Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7wPp_yKZqQFgvC1yZrg6yMRSUBs.roa
File:                     7wPp_yKZqQFgvC1yZrg6yMRSUBs.roa (raw, json)
Hash identifier:          rVuIdxyUXcwFruCRw9ntmcRHr5KPXBI7rbOsZq11DMU=
Subject key identifier:   EF:03:E9:FF:22:99:A9:01:60:BC:2D:72:66:B8:3A:C8:C4:52:50:1B
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7wPp_yKZqQFgvC1yZrg6yMRSUBs.roa
Signing time:             Thu 15 Sep 2022 02:35:43 +0000
ROA not before:           Thu 15 Sep 2022 02:35:43 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24164
IP address blocks:        103.225.0.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5374 (0x14fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 15 02:35:43 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=EF03E9FF2299A90160BC2D7266B83AC8C452501B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b8:31:22:69:56:b8:5c:2b:cd:1f:3b:50:41:
                    51:ff:d5:d7:f9:f1:7c:34:e2:ba:01:81:37:2a:ae:
                    e4:70:2a:1e:32:87:85:60:01:48:80:98:c0:4c:50:
                    84:11:27:0a:78:20:8f:b1:a1:0f:4d:34:13:69:8d:
                    ee:5b:7e:47:bc:19:82:d7:c3:09:de:dd:67:46:8e:
                    ec:63:8e:09:25:4d:71:35:50:31:a9:ff:97:59:ba:
                    7e:fa:ee:ca:35:67:f0:5f:19:f7:5a:d1:e0:7f:75:
                    06:45:43:b0:f9:dc:88:d3:68:55:6f:60:3f:d8:6e:
                    59:58:e3:36:01:8e:d2:05:69:eb:7e:6f:b0:2c:95:
                    f9:d4:4e:e3:d1:7e:d2:64:d4:79:e0:0a:1b:df:d3:
                    04:2f:df:55:8a:61:8b:63:6a:63:1d:cc:f0:08:b1:
                    38:50:2a:eb:b0:61:9b:14:09:fe:2b:c4:1b:75:44:
                    19:78:86:c4:6d:02:98:f6:3b:90:8f:6e:77:1b:b6:
                    2c:3e:0d:15:0a:78:3d:56:77:80:83:f1:3a:a5:31:
                    b6:f7:5d:78:cd:07:97:56:e4:6b:d1:55:94:b1:ee:
                    43:ee:e2:07:a2:b9:ab:c5:67:1b:6d:82:5c:fb:e9:
                    57:0b:79:7c:03:c0:d4:50:8f:ef:fe:6d:f3:83:bc:
                    ed:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:03:E9:FF:22:99:A9:01:60:BC:2D:72:66:B8:3A:C8:C4:52:50:1B
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7wPp_yKZqQFgvC1yZrg6yMRSUBs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.225.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:45:0e:76:08:8e:d9:85:72:c2:f2:fe:8d:51:42:78:a8:7c:
         d9:a6:41:4f:3d:b6:52:8e:4d:32:a5:be:55:7e:57:68:7a:86:
         dd:f4:f3:3e:28:cb:00:0b:04:2c:e3:df:fa:4d:51:af:26:20:
         8c:6a:81:04:f2:73:df:db:98:ce:db:08:e8:72:e4:43:44:19:
         19:c4:10:5b:60:ca:43:2e:f0:22:c5:1c:c3:0c:cd:7d:72:2c:
         93:f9:3b:25:40:67:6f:e4:33:8a:7b:48:bc:f2:00:4a:3d:16:
         cd:5e:68:7e:ab:e5:a8:14:89:7a:dc:bf:e0:3f:6c:49:b0:50:
         34:d9:dd:cc:9c:1b:85:2b:76:a0:ea:87:ef:2e:ad:60:13:b1:
         f0:56:ae:4b:32:aa:d3:9f:0c:cb:65:e2:f2:b5:53:f1:b8:aa:
         79:9d:bd:51:f8:95:cc:ef:05:34:69:51:49:d8:05:08:a5:49:
         c8:92:35:b4:75:6a:ba:de:3d:2f:22:3c:ce:7e:86:d7:b9:39:
         68:3b:f5:af:26:c5:87:ed:e6:93:52:de:a2:4b:39:1b:76:36:
         e9:db:e8:4a:4e:aa:da:39:6b:8f:b2:78:b1:11:de:ee:97:6a:
         98:db:55:fd:f3:4f:b1:1f:89:24:fb:3a:94:3a:99:32:aa:5c:
         2f:23:df:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:02 2024 by rpki-client on console-fra.rpki-client.org