Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7y_fO8aP1ocNzOMktKKTjuxlJ8Q.roa
File:                     7y_fO8aP1ocNzOMktKKTjuxlJ8Q.roa (raw, json)
Hash identifier:          5ZDRfIE8KIdWL2jqZ6tTw1HiBElgsXDvOSpHfKaZZOM=
Subject key identifier:   EF:2F:DF:3B:C6:8F:D6:87:0D:CC:E3:24:B4:A2:93:8E:EC:65:27:C4
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1229
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7y_fO8aP1ocNzOMktKKTjuxlJ8Q.roa
Signing time:             Wed 29 Sep 2021 02:54:15 +0000
ROA not before:           Wed 29 Sep 2021 02:54:15 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24164
IP address blocks:        49.158.24.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4649 (0x1229)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:54:15 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=EF2FDF3BC68FD6870DCCE324B4A2938EEC6527C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:db:db:f6:65:b0:93:0d:c0:4c:8e:af:c8:39:
                    da:e6:2a:ab:9b:ae:a0:41:f4:16:cd:6a:4f:13:00:
                    5d:92:ec:fb:41:17:e9:33:41:57:6f:d0:7a:93:f7:
                    8f:d0:4d:c5:58:4b:89:e8:d1:b6:21:00:ca:e1:9f:
                    29:6c:56:12:54:aa:76:64:69:7e:6b:b0:5e:aa:8d:
                    e9:7e:aa:5e:70:ba:85:cc:cd:77:62:26:f9:76:67:
                    6d:c7:27:e0:f8:f4:70:d2:d3:a7:78:64:f8:3d:d2:
                    bf:dd:5b:66:98:03:36:4d:4b:88:b7:fc:d2:03:9f:
                    39:e3:1b:97:9b:2c:2c:8e:db:79:ff:b1:e5:f5:1d:
                    c5:7d:10:19:46:d8:2e:d4:37:22:b2:38:9d:8b:57:
                    d3:cb:50:36:7f:71:b1:6f:cd:53:bd:29:f3:d7:fc:
                    67:a0:ab:70:8a:34:14:cd:05:bc:17:54:08:48:81:
                    e5:5f:4a:b6:fd:7a:74:33:4f:d5:4d:8f:de:98:0b:
                    fd:98:04:b3:95:4b:3c:a4:6e:3b:4f:8c:ad:2c:ea:
                    5f:fc:14:97:89:19:bf:0d:d5:95:30:30:16:6d:7b:
                    1d:5b:97:57:6e:c6:f1:b8:f6:8d:4c:65:13:ff:a1:
                    84:17:b1:b7:9e:a3:1a:88:f9:4d:e1:32:40:0c:e3:
                    80:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:2F:DF:3B:C6:8F:D6:87:0D:CC:E3:24:B4:A2:93:8E:EC:65:27:C4
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7y_fO8aP1ocNzOMktKKTjuxlJ8Q.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         39:88:dc:b1:0e:3c:1e:bb:e6:06:4f:cd:4f:e2:97:e0:b8:27:
         3b:29:c6:e8:38:bd:8e:85:6e:a1:dd:b4:19:3f:63:16:73:ba:
         e0:97:ac:7f:27:39:65:f9:68:4f:08:83:62:93:47:c9:21:83:
         1a:14:0c:64:50:4c:78:c9:aa:13:6f:11:9a:1a:c0:16:82:3b:
         64:3c:72:8d:bb:30:cf:d3:8d:36:53:cd:34:4f:b9:e6:0a:45:
         e9:13:0b:27:ed:3f:ce:61:f1:f2:b3:06:e9:71:51:78:66:da:
         d7:1a:4c:fd:51:85:bb:43:c6:f1:09:12:28:b7:8d:3c:c5:27:
         9e:e2:00:82:ee:17:61:a6:48:1f:e2:24:0e:6d:07:a2:66:89:
         a2:53:04:3f:2d:52:35:f2:ab:a2:3a:ae:a7:2f:10:45:86:f2:
         9e:d9:95:7d:7b:24:92:c9:74:ea:0f:8b:26:11:b5:0c:4b:25:
         39:f6:cf:66:e0:97:46:9e:fd:cd:5e:37:2f:04:08:52:52:61:
         69:93:8e:a1:a1:8a:0b:44:93:bb:76:71:47:65:12:d6:46:83:
         18:58:60:dc:5a:c8:cd:cb:77:be:f8:29:c7:b7:4f:b6:18:9b:
         14:4b:76:31:54:ae:7e:b2:7d:ba:66:b0:ae:3e:a8:4d:43:26:
         84:36:93:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:45 2023 by rpki-client on console-fra.rpki-client.org