Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7-wjAmq6BlR7slVdycLMe_iVr8Q.roa
File:                     7-wjAmq6BlR7slVdycLMe_iVr8Q.roa (raw, json)
Hash identifier:          Mnn0F+t/3gy7g++hz2FAAj+n2a++9HUGTPu5SZ1JXoI=
Subject key identifier:   EF:EC:23:02:6A:BA:06:54:7B:B2:55:5D:C9:C2:CC:7B:F8:95:AF:C4
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       12D9
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7-wjAmq6BlR7slVdycLMe_iVr8Q.roa
Signing time:             Wed 29 Sep 2021 02:55:04 +0000
ROA not before:           Wed 29 Sep 2021 02:55:04 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24164
IP address blocks:        119.77.208.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4825 (0x12d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:55:04 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=EFEC23026ABA06547BB2555DC9C2CC7BF895AFC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:08:54:51:ea:43:6e:90:3d:2a:db:0e:05:4f:
                    01:83:70:ed:91:75:93:1f:58:3d:ae:92:ce:53:cd:
                    3d:4f:a0:99:6d:94:eb:f6:47:98:5b:4b:15:31:d6:
                    66:27:37:3f:a9:f0:f3:48:87:4c:34:d7:40:6a:12:
                    87:b3:8a:ea:07:b4:89:6d:64:cf:db:5a:e0:b3:87:
                    1d:c8:68:3e:82:f7:85:32:f3:bd:f9:30:e1:df:24:
                    3b:b0:32:b7:d2:6f:8f:9e:13:d8:c8:8b:48:a4:37:
                    ec:bb:96:ca:0e:7e:36:3e:e6:80:6e:5d:d4:0c:10:
                    ae:e9:25:65:5d:6d:fe:6c:cc:c9:38:70:c7:93:d7:
                    0f:e7:e7:2b:d0:dd:64:63:86:39:54:b3:24:68:02:
                    8b:6a:a7:87:fd:a1:b5:35:7b:fa:7c:b6:ac:fb:4a:
                    1a:d7:ea:da:31:19:0a:3e:3d:7c:b0:2b:38:a5:36:
                    cb:9f:b6:3a:c5:d3:b6:99:ce:9d:6f:24:d2:9f:93:
                    7a:7c:0f:3b:bd:cd:4b:dc:e0:74:ef:6a:46:66:c2:
                    3c:45:75:b5:4b:26:f6:68:66:6a:4c:30:b4:22:3b:
                    70:8b:c6:a6:af:8d:fd:aa:97:1d:08:95:f1:4b:a2:
                    28:36:8d:ea:c0:2d:0a:42:09:9d:b6:45:ed:f1:a5:
                    1f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:EC:23:02:6A:BA:06:54:7B:B2:55:5D:C9:C2:CC:7B:F8:95:AF:C4
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7-wjAmq6BlR7slVdycLMe_iVr8Q.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.77.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2f:bf:4e:7a:96:9a:9d:cd:a0:1c:c2:c2:8b:9a:88:a9:19:0e:
         a3:23:94:9d:1a:51:03:0e:e0:95:67:7a:1e:bf:31:97:f7:35:
         cb:03:85:23:0d:1e:9e:84:93:0d:66:d3:f1:21:e7:de:b7:13:
         91:8f:51:f4:61:1f:4d:29:ab:fe:8f:c9:2b:71:70:a0:a3:f8:
         3f:1b:13:94:97:3d:07:31:88:cc:a6:72:ac:24:94:2f:14:58:
         d7:f4:0e:3e:58:86:cc:cf:e0:56:38:13:f7:93:ed:f1:cd:c2:
         06:0d:c8:19:58:ef:81:81:97:a7:f5:99:9b:0f:3e:95:2c:78:
         1d:73:1f:70:8a:70:48:c1:e8:91:6e:fe:b8:05:37:15:a6:f5:
         e6:8d:48:eb:26:95:83:3f:5a:d4:64:95:42:84:8f:8b:8f:ac:
         b4:a3:a5:a7:c2:c5:22:27:a8:8d:ca:20:c8:24:06:ed:36:cf:
         58:44:0c:5f:35:34:ea:8d:5c:ad:43:c6:ff:1e:b8:ea:7b:38:
         48:5b:d5:97:05:d3:7a:cf:c4:71:69:54:bd:53:35:6e:c2:eb:
         0e:41:88:09:63:ad:50:19:8c:f9:3c:61:8f:e6:8e:b2:a3:47:
         61:35:52:bf:31:89:a0:f9:6f:28:24:8c:ff:94:7c:47:a9:2c:
         c0:08:f1:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:02 2024 by rpki-client on console-fra.rpki-client.org