Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/VYTrBd2o4CH8R7F1FDwsZs_dxTA.roa
File:                     VYTrBd2o4CH8R7F1FDwsZs_dxTA.roa (raw, json)
Hash identifier:          fyi+p9V8XkGWoQbipjIHqjYTr6ZJJKql6DaSeEl0XVE=
Subject key identifier:   55:84:EB:05:DD:A8:E0:21:FC:47:B1:75:14:3C:2C:66:CF:DD:C5:30
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1011
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/VYTrBd2o4CH8R7F1FDwsZs_dxTA.roa
Signing time:             Sun 07 Feb 2021 12:37:27 +0000
ROA not before:           Sun 07 Feb 2021 12:37:27 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24163
IP address blocks:        61.56.176.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4113 (0x1011)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb  7 12:37:27 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=5584EB05DDA8E021FC47B175143C2C66CFDDC530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:74:0d:e3:38:1c:ed:22:e7:ba:3e:7b:bc:ad:
                    00:62:13:7f:52:fe:b5:75:c0:5e:5c:c7:f9:96:27:
                    b8:f6:9f:ed:f3:d2:a0:b2:54:e7:79:00:7c:8b:f1:
                    46:f7:29:86:a5:8d:d8:88:2d:90:2b:2a:2c:26:81:
                    f3:bc:fa:63:8d:bb:f5:b4:31:95:b0:8a:c1:e8:5d:
                    3c:72:52:61:d4:f5:fc:f3:76:80:1a:9c:1e:d8:79:
                    c0:35:90:46:ae:5a:64:83:57:9f:a4:c7:76:30:30:
                    16:4e:3b:a5:4b:ec:93:d9:98:3e:63:7d:05:1d:a9:
                    0a:3a:ea:7f:56:10:56:68:6b:f6:d9:13:d2:6d:fe:
                    af:0f:09:68:f9:ca:af:57:75:50:92:dc:31:54:38:
                    c5:77:d7:4f:bf:cc:42:6b:6f:fc:79:3f:b0:56:1f:
                    c8:c3:31:83:f6:98:8a:d5:92:c7:04:24:57:b8:34:
                    33:c3:40:a4:6e:7e:3b:ca:09:25:40:ec:4f:dd:78:
                    4c:8e:1f:b1:cb:0f:25:63:fb:92:27:a5:06:ae:30:
                    97:93:5c:2b:78:18:df:0f:01:0c:c9:38:c0:83:6e:
                    ec:30:70:0b:a5:37:20:b3:bc:c3:e7:0d:d2:7a:27:
                    bb:53:25:c6:76:35:cc:42:8b:c7:86:8d:cc:8b:e7:
                    77:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:84:EB:05:DD:A8:E0:21:FC:47:B1:75:14:3C:2C:66:CF:DD:C5:30
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/VYTrBd2o4CH8R7F1FDwsZs_dxTA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.56.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         64:b9:43:29:85:37:51:64:24:fa:68:ff:a7:5a:03:bf:92:fb:
         fc:8c:3b:ea:45:0f:f7:e7:03:5a:ba:02:0e:5b:4d:ff:13:9d:
         5f:75:44:e1:81:e9:c7:7a:2a:bb:5f:54:ca:11:47:15:76:f7:
         c0:6e:60:f0:d9:b4:28:7e:65:04:58:a8:f7:e1:4e:d1:a1:61:
         cb:4b:29:9f:6d:3c:27:ad:da:83:ff:28:f7:b9:55:17:cd:8d:
         3b:9d:27:ab:8a:cd:ef:ae:df:42:62:ff:0c:2e:88:61:d2:8b:
         ed:f6:cd:a0:a8:60:b9:75:02:74:db:7b:b7:f7:cd:17:cb:01:
         ec:12:e4:e5:b3:23:a0:41:95:d6:ab:70:cd:da:e6:ab:21:6d:
         ea:87:ce:0f:11:5c:15:5a:28:8e:b9:ff:cb:75:54:78:14:ad:
         21:3b:27:74:33:2c:09:3f:08:ca:fb:93:6d:70:a9:13:5d:e0:
         95:f5:d4:92:6c:7e:5e:00:cd:13:65:19:1f:e0:c4:4a:60:f0:
         7d:7e:43:23:3e:60:99:2f:d0:49:1d:60:07:9d:f9:5c:55:3a:
         c2:7f:e9:b4:74:99:e7:75:1a:7e:a2:a2:a9:8c:a6:34:25:2b:
         7c:c0:3c:02:9e:1c:b8:5e:7c:66:b6:91:9b:56:93:35:c4:7c:
         fd:c1:e4:ad
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICEBEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTAyMDcx
MjM3MjdaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDU1ODRFQjA1RERBOEUw
MjFGQzQ3QjE3NTE0M0MyQzY2Q0ZEREM1MzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC5dA3jOBztIue6Pnu8rQBiE39S/rV1wF5cx/mWJ7j2n+3z0qCy
VOd5AHyL8Ub3KYaljdiILZArKiwmgfO8+mONu/W0MZWwisHoXTxyUmHU9fzzdoAa
nB7YecA1kEauWmSDV5+kx3YwMBZOO6VL7JPZmD5jfQUdqQo66n9WEFZoa/bZE9Jt
/q8PCWj5yq9XdVCS3DFUOMV310+/zEJrb/x5P7BWH8jDMYP2mIrVkscEJFe4NDPD
QKRufjvKCSVA7E/deEyOH7HLDyVj+5InpQauMJeTXCt4GN8PAQzJOMCDbuwwcAul
NyCzvMPnDdJ6J7tTJcZ2NcxCi8eGjcyL53czAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUVYTrBd2o4CH8R7F1FDwsZs/dxTAwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1ZZVHJCZDJvNENIOFI3RjFG
RHdzWnNfZHhUQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQ9
OLAwDQYJKoZIhvcNAQELBQADggEBAGS5QymFN1FkJPpo/6daA7+S+/yMO+pFD/fn
A1q6Ag5bTf8TnV91ROGB6cd6KrtfVMoRRxV298BuYPDZtCh+ZQRYqPfhTtGhYctL
KZ9tPCet2oP/KPe5VRfNjTudJ6uKze+u30Ji/wwuiGHSi+32zaCoYLl1AnTbe7f3
zRfLAewS5OWzI6BBldarcM3a5qshbeqHzg8RXBVaKI65/8t1VHgUrSE7J3QzLAk/
CMr7k21wqRNd4JX11JJsfl4AzRNlGR/gxEpg8H1+QyM+YJkv0EkdYAed+VxVOsJ/
6bR0med1Gn6ioqmMpjQlK3zAPAKeHLhefGa2kZtWkzXEfP3B5K0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:47 2024 by rpki-client on console-ams.rpki-client.org