Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/AnlzzG1TzL2dUl80aclarl4lHAE.roa
File:                     AnlzzG1TzL2dUl80aclarl4lHAE.roa (raw, json)
Hash identifier:          dm5QikY1lsOc0oaGgrPs268R9/VtgpbvVlZrC55f5SY=
Subject key identifier:   02:79:73:CC:6D:53:CC:BD:9D:52:5F:34:69:C9:5A:AE:5E:25:1C:01
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/AnlzzG1TzL2dUl80aclarl4lHAE.roa
Signing time:             Thu 15 Sep 2022 02:36:30 +0000
ROA not before:           Thu 15 Sep 2022 02:36:30 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24164
IP address blocks:        211.76.50.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5374 (0x14fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 15 02:36:30 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=027973CC6D53CCBD9D525F3469C95AAE5E251C01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f1:8c:18:06:db:80:61:74:be:03:32:08:12:
                    8f:d2:5e:72:4e:cd:d2:0d:1c:e1:77:f6:e2:54:5f:
                    9c:00:42:30:4e:5a:a1:67:11:79:7a:c2:fa:16:ef:
                    30:cb:e6:b0:6b:65:3c:1e:11:f0:b1:98:08:fe:1b:
                    e5:18:73:35:69:4d:e0:cf:b4:68:6a:56:d8:40:b7:
                    94:11:1d:52:6b:96:ca:5f:9e:4f:4f:50:07:f4:ef:
                    84:2a:31:d8:ba:70:10:9b:f5:30:8d:b0:41:ed:67:
                    2b:a2:ad:fa:4a:9a:8a:b8:58:29:2e:2b:63:64:ff:
                    0d:aa:ea:f7:90:2e:7e:8b:a6:8b:fd:5c:2c:c5:c7:
                    20:db:4b:c1:c0:bd:5a:27:58:fb:65:fa:0e:0d:9b:
                    73:c6:1f:c9:25:cd:2d:a5:cd:78:f0:e4:2d:31:8d:
                    76:61:da:73:1c:9f:64:22:ce:db:bf:e5:d4:86:cb:
                    ff:1b:8b:df:42:56:db:72:d6:3d:90:c3:61:36:b7:
                    0d:7e:6d:bc:ba:d0:62:f2:d9:15:ca:b4:61:de:d4:
                    15:76:c6:00:ba:76:4b:26:fa:c0:8b:f3:a8:b4:01:
                    03:2a:79:98:e2:23:e4:e7:32:70:57:d2:09:ef:81:
                    56:4b:67:8d:c3:e2:b7:86:ac:b2:92:a1:a3:a0:9d:
                    3b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:79:73:CC:6D:53:CC:BD:9D:52:5F:34:69:C9:5A:AE:5E:25:1C:01
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/AnlzzG1TzL2dUl80aclarl4lHAE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:e3:17:f2:ba:05:70:9b:e4:77:1c:6a:eb:a9:6e:71:7f:b5:
         39:de:43:13:cd:3d:10:b5:e6:ef:30:19:e5:0a:53:38:7c:3a:
         e5:c8:b2:69:74:9f:8c:6e:b9:3e:bf:57:13:f9:ac:8b:0b:22:
         91:4d:25:5e:d6:6a:8e:16:82:9f:6d:e0:59:5a:31:7f:6b:71:
         1b:ca:0f:88:48:6b:16:95:9b:e4:e0:e6:5a:ce:1a:de:45:45:
         8c:5e:1e:c7:0e:a2:f9:fb:b0:2d:ea:7b:2f:0c:39:e3:ec:a1:
         4e:2f:e5:08:50:d5:ac:c3:77:29:52:cb:46:4d:41:6d:12:30:
         89:5a:96:54:e4:70:e4:5d:7d:9e:7b:e1:4f:97:52:cc:f7:57:
         3f:2a:4e:ed:19:c0:da:7c:b4:09:16:c8:f9:8d:7b:09:18:9c:
         0e:48:03:fd:a1:02:74:ac:70:b6:27:11:95:7c:6b:76:fb:42:
         23:3e:17:1b:b1:7e:d0:51:0b:01:be:7d:62:7f:1c:3e:2f:15:
         d0:d8:bc:d8:5a:45:32:9c:ed:b0:78:e0:1e:d7:fc:e9:6a:b0:
         58:f5:89:e9:aa:52:95:eb:8f:89:e7:59:5c:be:f8:e1:a4:68:
         d2:25:e8:cc:11:4f:4e:b5:00:21:f3:47:c2:e2:f0:18:70:56:
         84:a8:33:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:45 2024 by rpki-client on console-ams.rpki-client.org