Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/2-cSB-joVm1wfOSc_pNxGevHOos.roa
File:                     2-cSB-joVm1wfOSc_pNxGevHOos.roa (raw, json)
Hash identifier:          x4KbrSOVKxb7cXsn7P0CGGCle9vuyts7ds73m2+OCow=
Subject key identifier:   DB:E7:12:07:E8:E8:56:6D:70:7C:E4:9C:FE:93:71:19:EB:C7:3A:8B
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0B44
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/2-cSB-joVm1wfOSc_pNxGevHOos.roa
Signing time:             Tue 29 Sep 2020 10:08:13 +0000
ROA not before:           Tue 29 Sep 2020 10:08:13 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        119.77.254.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2884 (0xb44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:08:13 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=DBE71207E8E8566D707CE49CFE937119EBC73A8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2f:81:db:30:ec:9d:34:8e:9d:dd:df:c0:0d:
                    84:75:61:d8:11:c3:f7:e6:2b:e2:83:ab:e7:cb:1f:
                    d3:c7:93:09:e4:e6:00:dd:4f:d3:3d:b2:a9:9b:fb:
                    5f:ac:aa:65:50:2f:be:92:75:ed:55:5c:82:39:05:
                    be:81:6b:77:3d:a4:55:38:30:09:22:2f:57:3e:7d:
                    63:5c:bf:5d:95:f2:70:a8:53:ec:51:c0:fd:23:8b:
                    8b:be:3e:0d:94:13:71:a2:fe:01:15:63:ec:f0:3f:
                    58:e0:36:5f:c9:88:e0:57:2e:8b:97:c2:5f:14:db:
                    ee:83:a2:41:1d:26:51:4c:ff:f3:ea:6b:88:f6:71:
                    81:89:01:fe:b8:13:a6:9b:d4:da:47:5b:0d:c0:82:
                    5c:8d:b8:e4:07:ba:44:f2:7b:c8:43:e4:57:5f:f1:
                    e5:75:6d:01:02:d8:4d:42:ba:6e:94:04:65:f7:66:
                    f4:0e:f3:62:8b:15:b7:91:e0:a9:1c:cd:73:6e:1e:
                    c4:ab:94:78:65:46:86:db:94:0e:f3:94:f6:e2:ec:
                    a6:49:4c:37:bf:2c:3b:92:47:bf:72:f6:2c:d0:f9:
                    a0:44:20:92:4d:88:98:de:c2:11:af:42:5b:85:bd:
                    bd:08:9b:c2:37:85:8a:50:7f:a4:16:8c:cf:dc:44:
                    94:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:E7:12:07:E8:E8:56:6D:70:7C:E4:9C:FE:93:71:19:EB:C7:3A:8B
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/2-cSB-joVm1wfOSc_pNxGevHOos.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.77.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:1c:b9:ea:1f:52:03:b0:ab:44:03:04:eb:c6:65:0e:64:05:
         b1:9a:c9:40:b1:1a:dd:a2:51:65:ad:3d:9f:47:09:a3:8b:38:
         6b:04:07:29:fe:29:07:ad:96:96:1e:94:a1:c2:58:b7:a6:54:
         e6:94:a5:ad:23:6c:3c:ce:fe:87:1d:d1:96:b2:3a:de:55:54:
         d1:7b:3e:af:d5:c9:9d:22:67:92:0b:2b:30:67:46:d9:bc:f9:
         fa:19:b6:01:a1:5d:a2:09:14:1a:20:62:bb:6f:02:59:8c:a1:
         5d:ba:1d:fb:c8:77:38:17:f4:6e:16:0b:47:b8:15:19:d3:02:
         a3:7e:57:b8:b0:99:29:45:16:43:6e:f6:2b:07:af:c8:b3:8a:
         cf:61:c5:d1:aa:ff:85:5e:c4:1b:73:d0:f9:68:99:64:e3:16:
         04:9e:8f:48:6b:76:02:3c:1d:4c:2f:b9:a5:81:66:7e:06:8e:
         6b:75:c9:bd:ed:cb:62:76:29:03:02:2d:40:09:b0:b0:f6:03:
         04:da:07:b8:91:4c:c8:2d:8d:42:d3:d0:49:19:8b:fc:42:45:
         2a:ed:09:41:8b:8d:b6:08:9f:05:4a:90:a0:fd:51:da:de:f3:
         df:d8:05:f2:b2:c0:49:d3:00:4e:47:77:de:69:1a:70:a6:0c:
         07:74:a9:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:44 2024 by rpki-client on console-ams.rpki-client.org