Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/L2oRshFP4kI0gk76aElxuGBuWZE.roa
File:                     L2oRshFP4kI0gk76aElxuGBuWZE.roa (raw, json)
Hash identifier:          lAwWDFTwbD7iYC1UnLwApocLJ8aJmE7WPHe+A0O/H+E=
Subject key identifier:   2F:6A:11:B2:11:4F:E2:42:34:82:4E:FA:68:49:71:B8:60:6E:59:91
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       195F
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/L2oRshFP4kI0gk76aElxuGBuWZE.roa
Signing time:             Sat 22 Oct 2022 06:06:27 +0000
ROA not before:           Sat 22 Oct 2022 06:06:27 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24164
IP address blocks:        119.77.160.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6495 (0x195f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Oct 22 06:06:27 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=2F6A11B2114FE24234824EFA684971B8606E5991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b0:7c:03:e5:2a:19:ba:00:98:21:72:5c:ad:
                    a2:21:48:a0:66:3d:09:ef:35:e4:d0:22:46:fa:b6:
                    48:e9:5d:72:ae:59:ec:9a:06:f2:59:2f:58:0f:74:
                    34:8f:7b:1a:62:0f:cd:cb:06:28:c5:55:be:f2:54:
                    30:ff:f5:d3:82:72:24:d4:e5:7d:db:30:3d:41:86:
                    ae:54:6a:c0:3d:f6:81:1c:b5:f7:82:34:1e:88:70:
                    5d:47:5c:fc:19:fc:15:a7:3d:e8:9b:7a:f7:05:7f:
                    0b:af:41:a1:9c:fb:83:2a:a5:da:3d:33:b6:78:f0:
                    a8:a5:38:0a:f7:11:94:2a:8f:08:ae:4b:16:e5:ef:
                    bf:09:48:8f:f4:41:77:02:fe:2b:76:5b:20:ce:96:
                    a1:6a:ea:e8:30:de:29:d9:a2:12:20:9a:46:47:9d:
                    37:b3:cc:4d:c5:d3:c5:18:a0:c4:c1:a7:c8:c5:88:
                    fe:ac:76:b7:f1:10:26:37:45:85:5d:1e:8c:e8:6f:
                    a4:5b:4a:46:16:4b:19:21:87:a6:aa:1a:5a:86:4d:
                    45:7a:54:57:7b:11:b5:8d:c3:15:06:ec:34:9e:24:
                    24:f0:c1:d6:26:68:44:d5:6e:45:5b:b9:64:70:f3:
                    b5:d1:08:91:90:7e:3f:91:5f:b1:f8:d2:db:eb:81:
                    ee:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:6A:11:B2:11:4F:E2:42:34:82:4E:FA:68:49:71:B8:60:6E:59:91
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/L2oRshFP4kI0gk76aElxuGBuWZE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.77.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6d:db:c5:88:39:4c:17:7c:9a:a1:d0:63:d8:0d:00:aa:44:55:
         37:b1:d9:e2:f2:c4:ac:0a:42:53:fb:95:2e:7f:f9:25:cd:15:
         ae:6c:db:a2:df:da:4b:75:87:2d:ec:52:6d:7c:f9:cd:05:63:
         91:62:5f:fb:67:51:d8:19:36:bc:4d:8d:5d:98:df:b7:bc:26:
         55:70:96:09:ab:d5:d8:2e:43:4b:74:a1:34:9b:ed:a1:90:a1:
         e1:3b:bc:11:b5:af:d1:28:23:0a:ed:22:e5:5f:8b:ca:ed:f5:
         0a:fa:e5:85:ca:4a:0a:ad:38:1d:c2:c6:03:7f:ee:44:9e:ce:
         c3:bd:3d:c7:52:44:ef:63:b5:1a:69:17:77:22:e4:78:c7:26:
         71:89:5f:cb:a1:14:61:7c:77:11:dc:11:52:d3:d1:2f:33:7b:
         d7:41:3a:63:10:c9:bd:ae:f5:6c:28:b3:d7:c9:6d:9e:c8:f7:
         d1:44:28:c4:ca:e1:4a:e7:c0:1d:20:cd:cd:f3:41:08:3d:28:
         31:34:94:87:12:cd:23:04:68:0c:2f:76:ad:27:89:1d:a3:4c:
         1d:06:6e:14:e7:85:6e:26:4e:39:e5:14:fd:d2:84:73:a1:92:
         2e:54:02:57:29:01:c1:d4:f5:ca:1a:2c:b1:74:4f:14:7c:e5:
         86:db:51:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:46 2024 by rpki-client on console-ams.rpki-client.org