Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/n_L7_gvCmyhn27pJIU8ErntcfA8.roa
File:                     n_L7_gvCmyhn27pJIU8ErntcfA8.roa (raw, json)
Hash identifier:          7IX3sdJhMcT4RorlWnU+X8q0X/lKV8FNF9N1/j3KrbY=
Subject key identifier:   9F:F2:FB:FE:0B:C2:9B:28:67:DB:BA:49:21:4F:04:AE:7B:5C:7C:0F
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       19F2
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/n_L7_gvCmyhn27pJIU8ErntcfA8.roa
Signing time:             Sat 22 Oct 2022 06:13:19 +0000
ROA not before:           Sat 22 Oct 2022 06:13:19 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24163
IP address blocks:        61.58.96.0/20 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6642 (0x19f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Oct 22 06:13:19 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=9FF2FBFE0BC29B2867DBBA49214F04AE7B5C7C0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b2:ac:56:62:8e:a1:af:b4:2c:37:d7:cb:36:
                    fa:49:35:78:11:87:0a:29:ba:ea:12:00:0e:9c:82:
                    b1:98:14:fa:df:2f:12:be:72:ce:fc:3b:f8:04:12:
                    3a:67:56:ec:e3:7f:92:6e:25:16:7f:38:11:b3:65:
                    95:aa:69:65:dc:6a:9c:13:d8:14:e3:4b:71:8b:90:
                    e9:0d:e6:0b:78:52:a9:f4:b3:cf:8e:06:3f:72:57:
                    a9:3f:be:5f:c4:1c:8e:26:c1:57:2e:75:b8:33:af:
                    28:3d:75:42:a9:42:1f:ef:49:44:34:bc:29:ae:77:
                    52:cb:22:26:80:b5:f2:27:6a:fb:e5:ae:28:d4:49:
                    e7:21:32:44:90:2b:b3:e6:e2:94:77:59:5c:43:75:
                    bf:f1:6c:8e:30:f2:08:33:62:3c:61:e8:cd:49:34:
                    d8:42:ef:1b:0a:74:97:25:f6:a3:7b:5b:ab:e4:f3:
                    80:18:d1:e1:13:47:7a:0c:04:6a:eb:02:4b:f3:d0:
                    0c:cd:41:5a:cd:ab:0a:bd:bd:5d:00:e1:df:40:20:
                    83:82:d1:80:de:83:0c:24:52:f0:f7:8c:b3:13:cf:
                    d6:a4:b2:cf:13:d9:c5:1b:34:f9:06:79:99:85:f5:
                    b3:cb:ef:21:ed:67:f2:f2:ff:f2:49:cd:1e:49:da:
                    c2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:F2:FB:FE:0B:C2:9B:28:67:DB:BA:49:21:4F:04:AE:7B:5C:7C:0F
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/n_L7_gvCmyhn27pJIU8ErntcfA8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.58.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6d:03:99:a5:6b:fb:88:a8:43:b2:a2:35:eb:9e:f0:15:55:d9:
         26:f6:3f:bb:10:72:d4:37:7e:0b:c5:75:dd:95:01:65:d4:97:
         d0:4a:c6:61:f6:68:62:95:25:0b:34:92:63:45:af:c4:30:ab:
         ea:66:c6:dc:2c:79:3c:c3:e3:04:ef:3b:a2:7e:a0:7b:37:fb:
         bb:e9:16:ec:34:6d:c6:db:b0:14:f8:32:8b:bd:e4:9e:b9:c7:
         5c:89:f5:6d:e8:77:d7:08:60:bd:3b:e3:ef:7e:01:9d:f3:24:
         ae:8b:4c:0b:ed:85:5f:81:ea:60:b1:5c:ae:8e:78:d5:33:8a:
         fb:27:cf:57:1c:59:8d:fa:06:1e:65:d0:7f:ed:ed:21:60:e9:
         3b:d9:01:9f:ac:3b:80:ac:57:92:1a:86:dd:fb:c1:ec:16:7b:
         af:cd:2c:e8:80:35:f8:78:1f:75:4f:6c:f6:2b:3b:7e:78:7f:
         00:08:38:a3:1c:22:c0:68:92:1b:0d:51:85:44:37:e2:7b:fa:
         d0:c7:10:3c:b2:ea:a5:50:9a:af:68:65:ba:18:55:41:0e:71:
         47:08:9b:18:3b:83:1f:fa:d2:46:af:f1:c1:ed:03:c9:f7:cd:
         14:89:ac:d1:d8:9f:de:57:91:2c:e5:2f:65:1f:3d:8f:41:4b:
         e8:3a:32:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:05 2024 by rpki-client on console-fra.rpki-client.org