Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SUMATRA/aoC4-LVI_ao7wzQNEsDaI2NISmA.roa
File:                     aoC4-LVI_ao7wzQNEsDaI2NISmA.roa (raw, json)
Hash identifier:          oOhA0OZXkvH34TjBlrMrgrl8w6ns8w0xiE9W7bXxKzE=
Subject key identifier:   6A:80:B8:F8:B5:48:FD:AA:3B:C3:34:0D:12:C0:DA:23:63:48:4A:60
Certificate issuer:       /CN=B2839BF7A6C6B17E7CFCB3734A36C0E98C37A1B7
Certificate serial:       0364
Authority key identifier: B2:83:9B:F7:A6:C6:B1:7E:7C:FC:B3:73:4A:36:C0:E9:8C:37:A1:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/soOb96bGsX58_LNzSjbA6Yw3obc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SUMATRA/aoC4-LVI_ao7wzQNEsDaI2NISmA.roa
Signing time:             Wed 29 Sep 2021 02:55:52 +0000
ROA not before:           Wed 29 Sep 2021 02:55:52 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9678
IP address blocks:        2406:3040::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 868 (0x364)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2839BF7A6C6B17E7CFCB3734A36C0E98C37A1B7
        Validity
            Not Before: Sep 29 02:55:52 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=6A80B8F8B548FDAA3BC3340D12C0DA2363484A60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:75:f0:9d:c6:a9:90:ad:25:be:54:84:2d:ab:
                    5e:36:50:4b:8b:11:1d:ac:dd:2c:54:7b:83:97:fb:
                    b0:43:28:56:8d:99:c5:42:b1:ea:8d:34:00:3a:34:
                    55:59:80:14:36:17:d5:a6:34:e7:6f:12:be:3f:1d:
                    75:f8:5f:fc:4d:b7:bb:a5:82:fe:d3:c0:b8:02:9e:
                    a6:25:84:38:bd:ec:ec:d5:92:06:e3:3e:9d:e0:30:
                    cb:36:2b:9b:5c:f4:65:24:21:3b:64:64:15:fb:16:
                    46:7c:72:69:29:0d:d5:de:08:87:4b:ad:ea:a4:34:
                    25:ac:83:af:79:c7:29:1b:d5:05:c0:e0:33:d7:6f:
                    5c:53:61:f7:63:69:f6:91:98:e4:90:34:a0:af:01:
                    08:c9:96:d7:b2:3a:18:29:ea:5e:23:9f:18:74:4c:
                    80:e2:74:c7:d1:33:08:a2:53:a2:1b:9a:1e:61:9e:
                    f5:52:14:fc:d4:f7:a2:f8:e7:da:11:2d:a0:c0:30:
                    9c:8a:38:bc:29:a4:d5:08:15:39:73:ae:b9:29:64:
                    b5:40:6a:bb:40:4b:1a:a7:79:a7:0a:8f:93:5e:21:
                    62:6c:ec:91:64:bb:92:be:e9:48:9b:29:45:f5:b6:
                    cc:5e:71:29:23:b2:66:de:b7:6d:6c:06:71:e5:5c:
                    1f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:80:B8:F8:B5:48:FD:AA:3B:C3:34:0D:12:C0:DA:23:63:48:4A:60
            X509v3 Authority Key Identifier:
                keyid:B2:83:9B:F7:A6:C6:B1:7E:7C:FC:B3:73:4A:36:C0:E9:8C:37:A1:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SUMATRA/soOb96bGsX58_LNzSjbA6Yw3obc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/soOb96bGsX58_LNzSjbA6Yw3obc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SUMATRA/aoC4-LVI_ao7wzQNEsDaI2NISmA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:3040::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:ec:c6:16:3a:a3:89:95:99:30:e3:b0:dd:7d:fe:e5:83:0a:
         48:8d:8a:1f:f9:18:6d:48:84:cc:e2:bd:9e:96:40:37:c1:18:
         aa:45:81:21:31:c9:c8:6d:8d:b7:b0:1c:2b:a0:9a:bd:f7:67:
         56:f1:4f:fc:90:d0:ce:42:c4:6b:1d:d2:8b:a2:a8:81:25:6e:
         18:f3:ff:50:69:82:0e:69:bd:41:5a:66:2c:a0:ab:c6:99:89:
         4c:7c:ce:36:5f:65:29:68:b3:cb:ff:cc:85:0c:82:9c:d4:81:
         da:9e:a5:a6:40:38:f7:b0:c8:9b:14:7d:a0:fa:e2:0f:90:7a:
         0c:1e:a2:f9:05:a3:5d:b0:48:71:65:fd:e1:11:6a:88:88:41:
         8e:51:28:f2:e8:63:85:7d:e0:15:39:d2:58:44:e6:92:57:dd:
         ce:8b:83:67:30:d0:48:21:42:3b:ea:7c:98:04:57:6b:67:74:
         75:46:e0:e5:a4:bc:ff:a9:df:3d:4a:fe:77:18:68:29:87:67:
         45:98:4b:66:d6:73:d5:1b:68:fe:a3:c0:98:83:a6:0c:9a:31:
         36:2c:c7:72:bd:5f:91:74:d3:76:c8:2c:a0:27:ac:d3:45:33:
         ae:b6:e0:0e:57:ee:76:9a:be:71:f3:6d:0d:39:d1:71:b1:9f:
         73:20:13:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:20 2024 by rpki-client on console-ams.rpki-client.org