Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IBxQJMzkVIKhgZhoUcFMdWIl5gA.roa
File:                     IBxQJMzkVIKhgZhoUcFMdWIl5gA.roa (raw, json)
Hash identifier:          0WwEG9SRNoBASpEKXs2rJQIWEEP/J2QaN+CwNH0s/eY=
Subject key identifier:   20:1C:50:24:CC:E4:54:82:A1:81:98:68:51:C1:4C:75:62:25:E6:00
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0D71
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IBxQJMzkVIKhgZhoUcFMdWIl5gA.roa
Signing time:             Thu 14 Jan 2021 07:54:03 +0000
ROA not before:           Thu 14 Jan 2021 07:54:03 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24165
IP address blocks:        61.64.12.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3441 (0xd71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Jan 14 07:54:03 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=201C5024CCE45482A181986851C14C756225E600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c6:2d:f1:59:e0:1f:63:de:4c:f9:1b:9b:fc:
                    6a:b1:3d:74:8b:5a:e4:1f:c5:4c:9b:5c:b2:8e:d5:
                    93:3f:e8:ca:60:ff:a3:4a:78:0b:eb:1e:51:bb:50:
                    bc:59:58:7e:dd:a1:dc:c3:d0:6e:ed:0d:e0:bc:86:
                    00:1d:d2:52:e9:3b:42:c5:6f:aa:cf:76:da:f1:de:
                    c5:32:7a:c3:a4:20:25:c9:f5:99:69:4d:44:87:ce:
                    4b:59:94:d6:95:68:89:2c:66:92:3f:a5:c0:12:d3:
                    57:be:c1:d2:ba:5d:08:2c:fc:ac:1e:33:c4:73:1d:
                    f0:5a:42:4f:b6:94:e9:ea:04:a3:a3:9d:34:2f:6a:
                    8b:59:45:86:c8:0e:a7:4a:6e:b4:aa:26:6d:38:47:
                    12:30:4c:ce:dc:87:e3:60:f7:ec:c1:01:d3:77:e5:
                    a2:df:c7:34:00:1a:64:d9:30:c3:5c:96:e7:dc:ab:
                    a5:f3:cb:62:8c:fd:0a:57:ae:a3:ad:0c:40:7b:b1:
                    2b:2b:1c:a6:8e:50:45:98:8e:fe:f5:1c:f7:22:4f:
                    02:0d:8a:96:b5:e5:1c:b0:a1:bf:32:35:46:f8:9f:
                    83:16:1f:c8:9e:87:41:12:fc:52:14:d1:ea:f3:58:
                    7e:88:02:3b:e4:3b:04:b3:74:14:23:1a:d7:40:9e:
                    8b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:1C:50:24:CC:E4:54:82:A1:81:98:68:51:C1:4C:75:62:25:E6:00
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IBxQJMzkVIKhgZhoUcFMdWIl5gA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.64.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:53:ee:42:36:1f:e2:1b:57:ac:c6:e8:c6:58:b5:a5:91:67:
         72:18:7d:b8:c8:84:e8:ea:8b:94:27:7d:29:5c:c8:fc:7f:1b:
         89:f6:25:9b:69:ac:a6:a9:a2:97:11:ff:bb:3d:ec:1e:c2:84:
         26:b2:b9:36:4b:66:2b:b0:67:13:a3:7b:82:46:aa:48:04:12:
         d6:31:79:5a:2c:87:51:82:a5:90:43:0e:7a:db:6d:57:c5:61:
         58:a2:52:0a:a3:df:85:27:04:2d:12:18:70:9a:70:67:df:c6:
         47:d7:df:9e:39:8c:17:6f:5d:8a:28:3d:2e:f5:ff:1d:aa:ae:
         32:3f:ef:4a:42:36:44:55:e8:0a:c2:a0:3b:d4:ce:65:f0:bf:
         8b:25:e3:3b:25:5b:7c:9e:a4:51:ce:56:de:ec:80:89:b3:ff:
         68:60:6a:4a:95:1c:8a:49:af:3b:d4:23:f9:b0:89:f5:24:6d:
         d4:15:20:c2:f8:bf:ce:a4:91:12:32:8e:86:9f:3f:60:bc:85:
         f4:03:4f:6d:60:99:ab:36:f1:ff:dc:d2:c0:b6:14:58:92:99:
         10:3d:76:7a:0b:44:59:1e:c5:61:21:34:5f:3e:a7:f4:01:49:
         e3:4d:a9:50:e5:b3:52:d2:12:4b:56:79:9b:74:51:b6:34:17:
         66:d4:c2:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:46 2024 by rpki-client on console-ams.rpki-client.org