Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/62M2vyDa628k6gw-8BNuRrUgbcQ.roa
File:                     62M2vyDa628k6gw-8BNuRrUgbcQ.roa (raw, json)
Hash identifier:          pYfE+RqrYL54f29D8LZjDd3DeM7H4o0KIB7YKbikrgw=
Subject key identifier:   EB:63:36:BF:20:DA:EB:6F:24:EA:0C:3E:F0:13:6E:46:B5:20:6D:C4
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/62M2vyDa628k6gw-8BNuRrUgbcQ.roa
Signing time:             Thu 15 Sep 2022 02:35:19 +0000
ROA not before:           Thu 15 Sep 2022 02:35:19 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24164
IP address blocks:        49.158.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5374 (0x14fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 15 02:35:19 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=EB6336BF20DAEB6F24EA0C3EF0136E46B5206DC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:54:7f:25:f9:d3:50:f6:1c:92:02:66:cd:69:
                    38:58:64:90:f6:b9:46:0b:4d:a3:8d:fc:63:a1:bb:
                    b0:32:14:d6:8e:f5:54:7f:34:35:7b:44:49:1b:b9:
                    76:68:e7:be:b2:ef:73:af:96:11:44:17:d4:cb:b9:
                    1b:d2:80:a8:f1:43:82:d8:51:e6:17:98:9b:18:e5:
                    a3:ab:a1:f4:5a:de:ca:17:70:ae:c7:89:aa:d5:61:
                    37:fc:78:88:2f:f1:23:8a:51:b3:07:99:0b:ee:1f:
                    ba:53:7e:bb:1b:22:96:b4:7c:f3:fa:08:20:0d:3f:
                    f8:bb:fc:c9:6b:bf:96:ae:e1:93:71:6b:a2:3d:cd:
                    70:ed:6b:68:36:a1:29:50:e5:c3:3e:24:d8:94:d7:
                    da:59:65:06:e5:7f:c0:25:c4:8e:39:27:a9:f0:4f:
                    52:32:88:44:0b:09:8b:71:2c:c3:32:63:89:06:2d:
                    5d:37:36:7d:51:fe:98:3c:90:a6:4a:9c:d7:c5:8b:
                    e8:4d:79:e1:22:c7:c2:2f:db:6e:06:fd:10:0a:26:
                    3b:c9:98:e6:c9:f0:75:99:76:20:f9:41:0f:30:e9:
                    9b:e6:a1:f1:b1:3a:4a:bc:64:91:57:97:f7:d9:7a:
                    04:58:cf:a4:42:42:fc:c6:bf:59:53:ea:f4:84:bd:
                    e0:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:63:36:BF:20:DA:EB:6F:24:EA:0C:3E:F0:13:6E:46:B5:20:6D:C4
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/62M2vyDa628k6gw-8BNuRrUgbcQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         25:29:92:0f:b5:dd:83:1f:ec:1a:18:13:96:8c:09:05:9c:8f:
         15:58:b1:14:4e:84:94:23:89:f0:2b:70:73:63:d9:cc:b7:0a:
         19:60:60:37:fa:c3:50:95:c4:95:15:74:f8:eb:c1:d2:b2:23:
         78:a0:93:16:39:a5:c2:7e:44:69:44:31:41:97:19:34:90:58:
         bd:be:18:91:7e:14:75:8e:c5:44:74:5a:2a:86:0a:af:b1:1c:
         44:39:71:ff:22:29:ce:a2:e6:e6:c4:8c:2f:94:a0:5a:a9:cd:
         6c:41:dc:9b:4f:78:57:21:f5:ba:24:ed:fa:87:63:45:c6:0a:
         fe:a7:29:49:d8:84:26:8d:f4:76:a5:c3:ad:5c:95:72:dd:14:
         c4:13:9b:b6:a3:ef:19:30:01:5a:2c:2f:da:aa:19:9d:d9:e2:
         fe:d1:32:3b:90:be:0e:a7:bf:bc:b6:07:fb:fb:41:42:37:ec:
         95:ee:95:ad:d4:e0:6d:24:6e:b0:98:ca:e5:4e:8c:79:09:ef:
         35:fe:3e:ab:b7:8a:88:98:e2:5a:65:41:9a:16:e4:5f:a1:43:
         29:c7:2f:ff:40:a2:54:dd:47:c5:e1:48:73:98:a1:b2:73:b7:
         d1:7c:7d:72:2c:8a:10:3a:2a:38:e3:83:36:a4:ec:b3:99:2e:
         1c:ec:de:0c
-----BEGIN CERTIFICATE-----
MIIE0TCCA7mgAwIBAgICFP4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjA5MTUw
MjM1MTlaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEVCNjMzNkJGMjBEQUVC
NkYyNEVBMEMzRUYwMTM2RTQ2QjUyMDZEQzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDTVH8l+dNQ9hySAmbNaThYZJD2uUYLTaON/GOhu7AyFNaO9VR/
NDV7REkbuXZo576y73OvlhFEF9TLuRvSgKjxQ4LYUeYXmJsY5aOrofRa3soXcK7H
iarVYTf8eIgv8SOKUbMHmQvuH7pTfrsbIpa0fPP6CCANP/i7/Mlrv5au4ZNxa6I9
zXDta2g2oSlQ5cM+JNiU19pZZQblf8AlxI45J6nwT1IyiEQLCYtxLMMyY4kGLV03
Nn1R/pg8kKZKnNfFi+hNeeEix8Iv224G/RAKJjvJmObJ8HWZdiD5QQ8w6ZvmofGx
Okq8ZJFXl/fZegRYz6RCQvzGv1lT6vSEveBZAgMBAAGjggHtMIIB6TAdBgNVHQ4E
FgQU62M2vyDa628k6gw+8BNuRrUgbcQwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzYyTTJ2eURhNjI4azZndy04
Qk51UnJVZ2JjUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwAx
njANBgkqhkiG9w0BAQsFAAOCAQEAJSmSD7Xdgx/sGhgTlowJBZyPFVixFE6ElCOJ
8Ctwc2PZzLcKGWBgN/rDUJXElRV0+OvB0rIjeKCTFjmlwn5EaUQxQZcZNJBYvb4Y
kX4UdY7FRHRaKoYKr7EcRDlx/yIpzqLm5sSML5SgWqnNbEHcm094VyH1uiTt+odj
RcYK/qcpSdiEJo30dqXDrVyVct0UxBObtqPvGTABWiwv2qoZndni/tEyO5C+Dqe/
vLYH+/tBQjfsle6VrdTgbSRusJjK5U6MeQnvNf4+q7eKiJjiWmVBmhbkX6FDKccv
/0CiVN1HxeFIc5ihsnO30Xx9ciyKEDoqOOODNqTss5kuHOzeDA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:02 2024 by rpki-client on console-fra.rpki-client.org