Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/9jCsVeg_z7AUEBUynXe4sglGpAg.roa
File:                     9jCsVeg_z7AUEBUynXe4sglGpAg.roa (raw, json)
Hash identifier:          hYkxKHFeN/DEvpWj1CMwK9X1Oj0XRRAU+mSjZs/X2/o=
Subject key identifier:   F6:30:AC:55:E8:3F:CF:B0:14:10:15:32:9D:77:B8:B2:09:46:A4:08
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0BC8
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/9jCsVeg_z7AUEBUynXe4sglGpAg.roa
Signing time:             Tue 29 Sep 2020 10:08:50 +0000
ROA not before:           Tue 29 Sep 2020 10:08:50 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        119.77.252.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3016 (0xbc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:08:50 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=F630AC55E83FCFB0141015329D77B8B20946A408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9f:a4:7b:b5:e8:1d:51:1c:46:e3:e0:ca:da:
                    81:32:4e:91:a9:e5:6f:a1:4f:17:3d:61:1f:55:da:
                    fc:74:95:3a:41:65:7e:ac:d6:d3:95:13:53:bf:9f:
                    9a:c8:29:05:3a:38:96:e8:18:c5:e0:46:ae:42:35:
                    fb:ca:63:55:54:5b:d4:42:6b:86:57:a0:23:d7:78:
                    5e:09:5b:eb:ad:a1:e9:d5:dc:c9:93:f8:2b:83:9f:
                    90:b1:c3:c5:cc:71:de:aa:1f:07:18:89:89:41:63:
                    8a:13:0a:0f:28:b3:ee:c4:70:78:a1:5a:59:43:48:
                    a6:80:17:ea:03:5c:36:1a:6d:e9:1e:5b:70:fa:c5:
                    46:41:1e:1d:8c:61:f3:a4:b6:94:2a:e5:f5:24:ef:
                    f6:a7:ca:d1:f1:6e:6b:27:0b:32:70:a1:d5:c1:3f:
                    cc:a0:e9:40:ac:b5:69:8c:84:92:0e:52:19:18:0c:
                    40:70:f4:77:87:5d:e9:3e:96:ea:ea:27:d7:cf:5c:
                    2c:a3:9b:74:14:fe:ae:e5:6f:8c:7c:67:06:31:81:
                    06:06:af:c2:35:db:54:08:7c:51:fa:d5:31:7b:2c:
                    d9:88:48:08:aa:a7:5d:71:e1:4c:6c:fa:ab:2f:2b:
                    09:38:6a:9a:a7:f5:df:29:51:83:cc:f4:9c:c2:b9:
                    e2:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:30:AC:55:E8:3F:CF:B0:14:10:15:32:9D:77:B8:B2:09:46:A4:08
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/9jCsVeg_z7AUEBUynXe4sglGpAg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.77.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:03:1f:01:ba:77:97:11:62:6c:61:9a:83:f1:7a:84:b6:35:
         1a:13:53:c4:7e:7e:29:11:19:8a:22:bc:69:16:ae:cf:77:6c:
         04:e4:88:07:eb:cf:98:8b:1b:99:04:b1:60:4c:70:a3:b2:01:
         7a:5b:bf:d1:dd:4e:64:29:76:45:5a:e8:23:8c:bc:44:82:ce:
         1d:77:cf:af:d5:2b:b7:de:c2:99:c4:16:8a:c6:0c:65:5d:11:
         9b:8b:6d:93:d6:fc:cd:5e:08:f7:eb:e3:c3:b7:6b:9d:b8:8c:
         b3:3f:8d:e1:3d:e3:16:40:1b:9e:e3:2f:de:35:b8:de:00:e0:
         fa:4c:79:2c:44:12:fa:bb:a7:4e:a7:64:3c:80:e5:54:ca:e5:
         92:77:26:90:ac:4a:ff:34:76:f5:3d:66:cb:82:e4:40:e7:8f:
         68:40:45:ae:a7:9e:3c:2f:fa:9b:d1:c4:42:35:3e:aa:1e:2c:
         7c:4a:46:49:15:bc:bb:3e:d1:2f:28:3b:4e:3b:d1:d9:38:00:
         f3:8f:6b:b3:93:0d:57:43:59:8e:19:46:be:5d:ac:fa:f3:c1:
         71:44:55:fb:58:dc:2e:3d:1e:63:9f:c4:7c:fe:92:3b:18:cb:
         03:7e:d8:c5:cd:19:fe:7b:1f:74:d0:7a:a1:1b:d2:05:62:8f:
         2f:78:03:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:02 2024 by rpki-client on console-fra.rpki-client.org