Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7hcmoqTRveAleWRLF5akbk-2QJk.roa
File:                     7hcmoqTRveAleWRLF5akbk-2QJk.roa (raw, json)
Hash identifier:          jysXf8VMObtuIQFabwkGB1n3KcZgwzpx3xT14B5N6oE=
Subject key identifier:   EE:17:26:A2:A4:D1:BD:E0:25:79:64:4B:17:96:A4:6E:4F:B6:40:99
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0EFF
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7hcmoqTRveAleWRLF5akbk-2QJk.roa
Signing time:             Sun 07 Feb 2021 12:32:31 +0000
ROA not before:           Sun 07 Feb 2021 12:32:31 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        49.158.61.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3839 (0xeff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb  7 12:32:31 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=EE1726A2A4D1BDE02579644B1796A46E4FB64099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6a:f6:83:72:d3:47:fc:96:10:87:e0:2f:65:
                    e0:83:bd:a5:b7:f0:44:b6:80:6e:c7:10:7a:5f:71:
                    a2:cd:50:1e:1b:a0:82:81:45:f9:86:2b:d4:45:0f:
                    0c:65:69:6b:14:c1:24:81:ea:c5:07:06:37:e6:90:
                    7b:bc:79:12:98:34:f0:17:c3:06:97:fc:26:1e:e8:
                    1d:1c:a7:39:9b:72:83:97:6c:72:1c:7a:ce:79:5a:
                    e3:20:09:75:e7:5f:22:fb:77:8c:54:d4:86:dc:ee:
                    96:21:64:4c:2c:4e:e5:bc:27:d3:80:83:f7:ee:bb:
                    38:72:71:08:1a:4c:00:ef:1d:c3:c4:95:f7:d9:79:
                    b9:7a:cc:a0:43:0e:1a:54:17:f8:ce:09:cf:64:23:
                    2e:0e:3f:21:50:35:cb:ab:2a:9d:ba:81:95:b6:4f:
                    80:5e:e8:86:8f:f5:37:b8:71:cf:98:a3:ad:6a:65:
                    6e:c3:20:1a:50:ed:cb:c3:ed:c5:67:ee:61:97:17:
                    ff:7d:ed:ea:b0:8f:86:1f:cb:30:33:ab:a5:0a:00:
                    c0:da:d2:cb:e3:07:f1:67:bc:15:07:85:26:74:19:
                    5d:66:77:74:7b:da:92:d2:61:a2:57:fb:d5:f1:35:
                    92:6d:78:9a:a1:0a:26:96:f3:6c:03:1b:4c:fa:ec:
                    ac:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:17:26:A2:A4:D1:BD:E0:25:79:64:4B:17:96:A4:6E:4F:B6:40:99
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7hcmoqTRveAleWRLF5akbk-2QJk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:7d:59:8a:04:b6:83:bf:fa:67:9b:26:d4:c1:a3:5e:2d:05:
         32:0d:ca:20:19:d2:35:ed:10:81:57:42:41:b6:02:b0:d0:39:
         c3:1a:06:e0:b5:72:4a:eb:83:09:26:4c:6b:c1:18:eb:d7:a6:
         77:b9:e5:7a:36:58:49:c3:c2:f8:3a:cf:be:53:da:89:b9:32:
         db:dc:08:a7:c4:75:b2:29:27:a2:61:b2:af:28:d4:c0:81:09:
         61:ab:94:b4:05:8d:21:a0:61:09:af:27:c4:58:9a:df:72:f1:
         98:0f:fb:f0:0e:9f:17:2c:56:a8:89:04:54:80:09:2f:8d:7a:
         f2:d0:a9:89:b4:6a:1e:6a:31:db:63:0d:e6:e1:7f:d9:1f:8f:
         e9:22:3d:3d:04:b0:6a:3e:d3:ac:54:82:bc:1e:c4:3f:40:f2:
         a8:9a:6a:47:7b:9c:fe:27:f2:5a:82:fc:a7:73:0a:ec:40:de:
         b9:fc:39:dc:73:ce:8d:4c:93:ba:f3:32:90:9a:5c:64:46:61:
         aa:0d:28:98:e5:2b:8d:7a:17:31:dd:96:ac:a8:84:31:c8:af:
         e5:1b:ff:2f:e4:f7:0b:c5:69:33:ba:0f:c5:12:60:b9:09:23:
         2e:90:5a:35:6a:2a:87:7c:1e:d9:4e:53:77:26:46:2d:a1:b9:
         3c:c5:9f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:45 2024 by rpki-client on console-ams.rpki-client.org