Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LNxUixYU2_f7tcHRTkAnnxxevn8.roa
File:                     LNxUixYU2_f7tcHRTkAnnxxevn8.roa (raw, json)
Hash identifier:          vACBgnCvKVA3s1g8NYwLCQEif091MQw07Mkd5VfHgjo=
Subject key identifier:   2C:DC:54:8B:16:14:DB:F7:FB:B5:C1:D1:4E:40:27:9F:1C:5E:BE:7F
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1314
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LNxUixYU2_f7tcHRTkAnnxxevn8.roa
Signing time:             Wed 29 Sep 2021 02:55:21 +0000
ROA not before:           Wed 29 Sep 2021 02:55:21 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24164
IP address blocks:        119.77.188.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4884 (0x1314)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:55:21 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=2CDC548B1614DBF7FBB5C1D14E40279F1C5EBE7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b5:a4:b5:ea:20:e5:dd:24:d3:fd:cf:2b:05:
                    99:12:95:92:4d:d2:17:7f:76:80:e8:18:0d:3c:99:
                    23:ad:07:30:94:7f:bf:59:76:26:67:85:b7:b2:99:
                    fd:ba:65:16:2f:7b:82:23:1e:9b:d3:91:7b:48:35:
                    cf:b1:b7:48:a0:f8:f3:b2:1f:ec:fb:a0:c8:30:2d:
                    ae:a6:ab:1c:cb:a1:b6:91:25:e8:16:02:a8:69:ca:
                    11:8d:24:f1:44:50:6d:06:cf:fe:49:5c:8a:8c:99:
                    e2:a7:63:c0:54:be:47:1e:df:68:23:27:cd:f7:50:
                    51:7b:8f:2e:18:2f:5c:48:3c:90:0f:e1:d1:da:7d:
                    97:66:c5:b1:d4:bf:3b:43:fe:b4:d2:d6:28:2d:92:
                    bc:4a:a1:db:ef:c8:48:58:9f:3d:6a:41:7e:5b:9c:
                    b6:de:2c:4d:3b:10:80:71:87:b5:a7:8e:67:39:09:
                    ab:33:ae:f7:e0:32:65:2b:52:5e:f2:7c:09:88:ef:
                    2c:77:85:e7:de:97:8b:27:9c:ee:13:3f:99:d7:0a:
                    c5:ce:c2:d5:9d:45:70:0c:f3:16:23:ab:0a:2f:41:
                    01:76:13:e4:e8:db:02:53:be:8c:74:85:eb:22:01:
                    18:2b:04:76:b2:d3:32:2a:b2:47:0b:9a:3b:b8:54:
                    85:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:DC:54:8B:16:14:DB:F7:FB:B5:C1:D1:4E:40:27:9F:1C:5E:BE:7F
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LNxUixYU2_f7tcHRTkAnnxxevn8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.77.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:72:4e:dc:0c:7e:3a:08:18:69:62:18:2f:aa:9b:b4:df:49:
         7b:17:a5:3a:b7:ca:d4:03:8e:b1:ac:f1:99:3f:0a:a1:1d:3a:
         f5:35:5f:0f:3b:d9:14:95:b7:5f:5e:ef:11:b8:da:40:de:da:
         73:50:f4:b3:d6:b0:b3:fc:4e:de:93:3a:b3:37:19:e0:5d:e1:
         2a:33:df:02:4b:42:c3:ec:7c:02:ac:52:92:a4:de:ed:c9:66:
         68:60:25:04:e7:27:c0:6b:30:40:76:c3:a6:8a:55:25:c4:7a:
         be:de:99:24:78:15:29:0f:b3:20:da:b7:be:b3:7c:39:0d:3e:
         f3:ea:e4:ca:a5:0c:7f:c2:13:b5:ac:39:1a:fc:72:02:0d:b3:
         95:84:b0:ac:63:cc:34:f4:12:97:06:96:75:79:fc:89:aa:ce:
         4c:7b:22:d8:cb:a4:d7:25:47:ed:82:8c:fc:4d:0a:88:d1:22:
         b6:00:f4:48:7e:10:f2:2b:cf:54:b2:c0:b0:13:11:8e:53:f9:
         da:78:95:7c:a6:2e:de:fc:a9:6f:5d:47:fa:31:81:fb:72:a7:
         f0:f4:b3:d2:9e:42:22:04:58:80:86:6e:9e:4c:cc:84:49:a2:
         2b:3b:c2:b1:5f:6f:7f:74:bc:b6:af:27:4e:04:4a:93:87:53:
         ac:6c:b1:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:36 2023 by rpki-client on console-ams.rpki-client.org