Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6RqaKMt-onS9dPME29vdc8Vqc70.roa
File:                     6RqaKMt-onS9dPME29vdc8Vqc70.roa (raw, json)
Hash identifier:          eKHF7+bVTCzGGu/TCOlRhwNHtZiXExp+jT0xLNx0TW0=
Subject key identifier:   E9:1A:9A:28:CB:7E:A2:74:BD:74:F3:04:DB:DB:DD:73:C5:6A:73:BD
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1B5D
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6RqaKMt-onS9dPME29vdc8Vqc70.roa
Signing time:             Fri 07 Apr 2023 07:15:40 +0000
ROA not before:           Fri 07 Apr 2023 07:15:40 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24164
IP address blocks:        122.100.64.0/18 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7005 (0x1b5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Apr  7 07:15:40 2023 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=E91A9A28CB7EA274BD74F304DBDBDD73C56A73BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:57:64:96:1f:a1:dc:2f:22:7c:bb:c1:74:c7:
                    ad:f4:e5:51:db:b2:83:c1:92:92:93:80:26:9f:64:
                    dc:a1:89:19:be:d4:01:49:cf:71:cc:81:5a:22:8c:
                    66:40:dc:1a:84:f4:69:6a:30:8c:0a:0a:90:5f:94:
                    48:4f:3f:0b:26:4d:14:62:6b:72:e3:8d:fe:b8:0b:
                    f5:f2:b9:4b:84:91:42:b1:df:84:90:9c:b8:fb:01:
                    f9:b7:86:d4:a2:8e:1e:8a:be:72:a7:de:47:fc:f3:
                    86:31:44:c7:19:b3:ed:85:97:0d:f0:d0:ac:bb:2c:
                    b0:95:22:f5:d7:ff:a7:c0:2e:9a:b7:83:5b:21:d7:
                    02:ea:50:79:07:7a:b5:02:99:77:3f:b0:17:04:ee:
                    f7:94:52:a9:ed:86:40:1e:3d:60:16:c8:c5:8b:0a:
                    c6:22:9b:14:62:c9:66:37:4f:a0:a9:04:8f:b1:31:
                    a6:89:94:f2:6f:b4:07:93:65:46:2c:7c:41:b0:e2:
                    80:98:fa:e1:90:4b:19:b3:1d:fe:03:c5:d5:89:3a:
                    50:34:3a:1e:97:d0:ae:5e:f2:ad:fa:92:9a:79:34:
                    a9:3f:05:57:ba:04:84:49:6b:88:56:ff:04:2e:61:
                    85:ed:6c:66:ad:d0:de:0c:71:b2:fa:c5:fa:cf:34:
                    d6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:1A:9A:28:CB:7E:A2:74:BD:74:F3:04:DB:DB:DD:73:C5:6A:73:BD
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6RqaKMt-onS9dPME29vdc8Vqc70.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.100.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         29:30:9c:55:03:d5:b7:3b:bf:a0:ae:cb:cb:2b:df:4e:b0:37:
         00:79:dc:24:d3:3a:43:b0:91:a6:e0:92:b9:97:25:bb:92:19:
         35:42:a5:f7:ce:c5:6e:99:a8:42:da:26:d4:28:c7:03:be:69:
         8e:5f:81:61:98:16:10:53:ff:69:fa:ea:e0:4e:ee:45:1a:9c:
         f5:c3:13:e0:83:25:bd:6e:0e:b8:1e:40:61:a0:b0:1e:ee:87:
         34:55:04:df:1f:4a:4d:30:7d:f7:37:b2:bd:a4:a9:4c:a8:67:
         dd:c7:52:1b:84:b7:19:01:4a:c9:83:10:24:e3:fe:03:0c:e9:
         37:22:e8:2b:f0:b2:a5:c7:15:18:f6:2d:14:3d:3c:2c:71:cb:
         29:47:ca:6a:48:2e:d8:d7:8d:12:d8:38:0d:2f:31:aa:45:4f:
         ba:c3:80:83:fb:e7:f2:a2:eb:7e:6c:0b:a3:61:1f:ca:f3:a6:
         76:e6:cf:15:98:17:cb:6e:07:f2:84:aa:41:ca:49:54:ec:23:
         ff:3f:55:45:e2:69:de:4f:0a:83:5e:ec:38:45:7e:d9:ea:49:
         10:4b:f2:cc:c9:9a:31:c5:08:20:3f:d2:d4:56:82:74:7e:5a:
         68:f5:7c:6e:a2:a0:e5:e5:e4:e2:be:7a:47:70:f6:1d:12:4d:
         4c:77:39:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:02 2024 by rpki-client on console-fra.rpki-client.org