A+DFHFilxBxoePMZfJQo7ek2BAgMBAAGjggH1MIIB8TAdBgNVHQ4E
FgQUporeJfdsbAXT3f6WopbFFE4NP1EwHwYDVR0jBBgwFoAUAFcumcZO1lL6gdUB
76Fs+dRK6ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0hJTkNI
RU5HL0FGY3VtY1pPMWxMNmdkVUI3NkZzLWRSSzZady5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvQUZjdW1jWk8xbEw2Z2RVQjc2RnMtZFJLNlp3LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0hJTkNIRU5HL3BvcmVKZmRzYkFY
VDNmNldvcGJGRkU0TlAxRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC
MAcDBQAkAsNAMA0GCSqGSIb3DQEBCwUAA4IBAQCPt2oRi/kc7DN4rEGeq64kbDCW
KBWC10CkYssqZyHliX4Rh8pMiOMdt23NtnO/B3lw5iETz6wPSMNzbmWQnDePK4hy
m7HmaXH6D01x1W0LtESqrKZfDQQIRg46gBI7WkAMQZtA/tDPTuDH7NoyGI+evh3j
sPkLXe/va1xkdg5jIPmf10MiHGJpAKdFbY61sDLMjud2sa7Yx2G8mdbsizaRN/+7
JyIlu31qnLj6wzwQT6up+6ADsN9VzdI+M1fKPrvzupO8rMoYeG9T5hZx7x/xCnsf
F7/zjcCtg88+LqH8LQ7OnjVGU2H3/B0aAkU1vKfC+cmkr1BOMPqawLMEg1ww
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:08:52 2025 by rpki-client