Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/pN_RGx4044jaPjJ8MsalnGsgh18.roa
File:                     pN_RGx4044jaPjJ8MsalnGsgh18.roa (raw, json)
Hash identifier:          eUCgCMrWKLmMOwO65TjrZPqsG+z8aXvNqu+cDLYHOc4=
Subject key identifier:   A4:DF:D1:1B:1E:34:E3:88:DA:3E:32:7C:32:C6:A5:9C:6B:20:87:5F
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0BA3
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/pN_RGx4044jaPjJ8MsalnGsgh18.roa
Signing time:             Tue 29 Sep 2020 10:08:39 +0000
ROA not before:           Tue 29 Sep 2020 10:08:39 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        49.159.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2979 (0xba3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:08:39 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=A4DFD11B1E34E388DA3E327C32C6A59C6B20875F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:49:3c:ba:0b:e7:c5:33:f0:c6:59:30:bf:5c:
                    4e:8f:46:9a:24:bc:e0:86:e2:91:be:ef:e3:36:9b:
                    33:c4:b6:e2:22:92:a7:a3:f4:f9:09:2a:41:cd:0a:
                    a5:4f:27:8a:06:0c:b9:39:c5:c6:59:7c:b6:88:e2:
                    4d:4f:ea:1a:31:bb:e1:e1:42:c1:ba:05:d8:84:83:
                    b1:d8:9e:28:24:7b:e2:66:c6:84:83:3d:d2:62:02:
                    49:86:75:1d:fa:42:e5:38:20:4e:f4:82:67:ab:4e:
                    87:76:71:fb:f6:b0:29:54:c7:e7:cf:47:c0:a5:3b:
                    2f:9d:92:72:66:5a:c1:9f:f7:8c:eb:b5:e2:8a:9d:
                    9f:c9:75:59:80:bf:71:92:b2:26:c6:e2:e3:c6:20:
                    5c:8e:2d:67:e0:02:2d:5d:41:d9:36:22:df:ee:43:
                    ed:89:af:90:7c:5c:4f:09:79:af:7d:40:68:47:b7:
                    b2:cf:2e:a7:9b:08:78:74:da:67:d2:72:f9:21:93:
                    10:8d:35:9c:82:ed:a0:5e:c0:e7:c4:50:21:dc:5f:
                    5b:e3:10:18:58:28:63:7d:21:5d:b1:76:54:69:7a:
                    b2:fd:5a:81:d9:7c:af:82:a9:3e:23:25:23:56:c6:
                    dc:d4:54:7c:48:25:04:45:89:6a:5e:92:6d:b0:bf:
                    f5:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:DF:D1:1B:1E:34:E3:88:DA:3E:32:7C:32:C6:A5:9C:6B:20:87:5F
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/pN_RGx4044jaPjJ8MsalnGsgh18.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.159.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         31:3a:45:ae:ba:48:d7:d0:11:43:01:40:d4:42:b3:be:eb:0d:
         28:78:d3:51:f1:49:25:5a:81:f5:bd:aa:51:5e:75:6b:b1:e4:
         97:ae:88:1c:c7:25:c9:ac:c6:94:41:db:01:37:a3:05:27:02:
         54:e5:b4:fa:b3:13:7f:33:e7:b8:92:5e:64:9f:dd:79:35:1f:
         cc:87:1d:d5:b0:41:be:0f:04:7f:da:1c:98:ef:ac:70:ce:7b:
         05:dc:1d:bb:f0:78:4d:aa:dc:71:05:d3:09:d3:5d:4f:a2:bf:
         23:48:0b:87:6b:cc:80:3e:0e:a7:93:1e:15:95:ae:dc:2d:be:
         75:2d:f4:ba:ba:ea:33:a5:d2:33:a3:63:c1:02:08:28:85:8d:
         16:f9:df:5b:01:06:b0:ba:38:1b:46:6e:88:b3:f9:15:b6:00:
         46:d6:6e:55:b6:d0:70:13:58:0c:dc:d8:0c:1f:51:43:2b:b3:
         1a:ae:dc:48:c4:76:39:46:7e:96:ca:c4:ce:32:6f:78:2d:12:
         7b:32:1c:b0:e0:d4:29:a6:91:80:9c:db:4e:20:29:71:4d:43:
         c3:56:c7:db:c3:e9:11:6c:86:dd:c9:73:2e:9b:f0:83:d9:05:
         b9:ea:0c:f3:7c:0f:9d:f3:e2:cb:9f:ba:d9:22:55:5c:39:0c:
         de:fe:32:f4
-----BEGIN CERTIFICATE-----
MIIE0TCCA7mgAwIBAgICC6MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMDA5Mjkx
MDA4MzlaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEE0REZEMTFCMUUzNEUz
ODhEQTNFMzI3QzMyQzZBNTlDNkIyMDg3NUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCvSTy6C+fFM/DGWTC/XE6PRpokvOCG4pG+7+M2mzPEtuIikqej
9PkJKkHNCqVPJ4oGDLk5xcZZfLaI4k1P6hoxu+HhQsG6BdiEg7HYnigke+JmxoSD
PdJiAkmGdR36QuU4IE70gmerTod2cfv2sClUx+fPR8ClOy+dknJmWsGf94zrteKK
nZ/JdVmAv3GSsibG4uPGIFyOLWfgAi1dQdk2It/uQ+2Jr5B8XE8Jea99QGhHt7LP
LqebCHh02mfScvkhkxCNNZyC7aBewOfEUCHcX1vjEBhYKGN9IV2xdlRperL9WoHZ
fK+CqT4jJSNWxtzUVHxIJQRFiWpekm2wv/VBAgMBAAGjggHtMIIB6TAdBgNVHQ4E
FgQUpN/RGx4044jaPjJ8MsalnGsgh18wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3BOX1JHeDQwNDRqYVBqSjhN
c2FsbkdzZ2gxOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwAx
nzANBgkqhkiG9w0BAQsFAAOCAQEAMTpFrrpI19ARQwFA1EKzvusNKHjTUfFJJVqB
9b2qUV51a7Hkl66IHMclyazGlEHbATejBScCVOW0+rMTfzPnuJJeZJ/deTUfzIcd
1bBBvg8Ef9ocmO+scM57Bdwdu/B4TarccQXTCdNdT6K/I0gLh2vMgD4Op5MeFZWu
3C2+dS30urrqM6XSM6NjwQIIKIWNFvnfWwEGsLo4G0ZuiLP5FbYARtZuVbbQcBNY
DNzYDB9RQyuzGq7cSMR2OUZ+lsrEzjJveC0SezIcsODUKaaRgJzbTiApcU1Dw1bH
28PpEWyG3clzLpvwg9kFueoM83wPnfPiy5+62SJVXDkM3v4y9A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:05 2024 by rpki-client on console-fra.rpki-client.org