Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7z-t2nZyt145YCEYREpdJEHmVvY.roa
File:                     7z-t2nZyt145YCEYREpdJEHmVvY.roa (raw, json)
Hash identifier:          8k9SRzyDXnLqWjZ/HTbX9Dz2y3s/F4Oq1JxLM6qo+Vw=
Subject key identifier:   EF:3F:AD:DA:76:72:B7:5E:39:60:21:18:44:4A:5D:24:41:E6:56:F6
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7z-t2nZyt145YCEYREpdJEHmVvY.roa
Signing time:             Thu 15 Sep 2022 02:35:48 +0000
ROA not before:           Thu 15 Sep 2022 02:35:48 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24164
IP address blocks:        2407:4b00:ff01::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5374 (0x14fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 15 02:35:48 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=EF3FADDA7672B75E39602118444A5D2441E656F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a1:f6:48:3e:a5:19:e5:db:4a:8e:e2:e4:bb:
                    1b:e5:5f:99:51:19:e7:e5:6a:04:b3:99:67:0c:43:
                    8e:c2:b7:37:17:1a:fa:58:68:7c:a1:57:e1:bf:67:
                    73:8d:e5:0a:54:49:37:40:b1:8f:fb:2e:35:64:32:
                    86:50:c6:45:7c:69:a7:80:db:b2:a2:56:41:18:e2:
                    76:8f:07:bc:1e:10:e2:4a:a4:2f:5d:6b:eb:bd:74:
                    7e:3a:c7:f9:10:ac:69:8f:59:5a:05:c2:c6:d9:2f:
                    8a:71:59:08:e6:2c:4c:46:95:5f:37:c5:99:50:6c:
                    85:dc:2a:88:20:9e:88:ad:06:2f:46:d7:02:8f:a9:
                    3b:dc:71:48:96:3f:fe:77:d8:ef:4f:a6:a2:c5:9f:
                    1a:d3:d1:13:ca:17:f0:50:f0:02:3c:d5:f0:e8:6c:
                    dc:fe:af:03:fd:47:4b:6d:b4:f7:c6:25:47:3e:ca:
                    af:d7:8e:a2:5c:6d:ee:10:11:c0:39:17:33:ba:e6:
                    8d:2d:d3:a8:77:70:63:e1:af:35:2c:14:64:b0:0b:
                    47:e4:6c:f0:9e:d8:f8:3b:8c:e6:77:2c:76:73:6c:
                    16:a3:c4:51:5c:7e:c0:ba:eb:bc:7b:63:4a:a9:bc:
                    d7:7c:af:ae:92:70:e6:61:6e:c9:b3:68:65:f8:cb:
                    a2:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:3F:AD:DA:76:72:B7:5E:39:60:21:18:44:4A:5D:24:41:E6:56:F6
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7z-t2nZyt145YCEYREpdJEHmVvY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:4b00:ff01::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:aa:b5:95:5a:f1:b2:60:91:18:73:92:fa:b1:71:39:08:f7:
         29:36:d9:fe:1f:4f:3e:0e:9c:12:ee:26:18:f6:53:0d:74:7c:
         9f:56:e5:f8:1a:c8:d4:52:29:c6:8b:bc:c5:ce:ee:ff:1d:25:
         ea:6c:62:24:19:fe:01:60:48:49:81:c7:33:80:b4:27:c0:d7:
         2b:48:39:ee:5a:02:b8:a8:d8:c4:5b:0a:27:ce:ad:65:ab:fd:
         dd:e7:01:fd:05:e1:30:d3:2e:cf:eb:4e:b5:9e:5e:fa:0a:d7:
         a5:d0:e7:6a:b9:15:c3:9a:c2:9d:e1:f1:e0:98:f6:34:80:be:
         96:94:5d:85:87:7e:8a:dc:20:9b:b5:89:36:7c:e1:cf:30:e4:
         b8:fa:5b:bc:e6:76:2f:d1:a9:84:9e:93:88:34:b6:72:e2:3c:
         45:52:5e:01:64:3f:35:6a:d6:7c:01:13:05:88:3c:55:a2:41:
         65:2e:56:1c:d4:a2:26:15:02:04:98:68:74:8f:20:5b:80:da:
         4f:f0:f7:33:17:3b:79:52:32:a7:c2:fd:88:3f:94:33:9a:e2:
         a5:0b:14:9a:09:5a:0f:69:f8:93:9a:2d:dc:c7:1c:fa:b1:c9:
         8c:23:fc:cc:ab:90:b8:08:09:97:75:88:bf:f9:0e:71:91:03:
         75:4e:71:dd
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICFP4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjA5MTUw
MjM1NDhaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEVGM0ZBRERBNzY3MkI3
NUUzOTYwMjExODQ0NEE1RDI0NDFFNjU2RjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCkofZIPqUZ5dtKjuLkuxvlX5lRGeflagSzmWcMQ47CtzcXGvpY
aHyhV+G/Z3ON5QpUSTdAsY/7LjVkMoZQxkV8aaeA27KiVkEY4naPB7weEOJKpC9d
a+u9dH46x/kQrGmPWVoFwsbZL4pxWQjmLExGlV83xZlQbIXcKoggnoitBi9G1wKP
qTvccUiWP/532O9PpqLFnxrT0RPKF/BQ8AI81fDobNz+rwP9R0tttPfGJUc+yq/X
jqJcbe4QEcA5FzO65o0t06h3cGPhrzUsFGSwC0fkbPCe2Pg7jOZ3LHZzbBajxFFc
fsC667x7Y0qpvNd8r66ScOZhbsmzaGX4y6J/AgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQU7z+t2nZyt145YCEYREpdJEHmVvYwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzd6LXQyblp5dDE0NVlDRVlS
RXBkSkVIbVZ2WS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk
B0sA/wEwDQYJKoZIhvcNAQELBQADggEBAFCqtZVa8bJgkRhzkvqxcTkI9yk22f4f
Tz4OnBLuJhj2Uw10fJ9W5fgayNRSKcaLvMXO7v8dJepsYiQZ/gFgSEmBxzOAtCfA
1ytIOe5aArio2MRbCifOrWWr/d3nAf0F4TDTLs/rTrWeXvoK16XQ52q5FcOawp3h
8eCY9jSAvpaUXYWHforcIJu1iTZ84c8w5Lj6W7zmdi/RqYSek4g0tnLiPEVSXgFk
PzVq1nwBEwWIPFWiQWUuVhzUoiYVAgSYaHSPIFuA2k/w9zMXO3lSMqfC/Yg/lDOa
4qULFJoJWg9p+JOaLdzHHPqxyYwj/MyrkLgICZd1iL/5DnGRA3VOcd0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:02 2024 by rpki-client on console-fra.rpki-client.org