Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6VhxGNLiCvdlm8W7odFoOsPE9d4.roa
File:                     6VhxGNLiCvdlm8W7odFoOsPE9d4.roa (raw, json)
Hash identifier:          qO/ZKsT0g63D6CA4uymJvhVCzZHM1C+I/ZSxUiLMi50=
Subject key identifier:   E9:58:71:18:D2:E2:0A:F7:65:9B:C5:BB:A1:D1:68:3A:C3:C4:F5:DE
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6VhxGNLiCvdlm8W7odFoOsPE9d4.roa
Signing time:             Thu 15 Sep 2022 02:36:42 +0000
ROA not before:           Thu 15 Sep 2022 02:36:42 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24165
IP address blocks:        61.64.12.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5374 (0x14fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 15 02:36:42 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=E9587118D2E20AF7659BC5BBA1D1683AC3C4F5DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2a:cc:e6:4f:b4:4d:65:ec:2f:40:4b:b3:a4:
                    25:58:5d:0a:b0:34:c9:2c:af:50:d7:da:37:e1:2f:
                    2a:fb:35:b9:7c:e7:65:b6:ac:48:1f:3b:4e:92:b8:
                    b0:24:9b:96:7c:47:5a:7a:49:93:64:ef:38:28:17:
                    ff:1d:51:6a:b5:8d:e3:14:d1:ae:ad:23:d9:94:23:
                    24:db:0e:31:65:12:21:88:63:96:d5:5b:87:8d:ad:
                    14:20:66:99:e5:b4:a3:6a:5a:f1:0f:9c:36:9a:b2:
                    9e:20:1f:ea:00:c1:09:c5:fb:85:f9:80:fd:83:04:
                    5e:d7:c1:af:63:cf:ed:31:a9:05:ff:b8:4a:40:e2:
                    c0:ec:f9:a6:00:bf:77:48:c5:8e:00:e9:92:a7:a6:
                    c8:7e:45:72:27:e4:8a:f9:a7:60:6e:2f:df:66:e5:
                    cf:47:08:d2:f6:4d:0f:d3:10:8b:69:ef:e5:90:46:
                    72:f0:b7:8e:96:bd:1c:c7:52:a9:43:21:33:cf:5a:
                    7f:13:6c:9e:99:c4:9a:ee:35:3d:41:94:8e:47:8b:
                    01:72:ac:e6:69:c0:bb:a5:55:34:5a:69:db:0e:1e:
                    79:d6:04:80:0e:0e:8e:26:b2:7e:8e:e7:1e:a6:99:
                    9c:45:33:2a:7d:8d:a2:61:0d:bd:bf:f4:af:5a:17:
                    11:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:58:71:18:D2:E2:0A:F7:65:9B:C5:BB:A1:D1:68:3A:C3:C4:F5:DE
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6VhxGNLiCvdlm8W7odFoOsPE9d4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.64.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:46:2e:79:8c:ae:5c:19:53:98:eb:c4:e0:43:8b:a9:59:78:
         b4:02:1c:e1:1d:5b:6b:e6:ba:ee:e4:5f:a6:8a:32:3e:8a:80:
         91:cf:70:c8:a9:b8:5e:02:94:1c:dc:d7:2c:63:ea:87:1d:2d:
         14:72:49:16:b6:cc:c6:02:cc:10:42:90:5d:e3:d0:64:72:e2:
         0f:54:39:54:88:4c:08:1a:5a:dd:c3:df:de:f9:4b:0d:4d:14:
         40:83:4f:f3:59:42:70:0f:8d:9c:27:89:66:ca:a8:e2:7a:56:
         88:c9:07:0a:b5:e8:b9:9c:b3:ee:94:87:48:79:83:8f:a6:ef:
         7b:46:08:5e:a6:9c:9c:07:f3:5f:52:b0:0f:f4:b4:03:45:80:
         94:f9:ea:45:3d:0d:9a:d1:b1:d7:16:95:62:f8:73:75:21:ca:
         d1:a1:bc:69:df:55:67:b0:f1:d9:8e:e3:5b:b8:d1:18:3e:ec:
         57:17:1d:98:cf:4a:2f:26:b6:7b:2f:42:00:7e:02:fe:ff:45:
         35:6e:2a:d8:e6:5a:58:35:8b:6f:9b:29:e4:11:4b:c7:be:2b:
         83:61:ae:14:19:2f:94:44:3f:3d:b7:55:9d:e3:e5:b0:ab:de:
         bc:27:c7:b5:a7:73:ec:b9:51:be:60:86:be:55:fd:86:ca:e0:
         60:9f:4c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:45 2024 by rpki-client on console-ams.rpki-client.org