Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/1dLADPsK4o-qeAWTHWUTw4Nqn1I.roa
File:                     1dLADPsK4o-qeAWTHWUTw4Nqn1I.roa (raw, json)
Hash identifier:          15JqYEhW3Q6WHP8ELwP18e+fR+jXp0/XjGRYJarLoFA=
Subject key identifier:   D5:D2:C0:0C:FB:0A:E2:8F:AA:78:05:93:1D:65:13:C3:83:6A:9F:52
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0D56
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/1dLADPsK4o-qeAWTHWUTw4Nqn1I.roa
Signing time:             Thu 14 Jan 2021 07:37:45 +0000
ROA not before:           Thu 14 Jan 2021 07:37:45 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24163
IP address blocks:        61.56.160.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3414 (0xd56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Jan 14 07:37:45 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=D5D2C00CFB0AE28FAA7805931D6513C3836A9F52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:18:db:9b:5d:82:81:3d:7d:9d:9a:86:e6:ec:
                    9d:f0:f7:ad:64:af:1a:a9:cf:99:0d:06:1a:e1:3b:
                    07:a0:b9:48:c0:ca:2d:0c:1e:04:9c:46:b9:d2:e7:
                    04:99:ce:d0:96:70:a6:a7:f1:ad:f3:f2:24:16:59:
                    aa:4a:ec:4f:6b:20:4c:96:5a:0f:ac:7d:ad:f3:1f:
                    c7:f6:32:7a:30:96:1a:4f:d4:72:95:36:22:e3:a2:
                    d9:48:3e:99:27:3c:e4:92:2a:c9:b3:f7:29:90:c9:
                    41:12:79:c3:ab:32:77:3e:54:97:d9:af:24:2c:d9:
                    01:31:1f:1e:5e:84:cf:d9:23:4c:3a:b8:6d:8b:0d:
                    20:5e:90:6d:b7:2e:d8:b5:47:fe:11:f0:56:47:5f:
                    e9:c7:e7:3f:03:04:14:d8:8a:67:f0:eb:ee:10:0c:
                    79:b7:25:05:63:d6:5d:12:99:a8:50:b9:72:88:52:
                    e5:fa:8d:38:eb:05:cd:2c:3d:bf:0a:4f:58:c6:42:
                    dd:9e:81:ae:32:a6:f6:66:47:16:09:d9:90:d0:02:
                    c5:c1:d1:72:10:03:6f:67:60:e4:03:f2:e4:38:9a:
                    63:62:f8:5d:33:f3:b4:5a:28:39:f0:9f:21:ae:c0:
                    fd:c1:e4:8a:98:c0:25:0a:f5:80:e3:21:d8:dd:cf:
                    a4:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:D2:C0:0C:FB:0A:E2:8F:AA:78:05:93:1D:65:13:C3:83:6A:9F:52
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/1dLADPsK4o-qeAWTHWUTw4Nqn1I.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.56.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:b9:e2:43:2c:9a:82:17:1c:45:67:79:1f:b4:be:08:39:7c:
         5b:05:5a:ee:ca:de:7d:7f:23:da:6b:81:61:92:48:21:4b:fc:
         34:cb:50:15:50:8b:a3:eb:46:14:7c:25:69:80:db:33:19:76:
         f4:fd:56:d0:8f:21:f1:70:83:ce:90:57:97:fd:13:68:fb:3f:
         f9:0d:f0:68:bd:20:78:81:d9:6b:13:3b:06:2a:3e:58:0f:6c:
         c4:ee:ab:92:6d:eb:23:c1:37:8f:ef:e2:3f:1b:1a:37:5d:3e:
         37:7e:b6:ad:49:37:b1:8a:c6:e0:1b:d8:d9:d2:f6:48:b3:2f:
         c7:44:71:83:79:a7:55:d5:c5:28:70:77:2e:89:cf:58:8b:30:
         2a:ef:a0:6f:fb:c4:cc:6d:1a:91:c8:76:36:7e:57:41:e1:f5:
         09:0e:71:d2:6c:1f:f8:9c:5d:b2:66:2a:38:8b:e7:a7:9f:b3:
         7c:ac:e4:f8:c1:61:68:02:77:6b:7f:f9:00:da:e3:5f:2e:32:
         7d:6f:8c:3c:a2:9f:8a:48:e5:57:16:fe:30:1a:40:ce:e3:31:
         82:d1:59:3d:4e:c8:64:fe:50:3e:50:74:92:bd:3b:28:ca:1b:
         e7:c7:be:c0:71:a1:a4:87:22:20:9d:6b:0e:d0:46:46:6b:78:
         8f:94:0a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:44 2024 by rpki-client on console-ams.rpki-client.org