Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_PufdmOkvwZ5UQLyftSU8KKgYH8.roa
File:                     _PufdmOkvwZ5UQLyftSU8KKgYH8.roa (raw, json)
Hash identifier:          qR3RLp6mTbTM5sXnZG6BKOH2/BojjWTkHWPJxxa6Z5g=
Subject key identifier:   FC:FB:9F:76:63:A4:BF:06:79:51:02:F2:7E:D4:94:F0:A2:A0:60:7F
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1119
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_PufdmOkvwZ5UQLyftSU8KKgYH8.roa
Signing time:             Sun 07 Feb 2021 13:13:36 +0000
ROA not before:           Sun 07 Feb 2021 13:13:36 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24165
IP address blocks:        115.165.208.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4377 (0x1119)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb  7 13:13:36 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=FCFB9F7663A4BF06795102F27ED494F0A2A0607F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4a:3f:76:80:04:d3:86:a9:e1:f7:6d:90:3d:
                    c4:7e:e7:92:12:2f:00:5e:01:62:26:ab:d5:e8:7c:
                    17:48:a8:dc:9f:05:f2:20:5e:58:db:8d:94:3d:c9:
                    41:c2:28:7c:c4:a0:12:a4:87:2d:a9:b1:9b:29:12:
                    4e:c2:5c:33:6a:65:d5:97:f2:95:fc:e7:66:14:6a:
                    b2:54:44:b8:1c:80:ed:08:bd:05:45:0e:f3:f7:8b:
                    c4:14:88:f3:9f:cc:e6:7d:87:35:6d:1f:7c:5e:50:
                    a8:5e:ce:71:fc:e2:79:1a:14:14:c5:d5:df:a6:8b:
                    00:f3:4c:e4:13:86:db:4b:bf:28:49:c9:91:21:3e:
                    18:45:69:53:0b:7a:23:ed:8b:0a:22:9a:8d:6b:7a:
                    fd:5e:ef:ef:73:47:a9:8b:62:50:2d:de:f4:90:f1:
                    d5:fb:50:b1:05:bc:c1:75:64:e4:19:4f:fa:d4:8a:
                    44:51:63:33:51:d4:cb:58:31:42:c2:e1:8f:5e:15:
                    e3:6b:e1:90:b7:72:e8:9d:04:9f:b7:cf:a7:68:9a:
                    ae:69:8f:ae:04:15:8e:b0:97:f5:65:27:d0:9c:f5:
                    4f:64:ab:ac:49:58:ce:da:5f:52:5d:82:b4:3a:70:
                    f5:ef:f2:ff:90:06:c8:c5:5c:8b:28:9d:fb:65:35:
                    b2:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:FB:9F:76:63:A4:BF:06:79:51:02:F2:7E:D4:94:F0:A2:A0:60:7F
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_PufdmOkvwZ5UQLyftSU8KKgYH8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.165.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:ff:e0:16:71:c4:01:7a:aa:0d:71:5c:d7:f1:4d:f0:d9:92:
         6c:92:da:f8:b0:a4:58:01:e9:06:8d:aa:52:78:4c:44:e9:99:
         f6:a3:63:77:8f:07:64:06:fc:07:79:df:fa:0f:ac:e3:6e:c7:
         bb:e4:1f:5e:26:a7:db:14:23:31:16:b8:dc:92:6b:32:14:32:
         2c:81:6b:43:b7:d0:3e:58:dd:ac:40:9e:a5:aa:8d:ae:0f:72:
         39:90:13:fc:5b:4b:51:ce:3a:75:5f:86:b4:66:3e:66:27:48:
         4d:8c:c0:c8:74:ea:af:6d:de:cf:d0:e8:1b:a1:3a:0e:ef:83:
         47:0d:d8:53:d6:fc:12:1c:03:61:3b:ad:31:2e:2a:47:13:41:
         33:39:a2:8c:4a:4a:f5:92:8f:74:cd:ff:9c:08:6e:37:da:39:
         bc:88:0c:e7:a5:37:7e:2c:ba:bc:ec:51:3d:29:44:5e:0e:c0:
         e4:fe:85:71:b2:9f:54:5c:a5:50:a2:57:0d:1f:65:04:85:65:
         e1:4e:4d:29:81:67:9e:45:68:22:ae:fe:0c:65:61:41:95:40:
         80:d2:c7:18:75:7f:73:90:ff:55:96:ba:84:49:0c:1d:e8:3a:
         8c:ab:11:48:3d:a0:75:64:59:e9:29:d4:70:74:02:28:97:d4:
         1a:29:95:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:04 2024 by rpki-client on console-fra.rpki-client.org