Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/SrA_YIJQZjWwmPr9BMUzbUaSpuc.roa
File:                     SrA_YIJQZjWwmPr9BMUzbUaSpuc.roa (raw, json)
Hash identifier:          O2cEMAFNwLioe3Xan+Kpo8NyePU62jpX/nXE8kRmpcg=
Subject key identifier:   4A:B0:3F:60:82:50:66:35:B0:98:FA:FD:04:C5:33:6D:46:92:A6:E7
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0EDB
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/SrA_YIJQZjWwmPr9BMUzbUaSpuc.roa
Signing time:             Sun 07 Feb 2021 11:57:05 +0000
ROA not before:           Sun 07 Feb 2021 11:57:05 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        119.77.200.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3803 (0xedb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb  7 11:57:05 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=4AB03F6082506635B098FAFD04C5336D4692A6E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8e:b6:c4:53:db:57:87:f2:63:60:fa:3e:1a:
                    63:4a:6d:57:03:59:15:e0:b8:98:68:b0:42:36:dd:
                    d7:d7:40:01:c2:ad:e6:4a:c1:d9:6f:e2:f6:18:b6:
                    d7:b5:f2:33:8a:78:8f:f2:61:6d:10:e2:5c:17:ae:
                    49:fc:3c:17:77:d4:44:84:43:32:36:74:a1:00:d2:
                    88:85:a6:4d:89:4a:8c:af:80:cd:36:22:19:3a:2d:
                    41:eb:56:ff:70:0f:ff:5f:69:05:d9:d8:02:b0:7e:
                    a0:df:b7:34:69:e4:5b:f9:57:e2:f6:d6:36:ae:5d:
                    d5:d5:97:fa:c9:8e:98:2e:37:0b:67:b6:f3:f3:d9:
                    7c:bd:44:1c:a3:3e:fb:2b:7a:b0:85:fa:d7:89:05:
                    81:ea:81:af:a5:ee:cd:da:aa:51:b4:3d:b9:9a:3d:
                    e4:1e:b9:41:b8:6a:e0:94:3a:56:e1:4e:a1:14:d7:
                    f7:8d:c8:9d:ae:fc:34:cb:73:c7:1f:5b:6e:e7:3f:
                    79:06:fc:8b:ef:a3:45:62:39:ee:c1:07:cb:6d:48:
                    f3:59:53:91:60:6c:1c:4e:12:d4:a6:8f:b7:9d:40:
                    31:55:61:10:42:34:cb:c1:f2:24:47:4e:71:6f:c3:
                    24:84:f8:f2:ec:0f:df:18:9a:17:76:c5:21:f3:bf:
                    f1:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:B0:3F:60:82:50:66:35:B0:98:FA:FD:04:C5:33:6D:46:92:A6:E7
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/SrA_YIJQZjWwmPr9BMUzbUaSpuc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.77.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         64:6f:ac:70:8b:84:91:14:5a:20:bb:76:99:f8:a7:47:65:af:
         47:a2:9c:e1:85:e7:66:a9:eb:4c:77:bd:1d:00:66:d0:e3:9a:
         b2:22:2d:2f:de:10:9a:44:ae:80:3a:cd:56:52:19:a3:16:70:
         54:48:80:cf:a6:5f:e5:96:1c:89:38:07:3d:c0:4d:78:bb:6b:
         04:bb:34:b9:7f:5e:2c:4f:3b:78:42:92:8a:d6:0e:70:75:f1:
         fb:d8:c4:97:d0:2d:0a:3c:9f:d2:40:29:83:15:48:1f:68:00:
         4d:fa:ad:c5:57:c9:5d:2e:f3:b8:b2:70:e7:5a:14:70:c2:87:
         29:67:1e:67:af:b6:72:f6:b0:ce:b8:3b:d2:85:c2:cd:ff:72:
         27:c9:b0:ad:5c:49:30:1c:a1:a0:ad:2e:34:a7:09:7c:fb:f5:
         00:97:3b:44:10:dd:26:a9:ab:18:ea:bf:5a:1e:f7:d0:54:85:
         37:03:a0:bb:38:8d:d9:85:9a:49:3e:b6:e1:b0:85:f8:84:dc:
         fb:76:4c:85:7f:5a:f1:39:9b:8e:0c:78:05:2e:66:de:6c:98:
         05:53:75:70:1e:91:50:91:11:da:fd:8f:75:f3:7f:70:3f:69:
         45:10:c8:fd:2c:eb:dc:c3:98:33:03:66:7a:99:31:12:77:77:
         6c:db:b4:58
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDtswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTAyMDcx
MTU3MDVaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDRBQjAzRjYwODI1MDY2
MzVCMDk4RkFGRDA0QzUzMzZENDY5MkE2RTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCvjrbEU9tXh/JjYPo+GmNKbVcDWRXguJhosEI23dfXQAHCreZK
wdlv4vYYtte18jOKeI/yYW0Q4lwXrkn8PBd31ESEQzI2dKEA0oiFpk2JSoyvgM02
Ihk6LUHrVv9wD/9faQXZ2AKwfqDftzRp5Fv5V+L21jauXdXVl/rJjpguNwtntvPz
2Xy9RByjPvsrerCF+teJBYHqga+l7s3aqlG0PbmaPeQeuUG4auCUOlbhTqEU1/eN
yJ2u/DTLc8cfW27nP3kG/Ivvo0ViOe7BB8ttSPNZU5FgbBxOEtSmj7edQDFVYRBC
NMvB8iRHTnFvwySE+PLsD98Ymhd2xSHzv/GvAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUSrA/YIJQZjWwmPr9BMUzbUaSpucwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1NyQV9ZSUpRWmpXd21QcjlC
TVV6YlVhU3B1Yy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN3
TcgwDQYJKoZIhvcNAQELBQADggEBAGRvrHCLhJEUWiC7dpn4p0dlr0einOGF52ap
60x3vR0AZtDjmrIiLS/eEJpEroA6zVZSGaMWcFRIgM+mX+WWHIk4Bz3ATXi7awS7
NLl/XixPO3hCkorWDnB18fvYxJfQLQo8n9JAKYMVSB9oAE36rcVXyV0u87iycOda
FHDChylnHmevtnL2sM64O9KFws3/cifJsK1cSTAcoaCtLjSnCXz79QCXO0QQ3Sap
qxjqv1oe99BUhTcDoLs4jdmFmkk+tuGwhfiE3Pt2TIV/WvE5m44MeAUuZt5smAVT
dXAekVCREdr9j3Xzf3A/aUUQyP0s69zDmDMDZnqZMRJ3d2zbtFg=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:49 2023 by rpki-client on console-fra.rpki-client.org