Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Ryyx8HnJEGylZc9qWZr1Bomvxhg.roa
File:                     Ryyx8HnJEGylZc9qWZr1Bomvxhg.roa (raw, json)
Hash identifier:          /zHRwg2MjsiUJlPGZfYyzuXxjbCf/N8IS3p9icTil4g=
Subject key identifier:   47:2C:B1:F0:79:C9:10:6C:A5:65:CF:6A:59:9A:F5:06:89:AF:C6:18
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0D5C
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Ryyx8HnJEGylZc9qWZr1Bomvxhg.roa
Signing time:             Thu 14 Jan 2021 07:42:25 +0000
ROA not before:           Thu 14 Jan 2021 07:42:25 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24163
IP address blocks:        61.56.172.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3420 (0xd5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Jan 14 07:42:25 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=472CB1F079C9106CA565CF6A599AF50689AFC618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:22:da:63:78:16:1f:14:55:9d:ad:7e:54:46:
                    03:89:a2:ba:82:f7:b0:e9:b2:25:d8:d5:39:ea:ae:
                    fa:34:e9:a0:63:23:05:ac:cb:27:cc:05:2d:ce:43:
                    02:95:b4:3a:eb:64:37:cc:2b:11:be:84:c4:8f:ae:
                    15:83:52:12:fb:26:f7:07:23:2b:5e:a7:e5:6e:fc:
                    62:7d:e4:bb:f1:8a:c3:13:e3:f1:0c:a5:5a:01:a2:
                    16:a7:95:cf:2a:31:51:5c:20:da:91:08:ca:88:5c:
                    a3:5f:5b:f9:f0:e8:43:e3:02:c6:5f:90:31:f4:b0:
                    6c:17:de:8f:1f:96:c8:d7:ae:c1:c6:20:0d:11:dc:
                    27:89:a4:dd:04:c6:46:8f:46:54:95:87:5a:91:19:
                    74:10:71:2f:4f:4f:27:88:d7:54:f1:ce:71:be:af:
                    d3:11:c2:35:b8:44:a2:2e:a7:99:25:bb:8c:ac:cb:
                    e8:44:9c:4b:5d:29:a5:da:d1:85:25:3c:00:c0:0e:
                    ca:22:ff:e1:da:3b:cf:2b:56:61:3d:0c:22:98:94:
                    2d:e7:cf:a1:3c:c6:4e:ac:3e:28:9a:b1:35:2e:2a:
                    7e:29:2d:a4:ae:27:b7:17:5c:b2:16:b0:af:2b:bd:
                    9c:cb:00:07:87:89:a4:ef:98:58:26:53:33:3c:d1:
                    cd:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:2C:B1:F0:79:C9:10:6C:A5:65:CF:6A:59:9A:F5:06:89:AF:C6:18
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Ryyx8HnJEGylZc9qWZr1Bomvxhg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.56.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:ef:5c:e8:f8:69:f1:47:04:e4:c9:09:3f:84:38:73:de:79:
         93:63:fd:fb:c2:f5:1e:0a:fc:62:ab:d9:9f:5f:cf:43:ff:c3:
         07:1d:08:ef:33:40:1d:17:b0:a0:06:38:fb:59:5e:d2:ea:76:
         96:73:cf:2b:47:10:ea:19:e1:cd:07:54:db:d8:88:35:2f:88:
         81:54:66:ae:48:8b:95:57:90:75:e2:ce:3d:5e:c9:65:04:9f:
         7f:8b:fc:3e:ba:b5:b8:da:b8:08:65:94:d1:fc:8f:24:3d:15:
         25:55:80:94:bf:74:24:8d:13:db:3c:0f:05:8b:b5:b6:58:80:
         28:e9:ee:e3:e7:84:25:52:0d:8f:0b:d6:d5:09:56:ee:f7:bb:
         bb:83:9f:56:5d:9b:cb:16:ec:ce:2e:4d:c5:7e:24:a4:80:f4:
         69:b6:16:b7:9f:0d:e3:89:07:cc:0e:d1:76:63:7e:71:12:bf:
         95:e4:48:0c:44:62:53:44:c9:a1:bc:58:ad:fe:af:90:10:1f:
         46:4d:44:ed:f2:fe:8f:65:93:53:65:64:16:60:d1:c2:fe:c5:
         0c:c7:4e:91:c6:de:82:77:0d:a3:f8:3a:fb:01:ee:a6:66:a6:
         73:71:58:92:4d:b5:b2:ec:44:27:a9:21:e9:86:81:e5:bc:aa:
         df:be:7f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:04 2024 by rpki-client on console-fra.rpki-client.org