Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/SZz-PjGvt3U1lOBI00cJqO0RddA.roa
File:                     SZz-PjGvt3U1lOBI00cJqO0RddA.roa (raw, json)
Hash identifier:          kwTJFidfmQHbwrqWxSB/WgaiSsmnuMkpcux2gU4QEc8=
Subject key identifier:   49:9C:FE:3E:31:AF:B7:75:35:94:E0:48:D3:47:09:A8:ED:11:75:D0
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/SZz-PjGvt3U1lOBI00cJqO0RddA.roa
Signing time:             Thu 15 Sep 2022 02:36:04 +0000
ROA not before:           Thu 15 Sep 2022 02:36:04 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24164
IP address blocks:        49.159.16.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5374 (0x14fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 15 02:36:04 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=499CFE3E31AFB7753594E048D34709A8ED1175D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:dd:c2:53:ee:25:31:b7:f1:32:4b:ff:3e:6c:
                    26:8f:f5:4f:66:3a:78:16:0b:ce:b1:5b:5e:5f:ca:
                    e0:7a:92:4c:b2:4f:71:64:d7:0b:a1:c0:93:8b:79:
                    af:2c:b4:8a:32:29:08:97:a4:bf:6b:c2:cd:00:9a:
                    a9:82:9f:d7:b2:69:bd:e7:ec:22:f3:ac:40:b9:fb:
                    04:e0:b7:da:aa:49:cb:9d:38:70:ae:f7:1a:1a:ed:
                    1b:ab:fe:e9:a6:47:8a:8b:d4:ef:3c:5e:33:ee:8d:
                    ec:b1:60:6b:93:97:45:83:62:5b:76:22:be:ca:8d:
                    47:93:74:63:4a:be:6f:0f:22:a1:93:c3:8a:c2:74:
                    fd:ee:2c:0a:df:69:74:7d:d9:51:f1:ef:1e:72:c5:
                    28:3a:5b:24:64:3d:93:ec:b7:a3:1a:ba:7a:36:ea:
                    85:f2:96:b5:15:98:92:d5:3e:b8:75:66:e7:f7:e4:
                    b4:a0:48:98:ef:78:d9:df:16:ce:98:47:e0:bd:82:
                    b4:f4:bc:5d:ba:36:cb:d8:85:d3:e9:bb:22:71:39:
                    8c:7d:c0:80:72:3f:4f:8c:a3:a4:32:8f:e0:7b:37:
                    a7:ac:f2:0d:57:e7:46:e9:16:9a:d7:2c:0b:80:60:
                    50:dd:90:3d:65:0b:a0:d5:df:55:d9:d9:07:14:1a:
                    bc:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:9C:FE:3E:31:AF:B7:75:35:94:E0:48:D3:47:09:A8:ED:11:75:D0
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/SZz-PjGvt3U1lOBI00cJqO0RddA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.159.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         55:48:98:16:59:90:e5:b0:60:d0:86:d4:aa:38:b5:93:fc:66:
         0f:1f:e6:cb:b2:cc:51:e2:0b:46:76:12:3b:2f:22:4f:c6:5a:
         6d:ce:41:c2:91:39:7f:ad:86:75:22:10:33:83:53:2b:9e:c8:
         53:af:e1:45:8f:cd:4f:df:af:3e:5c:4a:15:35:b5:4e:65:96:
         1e:49:d7:b2:7d:42:c1:b0:2b:5d:d2:2b:0d:15:a5:fe:48:e2:
         5a:55:d7:cc:16:a9:5b:be:ce:c3:71:48:6b:c1:54:89:87:75:
         f2:b4:74:ca:32:bd:7e:b5:5f:c2:58:d5:9a:62:47:e2:a4:45:
         f4:2e:16:3a:2b:0c:57:61:7d:ab:12:0b:cd:11:94:02:44:f3:
         37:3b:5f:4a:7d:7e:03:00:d0:dc:b3:2a:e3:7a:a4:c5:4f:f0:
         f4:dd:56:7a:be:88:bc:c1:12:16:b8:38:00:d9:21:04:cb:9a:
         84:ad:a8:f9:0a:3d:b0:c6:6c:b3:a2:68:68:1f:f1:30:bf:b7:
         dd:58:e0:80:b5:b6:8f:1c:8f:79:cc:75:0e:07:14:2c:18:2b:
         9c:8c:ef:3e:82:24:41:17:39:5c:50:84:9b:b1:78:99:dd:f4:
         35:65:73:dc:76:9a:f5:fe:e7:0c:4f:e7:02:fe:bc:22:65:61:
         54:b4:d1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:47 2024 by rpki-client on console-ams.rpki-client.org