Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/v5QgPkaixoL5tiEyO8-leLXg1Is.roa
File:                     v5QgPkaixoL5tiEyO8-leLXg1Is.roa (raw, json)
Hash identifier:          XqAne36HnNv5Z/cYJFQkAqFvgrZr+myCzzhFLwIiSLY=
Subject key identifier:   BF:94:20:3E:46:A2:C6:82:F9:B6:21:32:3B:CF:A5:78:B5:E0:D4:8B
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/v5QgPkaixoL5tiEyO8-leLXg1Is.roa
Signing time:             Thu 15 Sep 2022 02:35:47 +0000
ROA not before:           Thu 15 Sep 2022 02:35:47 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24165
IP address blocks:        115.165.208.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5374 (0x14fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 15 02:35:47 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=BF94203E46A2C682F9B621323BCFA578B5E0D48B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:22:36:36:a4:69:fb:de:cb:77:76:9d:4b:20:
                    d2:b3:f4:dc:52:fb:53:83:4f:4d:ca:e5:7c:b1:64:
                    e6:51:41:cc:64:14:78:08:d5:f2:39:2d:bf:2a:34:
                    ec:3c:14:c6:6a:fe:24:90:8c:75:3c:55:a1:77:3e:
                    5e:a8:29:ef:37:92:1a:39:48:5d:11:05:51:46:a0:
                    60:be:39:20:60:88:d0:75:72:22:b7:4b:c6:80:99:
                    e4:67:1e:c7:85:6c:b0:fe:cd:7c:5d:05:06:5c:0c:
                    79:df:af:07:f3:02:00:7c:8b:e8:f2:b9:9a:83:82:
                    f3:92:65:e4:01:90:90:91:51:3c:ae:36:9d:35:4c:
                    4d:c8:98:e8:cd:1c:6c:08:b4:4a:28:fd:f0:de:7d:
                    2f:82:79:6c:88:49:0d:71:47:f0:c9:b1:e8:f2:cd:
                    cf:15:a1:ba:02:ce:33:27:59:9c:f0:c7:c7:7a:3a:
                    7d:8f:74:40:2d:55:74:0e:d1:43:a9:7e:f6:2f:f0:
                    de:74:78:2c:9e:de:1c:41:d9:84:40:a1:f3:c7:3e:
                    58:ba:1f:9a:2a:d2:4f:56:9a:ea:cb:5e:0a:48:f3:
                    08:46:55:1e:5d:1f:a2:9b:8b:d8:58:a1:97:84:e5:
                    90:28:25:6e:19:bd:4f:d4:74:eb:82:70:4c:d5:34:
                    2b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:94:20:3E:46:A2:C6:82:F9:B6:21:32:3B:CF:A5:78:B5:E0:D4:8B
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/v5QgPkaixoL5tiEyO8-leLXg1Is.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.165.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         78:ca:24:99:2b:58:d3:ba:a7:43:45:05:af:07:48:09:16:fc:
         ed:b1:a2:68:50:32:1b:39:de:3e:5a:ae:88:60:d9:ba:51:8b:
         e2:01:d5:e0:35:4b:89:36:57:22:a2:1b:f0:de:d8:b4:8d:97:
         fb:52:83:61:fe:13:35:cf:bc:ad:5b:a7:a6:f2:61:f4:85:40:
         0e:36:ea:1c:b1:27:0f:fd:c1:e2:9c:56:2b:b4:38:cd:70:ab:
         88:f6:7a:43:03:6e:11:ab:ce:43:a5:8c:2d:69:b9:18:ad:70:
         f8:e2:63:ab:80:0c:78:c5:2f:4f:61:ab:00:9e:38:e8:bf:88:
         87:5f:8b:4b:f4:2d:fc:36:4a:63:1e:20:7e:e1:68:a4:80:d3:
         54:1d:46:80:f3:b9:17:d1:01:2e:29:3f:e8:89:e8:8c:bb:13:
         99:53:6e:1f:4a:d4:61:d8:3e:25:39:95:52:74:49:0f:1f:21:
         e5:33:c7:c9:af:1b:f1:90:41:10:cb:df:75:bc:5b:4c:6d:86:
         62:c9:ed:4f:c7:35:8d:9d:40:ea:7f:d1:37:c4:2b:5a:54:fa:
         71:d2:97:f7:14:e9:46:64:ab:7f:7c:26:6b:de:84:62:5d:be:
         69:23:53:25:16:15:a9:f4:c4:aa:95:f1:97:53:2c:cb:0f:5b:
         7c:ae:e6:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org