Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/JlE9ErE3QAIssr0IPu5byK-__xI.roa
File:                     JlE9ErE3QAIssr0IPu5byK-__xI.roa (raw, json)
Hash identifier:          Z7JfTec2y6+787UPLuPxJJJ03gn4fO23MEZmy/K99B0=
Subject key identifier:   26:51:3D:12:B1:37:40:02:2C:B2:BD:08:3E:EE:5B:C8:AF:BF:FF:12
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       182C
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/JlE9ErE3QAIssr0IPu5byK-__xI.roa
Signing time:             Sat 22 Oct 2022 05:52:11 +0000
ROA not before:           Sat 22 Oct 2022 05:52:11 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24164
IP address blocks:        211.76.79.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6188 (0x182c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Oct 22 05:52:11 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=26513D12B13740022CB2BD083EEE5BC8AFBFFF12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e6:75:29:1d:09:8a:d5:b5:07:c5:40:dc:cf:
                    b1:e6:5a:80:ce:52:d1:b6:84:0d:c0:4d:23:70:6f:
                    47:09:be:6d:85:fe:e4:ce:40:54:b5:bf:65:d7:be:
                    d0:66:af:d4:2b:77:7d:cd:28:28:d1:2c:27:5f:26:
                    47:97:4f:e3:f9:90:0d:f3:11:e7:1d:1f:46:a9:ee:
                    06:50:cd:15:27:22:ae:a4:ea:ce:5d:22:e8:9a:5b:
                    72:d1:21:00:7e:94:63:2d:e4:e8:28:3c:67:37:66:
                    b9:0a:df:73:7c:d4:16:aa:79:f1:e8:67:63:a3:9d:
                    02:a5:82:57:f3:e3:31:c1:5d:df:ca:95:62:6e:91:
                    ea:b6:b8:d7:67:5f:3d:2c:80:d9:3d:e0:b1:34:55:
                    46:2d:70:73:4d:4b:89:7d:d1:57:45:47:9c:46:4c:
                    64:cc:c5:50:04:b8:f7:b2:c7:76:c5:36:02:ee:2c:
                    5c:bb:d8:3c:b6:2d:9b:c5:40:6b:fb:10:4b:be:b7:
                    3f:c8:14:c4:3c:83:9f:36:c1:8a:0d:2d:ea:08:10:
                    1c:b5:aa:7d:3c:00:e3:86:5d:d1:60:3c:ce:ac:af:
                    f9:1a:e8:66:20:25:f8:8d:71:97:f6:80:ed:f8:c2:
                    a2:8e:af:bb:01:ad:c3:3b:23:a8:00:b9:01:fa:66:
                    6b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:51:3D:12:B1:37:40:02:2C:B2:BD:08:3E:EE:5B:C8:AF:BF:FF:12
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/JlE9ErE3QAIssr0IPu5byK-__xI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:ce:9d:df:56:a8:53:28:c2:04:d5:9d:ba:16:42:1d:fc:80:
         cb:c1:bb:64:b4:cb:f5:c4:8d:36:84:29:58:5c:5d:64:a4:09:
         dd:f5:f9:ff:63:0f:a2:74:50:8c:3b:6a:48:6c:cc:4d:13:f5:
         71:d1:61:89:89:6f:ca:b5:cc:47:8e:15:63:05:bf:75:c9:d3:
         58:6b:87:07:d4:60:94:75:4d:57:6c:f2:a1:44:be:e4:ec:c9:
         a5:3f:90:b1:71:c1:6e:e5:8d:23:bd:b5:61:ae:68:30:1d:48:
         e1:ee:5c:d5:aa:51:d5:e5:6c:f3:77:e9:4a:3c:0e:b2:d8:ad:
         de:35:02:29:dd:97:f0:d2:b3:2a:ec:e2:8d:48:ca:8a:26:1b:
         79:1b:b5:86:4e:5f:da:47:1f:fe:00:2d:70:78:ee:b0:a7:7b:
         09:1c:1a:c3:0a:4c:50:4d:80:9c:ad:63:9b:0e:fb:78:8b:3c:
         21:f6:93:09:c5:44:53:60:a0:72:5f:90:b5:67:2d:f2:ac:87:
         f4:24:05:0a:3b:3d:08:f6:0a:f9:63:f3:c7:87:66:cf:c9:e2:
         01:df:da:77:e1:da:16:07:b0:27:43:21:d1:46:c8:ab:c1:48:
         a6:3b:0a:fe:23:30:69:c0:a3:0e:fa:46:dc:ca:38:9a:3b:e9:
         a8:44:b7:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:46 2024 by rpki-client on console-ams.rpki-client.org