Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8oRARL78YhZuyRx8UfE2JI4iK-g.roa
File:                     8oRARL78YhZuyRx8UfE2JI4iK-g.roa (raw, json)
Hash identifier:          mqOW8O8oV9Rg0nsI4RfM4/2xYDdfrlVjhx/xBPOjksM=
Subject key identifier:   F2:84:40:44:BE:FC:62:16:6E:C9:1C:7C:51:F1:36:24:8E:22:2B:E8
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       199B
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8oRARL78YhZuyRx8UfE2JI4iK-g.roa
Signing time:             Sat 22 Oct 2022 06:06:44 +0000
ROA not before:           Sat 22 Oct 2022 06:06:44 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24164
IP address blocks:        114.198.176.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6555 (0x199b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Oct 22 06:06:44 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=F2844044BEFC62166EC91C7C51F136248E222BE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e4:cc:2d:b5:3a:72:7c:ca:f0:55:d8:eb:43:
                    38:2c:39:6f:72:ee:47:41:89:69:73:9d:61:aa:d3:
                    24:d0:cd:40:05:a0:cf:2a:56:27:50:dc:84:03:83:
                    c0:d0:ba:7a:ff:65:37:2b:f6:97:26:ed:5c:6c:96:
                    60:8e:af:4b:7c:ba:93:ec:88:68:5a:e9:7c:99:78:
                    47:09:c9:c7:4f:47:0d:75:3c:92:7e:d7:a9:5f:d3:
                    db:e4:7b:71:c1:d4:77:f5:1e:eb:be:72:36:1a:85:
                    6e:0b:d4:28:50:cc:aa:b9:f7:2b:3d:81:ce:5d:c2:
                    60:68:d6:a4:1f:36:e7:58:c2:17:9c:43:e1:e6:bf:
                    eb:c6:81:38:59:b6:e0:b6:b9:97:8c:c9:d0:04:0b:
                    58:21:40:a4:c5:78:72:6b:09:24:9d:45:65:04:cd:
                    3c:11:7b:0d:c5:90:69:6b:6c:67:35:02:52:b6:2e:
                    96:ce:56:7c:f2:c1:cd:df:08:29:5b:e1:3d:b7:42:
                    76:9a:a2:5d:c0:df:2f:6a:1f:ab:9e:c7:ec:0e:b1:
                    6d:ba:19:4e:0f:58:5c:7d:03:8a:c1:b0:8f:04:73:
                    db:65:72:4c:28:79:3b:02:84:78:bc:92:42:81:62:
                    b9:5f:f0:f5:2f:00:1d:b4:12:2f:ca:ce:c7:31:f1:
                    b4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:84:40:44:BE:FC:62:16:6E:C9:1C:7C:51:F1:36:24:8E:22:2B:E8
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8oRARL78YhZuyRx8UfE2JI4iK-g.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.198.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         80:dc:9c:2a:37:df:8d:cd:24:e0:28:4e:df:55:84:3f:c3:81:
         82:5b:24:68:1c:09:f8:80:be:f7:89:66:de:9b:8b:21:e3:3e:
         3e:9b:fc:48:5c:e4:5b:e6:4d:6c:0a:d4:d2:3b:bb:0b:49:60:
         09:b5:b5:80:16:41:4e:23:b3:3e:fa:8d:59:76:a8:45:dd:34:
         08:93:0d:1a:89:28:01:e1:f2:dc:ea:eb:b0:6f:15:ed:2c:6b:
         4b:76:93:c2:79:b9:bc:ce:6d:e0:69:27:a1:04:c3:34:06:1e:
         bc:cb:8f:ba:86:6c:dd:09:e1:10:83:56:8c:58:3c:51:51:de:
         b2:0e:ca:62:f4:b0:0c:7b:55:04:67:bf:44:00:ef:51:d1:81:
         34:25:cb:23:68:d1:36:90:db:83:62:c6:52:84:7e:d4:a2:a4:
         af:3e:7c:00:12:2a:86:d9:53:91:d1:d6:f8:5e:26:09:11:c8:
         d5:dc:12:07:74:ac:a8:0e:32:62:6a:24:d7:aa:3d:02:9e:6b:
         a4:94:e1:02:2b:c6:a3:0d:a8:20:f1:5b:d6:59:a3:60:19:13:
         80:b5:31:1e:d9:e1:3e:65:c6:68:16:a3:a9:39:d3:56:52:23:
         cc:95:57:82:0f:53:df:d7:6d:a4:c8:15:00:4f:a6:e2:f7:66:
         9b:14:af:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:45 2024 by rpki-client on console-ams.rpki-client.org