Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/77DmmQlKG64DV0VB3Y-H6ctWwG0.roa
File:                     77DmmQlKG64DV0VB3Y-H6ctWwG0.roa (raw, json)
Hash identifier:          CqwS5RSTIi2HrIDcPUGUxajak3AqLoMX6kuUngxj3zs=
Subject key identifier:   EF:B0:E6:99:09:4A:1B:AE:03:57:45:41:DD:8F:87:E9:CB:56:C0:6D
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1260
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/77DmmQlKG64DV0VB3Y-H6ctWwG0.roa
Signing time:             Wed 29 Sep 2021 02:54:30 +0000
ROA not before:           Wed 29 Sep 2021 02:54:30 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24163
IP address blocks:        122.100.94.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4704 (0x1260)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:54:30 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=EFB0E699094A1BAE03574541DD8F87E9CB56C06D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ff:38:a1:2a:0b:11:3a:be:8a:f4:1c:ac:ad:
                    13:c4:96:4a:b7:81:5f:9c:1d:b9:a8:2c:1e:6b:49:
                    22:c1:17:ab:11:52:ad:3c:7c:23:0f:41:47:a0:a4:
                    34:a0:d9:6e:12:c8:88:71:c5:b2:d7:73:2a:7e:18:
                    d9:bb:ef:62:1f:05:ca:54:56:86:66:48:f8:7f:60:
                    6a:cf:d9:05:89:72:0e:dc:30:62:74:94:f8:e6:6f:
                    7c:67:ce:4c:40:ae:e0:64:ab:10:3c:78:16:7a:9f:
                    1c:7a:7c:ee:49:ac:2a:91:64:90:43:23:35:dc:ca:
                    86:82:be:d8:a1:02:60:90:b8:c1:be:07:6b:a8:79:
                    4a:b8:2c:b3:a3:48:16:72:9a:b0:c0:47:24:5e:c2:
                    0f:46:50:55:9a:c6:fd:ea:51:a6:db:53:a5:de:67:
                    8e:98:00:45:6c:4a:06:ef:68:ee:dd:3d:6f:be:38:
                    71:b2:49:3e:1f:fe:25:4c:a7:66:51:17:5f:0c:0b:
                    32:b6:70:b9:4e:10:9e:9a:48:1d:53:33:e9:1f:a5:
                    ec:8c:b3:65:35:d2:a8:7d:09:d1:21:91:78:75:be:
                    80:24:8a:6b:7f:2b:54:79:39:01:89:47:c9:7f:10:
                    74:64:82:00:be:50:11:36:db:74:7e:93:9a:22:91:
                    83:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:B0:E6:99:09:4A:1B:AE:03:57:45:41:DD:8F:87:E9:CB:56:C0:6D
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/77DmmQlKG64DV0VB3Y-H6ctWwG0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.100.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:48:3c:b4:97:a1:36:7b:dc:37:2c:85:4f:bd:56:b7:47:dd:
         35:6e:98:4a:2d:63:c3:42:2e:8b:97:a0:7b:2d:62:cd:73:1b:
         d4:90:63:ca:9d:29:93:88:3d:3a:fb:ed:47:82:f3:e8:c1:f9:
         5a:78:d7:57:b8:94:8a:33:b3:88:7c:3b:f6:08:6b:df:73:c7:
         f4:c9:b5:0c:e1:e5:64:57:af:74:cb:41:7d:6f:89:31:2f:98:
         73:4d:e0:52:a2:f5:e9:6d:ce:1d:63:cf:f3:77:f0:37:ca:00:
         2f:4c:0a:4f:09:ee:a9:3b:a4:70:04:ac:28:93:7e:eb:34:7d:
         3e:a2:10:ac:df:b2:6d:4f:36:6b:f8:9b:19:48:fb:7d:9c:e9:
         b1:23:08:2d:4c:98:d1:db:5b:e5:d9:e4:46:bc:7a:55:fc:51:
         94:99:f5:7f:c8:7a:d0:4e:a1:24:ca:0a:56:81:ab:c7:65:88:
         a1:f0:7c:b8:e5:d3:45:88:ce:8c:de:40:75:59:ce:f8:bf:1d:
         e6:e0:a3:24:34:52:2e:81:a6:df:29:31:60:95:23:6e:04:98:
         9a:56:b1:66:97:40:80:32:65:81:fd:90:15:69:28:a5:57:1e:
         e8:d2:61:52:d7:dd:02:99:db:ae:e1:39:97:73:68:b2:ff:ff:
         a9:b8:b0:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:02 2024 by rpki-client on console-fra.rpki-client.org