Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fsWO0p0ERu1hX8dPYR4WgDdKzP8.roa
File:                     fsWO0p0ERu1hX8dPYR4WgDdKzP8.roa (raw, json)
Hash identifier:          jiZZwWR2DSwTsMW8J/2bsIW0wZoy/GDLPWVlqeFBj0A=
Subject key identifier:   7E:C5:8E:D2:9D:04:46:ED:61:5F:C7:4F:61:1E:16:80:37:4A:CC:FF
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       111F
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fsWO0p0ERu1hX8dPYR4WgDdKzP8.roa
Signing time:             Sun 07 Feb 2021 13:13:46 +0000
ROA not before:           Sun 07 Feb 2021 13:13:46 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24163
IP address blocks:        119.77.140.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4383 (0x111f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb  7 13:13:46 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=7EC58ED29D0446ED615FC74F611E1680374ACCFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:91:fb:9e:32:3b:bd:7f:54:a0:c3:20:8d:1b:
                    74:aa:a9:2e:94:e8:b0:c3:f7:41:b6:97:11:dd:1a:
                    be:30:7b:a7:87:5f:21:4f:f2:3d:d3:a3:a8:90:6e:
                    33:3a:ab:9b:da:18:1d:8b:6e:9e:7c:ac:dc:b5:11:
                    74:ff:a4:87:66:45:87:77:f2:5e:e0:08:5a:10:a7:
                    e1:4f:47:26:08:ac:0d:1f:5d:32:6c:1e:65:c6:f7:
                    85:c0:92:d9:5d:e5:69:9a:f3:f6:c6:97:a4:33:d5:
                    23:a7:ba:66:85:a3:c1:4c:92:a9:c4:98:14:69:89:
                    52:82:6c:87:27:41:52:0d:1a:98:c1:4d:82:5f:cb:
                    96:c8:be:61:75:6d:9c:b8:4c:33:1f:23:d3:3e:d6:
                    a7:b3:22:33:cd:98:52:60:f1:6d:1a:60:0c:90:4d:
                    96:80:88:a1:71:a4:3c:57:24:ab:a3:9c:7e:11:92:
                    0a:7e:48:40:dc:c3:f7:d3:33:b3:91:2e:92:62:c4:
                    1d:d1:41:8d:49:b2:c5:93:61:fd:b9:c4:a6:30:27:
                    d5:ec:43:ad:1c:17:60:a2:d0:e9:52:0a:13:61:9d:
                    e9:bc:35:62:21:8c:f5:be:d5:99:3c:93:9f:16:20:
                    76:e6:8c:09:e8:00:34:50:a7:72:06:01:1e:71:f9:
                    f2:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:C5:8E:D2:9D:04:46:ED:61:5F:C7:4F:61:1E:16:80:37:4A:CC:FF
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fsWO0p0ERu1hX8dPYR4WgDdKzP8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.77.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:e9:6f:53:80:cf:e7:b0:9e:07:52:98:9a:bd:1b:16:93:96:
         f3:3f:4b:cf:41:c0:0f:6b:03:ea:2c:20:02:05:c5:5e:44:1c:
         2d:a8:33:33:c7:1e:e8:86:d0:b5:22:59:ec:50:f8:71:fc:4e:
         6a:13:03:97:af:3f:06:44:03:25:b3:81:dd:1b:4d:fa:8e:33:
         8f:2e:a2:be:04:f4:c4:df:65:04:7f:e1:21:87:20:e9:df:b8:
         01:e9:c5:f0:46:39:ff:a4:95:94:2a:80:c7:71:ec:95:cd:6c:
         a3:cc:e6:54:bf:a8:b9:f3:30:31:57:d8:52:d5:ed:c0:c6:f1:
         5f:ca:06:42:52:33:a1:4e:17:42:bd:82:5e:51:fe:b0:f5:6f:
         c8:48:fa:b3:ce:3e:d2:a5:67:b8:cd:88:bb:ea:c8:db:8c:ab:
         cb:77:ef:fa:5e:5c:b0:b6:bf:f4:f8:18:71:5d:eb:a1:4a:09:
         15:07:e4:24:a6:36:81:46:a5:31:43:f0:fe:10:10:d6:49:04:
         9e:3f:da:44:61:95:09:df:04:19:38:6c:a5:a7:f3:f8:40:8d:
         70:1b:ce:ed:33:78:08:5f:10:e3:20:a4:0d:33:d3:61:55:75:
         cb:c1:ed:50:b5:1e:d9:2c:47:0b:e9:31:2f:10:b9:79:0d:35:
         0c:0f:de:3f
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICER8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTAyMDcx
MzEzNDZaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDdFQzU4RUQyOUQwNDQ2
RUQ2MTVGQzc0RjYxMUUxNjgwMzc0QUNDRkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCskfueMju9f1SgwyCNG3SqqS6U6LDD90G2lxHdGr4we6eHXyFP
8j3To6iQbjM6q5vaGB2Lbp58rNy1EXT/pIdmRYd38l7gCFoQp+FPRyYIrA0fXTJs
HmXG94XAktld5Wma8/bGl6Qz1SOnumaFo8FMkqnEmBRpiVKCbIcnQVINGpjBTYJf
y5bIvmF1bZy4TDMfI9M+1qezIjPNmFJg8W0aYAyQTZaAiKFxpDxXJKujnH4Rkgp+
SEDcw/fTM7ORLpJixB3RQY1JssWTYf25xKYwJ9XsQ60cF2Ci0OlSChNhnem8NWIh
jPW+1Zk8k58WIHbmjAnoADRQp3IGAR5x+fJ/AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUfsWO0p0ERu1hX8dPYR4WgDdKzP8wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2ZzV08wcDBFUnUxaFg4ZFBZ
UjRXZ0RkS3pQOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ3
TYwwDQYJKoZIhvcNAQELBQADggEBACnpb1OAz+ewngdSmJq9GxaTlvM/S89BwA9r
A+osIAIFxV5EHC2oMzPHHuiG0LUiWexQ+HH8TmoTA5evPwZEAyWzgd0bTfqOM48u
or4E9MTfZQR/4SGHIOnfuAHpxfBGOf+klZQqgMdx7JXNbKPM5lS/qLnzMDFX2FLV
7cDG8V/KBkJSM6FOF0K9gl5R/rD1b8hI+rPOPtKlZ7jNiLvqyNuMq8t37/peXLC2
v/T4GHFd66FKCRUH5CSmNoFGpTFD8P4QENZJBJ4/2kRhlQnfBBk4bKWn8/hAjXAb
zu0zeAhfEOMgpA0z02FVdcvB7VC1HtksRwvpMS8QuXkNNQwP3j8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:05 2024 by rpki-client on console-fra.rpki-client.org