Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6n6ncTa_Ps0h_WGO7uOsNeK4OIQ.roa
File:                     6n6ncTa_Ps0h_WGO7uOsNeK4OIQ.roa (raw, json)
Hash identifier:          6HSiBb81/NhNvJw6dMQjYzbQKDq9P6ZalU9qlO3LsrI=
Subject key identifier:   EA:7E:A7:71:36:BF:3E:CD:21:FD:61:8E:EE:E3:AC:35:E2:B8:38:84
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       10BF
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6n6ncTa_Ps0h_WGO7uOsNeK4OIQ.roa
Signing time:             Sun 07 Feb 2021 12:48:38 +0000
ROA not before:           Sun 07 Feb 2021 12:48:38 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        45.64.32.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4287 (0x10bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb  7 12:48:38 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=EA7EA77136BF3ECD21FD618EEEE3AC35E2B83884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e0:e8:71:f0:26:2b:77:63:dd:79:a0:80:23:
                    53:7b:c4:5e:8a:48:3c:1f:f4:b5:4d:3d:3f:78:66:
                    c4:1b:da:f3:78:bc:f6:e8:de:74:ad:1d:e8:f1:bc:
                    6b:6b:f4:9f:7d:da:fd:94:c1:a5:61:7f:9b:cf:5a:
                    ec:bd:f7:15:1f:46:4c:51:75:88:52:c2:71:9b:f6:
                    f1:68:72:cd:d7:4b:92:7b:32:bc:45:73:72:ea:09:
                    f1:02:fd:2d:ee:74:7a:b3:69:2e:31:4a:9b:e9:8b:
                    39:89:86:9f:1f:4e:ab:b1:1a:ac:63:05:72:70:f9:
                    dd:76:7f:17:52:db:e8:f4:b2:73:f4:fe:37:2f:d6:
                    16:f2:00:fd:9b:77:54:70:1e:dc:9a:73:16:b6:c8:
                    87:75:18:68:9d:12:58:f4:16:aa:6a:10:85:16:de:
                    16:9c:0c:9c:17:8d:ab:4d:94:d2:7b:13:28:e6:b6:
                    57:21:36:08:da:2e:50:b8:e7:96:61:60:84:10:27:
                    d7:75:ab:b0:e4:60:0c:96:7a:fe:6f:4d:63:7c:cd:
                    58:95:82:85:95:fd:2f:c3:79:cc:35:0b:e4:36:19:
                    9f:e8:55:aa:3d:4b:f7:6e:8a:41:9f:bb:4f:66:4d:
                    73:ae:61:35:64:34:00:e9:76:ae:4e:04:20:d8:cf:
                    d9:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:7E:A7:71:36:BF:3E:CD:21:FD:61:8E:EE:E3:AC:35:E2:B8:38:84
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6n6ncTa_Ps0h_WGO7uOsNeK4OIQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.64.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:5a:cc:e9:f9:00:f8:c9:0b:cd:e7:16:83:2b:00:47:41:10:
         b6:99:76:56:af:04:5f:94:6f:47:cb:da:15:7b:28:d8:66:04:
         3d:20:b0:5d:d1:3a:10:f0:3e:fe:a2:38:e4:f2:61:94:e8:3b:
         d8:e3:fa:04:53:0a:03:f1:bc:1b:63:33:8c:fb:d1:20:4a:07:
         48:f4:62:f8:19:25:84:99:3f:11:9d:21:86:e3:04:3a:45:ec:
         0d:37:eb:86:bf:48:61:49:50:6d:ff:e7:19:b9:87:56:2c:fe:
         a7:57:26:34:ce:f0:9b:dc:85:54:60:3f:e0:2e:c8:07:0f:ef:
         2e:8c:c9:b1:7b:09:99:c8:6b:f1:0f:2c:51:11:8b:d1:bb:98:
         66:d3:7c:bf:66:df:65:1e:7f:87:b4:bc:cc:bc:8b:ab:2c:e2:
         a3:7c:77:4b:83:ae:92:56:60:7c:af:03:21:3c:8a:4f:19:d3:
         62:28:27:64:09:70:9e:a8:b5:96:a7:17:c3:e8:68:3c:0b:72:
         35:01:a4:55:22:64:b7:7d:35:ef:82:ca:42:f3:d2:c5:d4:17:
         50:8d:7c:27:1f:ca:b5:32:9e:76:6d:91:7a:9c:5d:ec:a7:05:
         d8:16:52:a9:97:34:50:17:06:28:f0:0a:4f:c3:27:09:40:7b:
         00:d9:7b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:45 2024 by rpki-client on console-ams.rpki-client.org