Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_eUw0nJdxPlK1trbUJeRLl4XmEs.roa
File:                     _eUw0nJdxPlK1trbUJeRLl4XmEs.roa (raw, json)
Hash identifier:          jfCLmOqan3f7vre2siBVpp9UHhoVXhg3mOQfaQD8ZJI=
Subject key identifier:   FD:E5:30:D2:72:5D:C4:F9:4A:D6:DA:DB:50:97:91:2E:5E:17:98:4B
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_eUw0nJdxPlK1trbUJeRLl4XmEs.roa
Signing time:             Thu 15 Sep 2022 02:35:21 +0000
ROA not before:           Thu 15 Sep 2022 02:35:21 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24164
IP address blocks:        61.64.28.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5374 (0x14fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 15 02:35:21 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=FDE530D2725DC4F94AD6DADB5097912E5E17984B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f7:33:90:f8:73:a9:13:d4:f9:43:33:ef:7f:
                    87:3b:91:c1:c5:6f:62:f4:16:92:fa:4b:6d:91:e0:
                    26:8a:23:ee:06:bc:2a:91:71:8f:7d:df:67:48:d9:
                    7f:b1:dc:77:40:49:ba:f4:65:cc:8f:bc:f9:ef:d6:
                    e5:e8:54:cf:14:f5:16:18:8c:f2:17:90:d8:c1:02:
                    f3:1a:03:8a:27:f9:2c:de:a3:00:4e:60:2d:ab:d2:
                    ec:6b:bc:2e:50:f8:9c:bc:77:aa:6a:82:cb:bb:ca:
                    2b:72:7e:11:5d:aa:4c:e2:4e:8f:19:b4:d1:bc:f2:
                    70:5d:18:9a:ef:60:bf:a3:c4:3b:37:17:aa:e7:0e:
                    2d:da:93:24:7f:03:c6:d7:7e:d9:42:2b:61:c7:f7:
                    6a:b9:bb:76:65:6e:a8:09:a3:81:42:48:33:34:0d:
                    9f:a1:46:aa:fb:44:fd:49:a1:65:4c:d5:68:08:32:
                    f7:9f:86:87:f8:9a:f1:f1:53:11:94:68:c4:8b:40:
                    d7:fe:48:a6:f4:e2:84:44:5f:fd:bd:13:dc:f6:f5:
                    1d:5d:f8:b2:49:44:18:e9:31:66:3b:d6:37:f6:ff:
                    c3:fc:b7:f9:12:82:03:1b:a5:57:70:16:8e:60:6d:
                    10:31:0a:2d:38:81:ec:9b:10:0e:65:d6:91:19:26:
                    5c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:E5:30:D2:72:5D:C4:F9:4A:D6:DA:DB:50:97:91:2E:5E:17:98:4B
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_eUw0nJdxPlK1trbUJeRLl4XmEs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.64.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:a5:da:94:73:8a:ff:99:c0:4e:76:04:20:09:6d:4b:78:24:
         2e:55:1d:ef:9b:83:e8:8f:f7:15:df:22:bb:a8:28:1a:f2:9b:
         99:61:9d:39:d6:d9:22:f3:72:c9:c9:3f:a0:67:ed:f5:ec:49:
         53:54:8e:62:66:a8:3a:e1:6c:c6:cf:90:36:e3:df:43:51:0a:
         de:14:60:96:13:05:1f:e7:dd:2b:20:f3:8f:ba:09:65:8d:22:
         b0:e6:c2:0f:2d:3c:a5:65:33:b7:75:fe:02:85:2c:72:8f:94:
         4b:19:4c:a3:c0:02:7c:c7:2f:50:f5:3c:98:ba:65:08:a9:3a:
         7e:e7:b9:38:4d:80:9c:8e:17:c1:07:bc:43:d4:5a:73:37:10:
         c7:76:4e:50:85:f9:a3:21:77:79:cd:4c:90:1c:c6:a2:9f:79:
         c1:0c:0c:00:87:3a:79:c4:15:3e:3d:79:ea:65:ba:0a:23:86:
         d6:2f:e6:64:bc:60:c7:82:35:ee:1c:2f:3b:e0:76:3b:2c:ae:
         59:bd:8b:fe:d0:3e:3f:31:3a:7f:77:00:54:ac:e6:0c:5a:87:
         91:53:aa:05:a1:c3:70:ca:be:61:4b:a1:4d:31:9e:4a:48:10:
         56:5c:87:f6:ef:02:20:af:54:47:9e:22:1e:e8:44:47:db:31:
         55:57:61:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:04 2024 by rpki-client on console-fra.rpki-client.org