Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/E-5zEGzxp94bIJ0nwIvSyWF-Q5w.roa
File:                     E-5zEGzxp94bIJ0nwIvSyWF-Q5w.roa (raw, json)
Hash identifier:          iLPtYBSNnEGSVN7lYiDBJklNxBpClfJr2NXUb8fDWws=
Subject key identifier:   13:EE:73:10:6C:F1:A7:DE:1B:20:9D:27:C0:8B:D2:C9:61:7E:43:9C
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1365
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/E-5zEGzxp94bIJ0nwIvSyWF-Q5w.roa
Signing time:             Wed 29 Sep 2021 02:55:43 +0000
ROA not before:           Wed 29 Sep 2021 02:55:43 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24163
IP address blocks:        61.61.232.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4965 (0x1365)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:55:43 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=13EE73106CF1A7DE1B209D27C08BD2C9617E439C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:be:42:52:65:6a:f3:db:ed:f7:4f:74:38:e3:
                    9f:fe:8a:05:87:13:8c:ec:95:b7:8e:fa:30:9c:97:
                    b4:71:2e:b9:11:ae:22:9d:51:bc:bd:1d:77:6f:de:
                    6c:31:47:9c:f6:16:3f:9c:d0:ca:a0:46:f9:55:d7:
                    04:c6:11:bd:f1:cd:04:b0:51:f6:28:77:68:b0:65:
                    c2:d9:2c:c1:b4:d8:87:42:7f:e1:91:42:d9:7e:97:
                    4d:a6:eb:ca:94:b7:90:06:d9:df:dc:3f:a4:ca:07:
                    4f:e4:f6:ae:44:e2:8e:f0:d9:90:15:f8:6d:13:37:
                    14:a0:86:86:43:f8:b1:89:7c:97:de:8b:18:22:bb:
                    7b:3f:18:f4:2a:5b:8a:8f:ba:b4:13:f7:39:04:7f:
                    41:48:e7:45:50:55:bb:23:fa:3e:74:8e:25:d0:a3:
                    52:66:ef:be:9f:39:3c:6e:6f:3d:0b:3c:77:d8:9a:
                    38:4d:31:61:a9:0e:73:6c:e6:88:c8:97:71:9d:80:
                    af:e7:88:5b:4f:3b:5d:90:3c:1c:a0:6c:65:98:1f:
                    76:6f:aa:ab:c9:2f:92:12:48:8b:fe:06:bb:7f:79:
                    8e:b3:62:2c:03:dc:ab:44:7c:24:12:c0:3b:69:a0:
                    f1:e2:02:c3:7e:9e:f1:8a:07:b5:d4:96:7b:32:d2:
                    12:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:EE:73:10:6C:F1:A7:DE:1B:20:9D:27:C0:8B:D2:C9:61:7E:43:9C
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/E-5zEGzxp94bIJ0nwIvSyWF-Q5w.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.61.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:af:38:18:b0:a9:a2:0a:be:c0:2a:3f:e6:47:e8:d6:ed:ac:
         ff:fa:9f:3d:9a:e5:8c:2a:5e:59:9f:9f:18:9e:2a:af:13:04:
         1a:cd:42:3e:80:b0:06:be:49:4c:fc:a1:91:d3:ba:f5:2c:c0:
         1b:41:df:42:60:59:c9:6d:c5:1b:6d:5e:7d:26:46:13:7b:8a:
         36:a6:b9:c8:24:28:be:68:65:cf:3f:f1:6e:d2:81:52:54:f7:
         2a:cb:40:ca:66:62:02:30:2d:23:da:0b:b8:d1:ac:3a:17:bf:
         d4:c3:a2:57:ea:03:d1:2e:08:b5:13:fd:be:63:87:e3:cf:2a:
         59:2a:b4:a7:3a:39:62:7b:88:86:18:31:df:82:30:98:3b:21:
         a9:7c:e3:ef:51:66:f2:ed:28:b3:4c:82:8e:b8:6c:cb:20:d4:
         28:64:1b:3c:1f:39:aa:ce:9d:f9:a7:70:ee:b8:0b:bf:60:fd:
         96:11:a5:71:0f:39:3e:4b:d8:c5:17:6f:4b:bd:65:4b:14:9b:
         b5:f0:22:9d:17:82:91:79:29:f9:cd:8f:bf:71:69:65:d4:ca:
         5a:b2:a3:b5:5f:fa:58:c4:79:5e:ff:e4:20:ba:a9:f0:75:62:
         2b:3e:a9:7d:d5:8b:fb:23:58:58:74:d3:ed:dd:37:c3:6e:0d:
         04:5f:87:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:02 2024 by rpki-client on console-fra.rpki-client.org