Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/V4zsaGqC_mZF-LPiNFtr2JM587k.roa
File:                     V4zsaGqC_mZF-LPiNFtr2JM587k.roa (raw, json)
Hash identifier:          qKOEuglWOhECNklZaO3tqG5QbY8/bKkV7uEVUG5Q7mU=
Subject key identifier:   57:8C:EC:68:6A:82:FE:66:45:F8:B3:E2:34:5B:6B:D8:93:39:F3:B9
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       197E
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/V4zsaGqC_mZF-LPiNFtr2JM587k.roa
Signing time:             Sat 22 Oct 2022 06:06:35 +0000
ROA not before:           Sat 22 Oct 2022 06:06:35 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24164
IP address blocks:        211.76.78.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6526 (0x197e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Oct 22 06:06:35 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=578CEC686A82FE6645F8B3E2345B6BD89339F3B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:4b:5c:08:68:ff:e1:52:ba:22:7a:e1:fc:17:
                    54:85:4b:73:14:30:af:64:7b:be:dd:a3:90:e6:34:
                    59:55:66:6a:62:14:f8:21:1d:7c:c2:cc:eb:8e:4b:
                    2f:fe:8c:dc:c1:0a:ff:e1:ff:04:87:5d:e9:ee:a9:
                    0c:cf:1c:dd:8a:4f:6d:c7:69:fc:d4:39:a2:27:f3:
                    ec:da:38:73:8a:92:03:93:9e:dc:db:b6:36:55:87:
                    e1:b1:ac:90:ee:55:cf:db:50:63:0c:17:28:4b:b5:
                    d1:15:66:c8:d7:df:72:0a:51:3f:a0:84:43:1f:b6:
                    b8:a3:db:9e:9f:d6:ae:a2:58:e1:1e:c7:60:ba:b9:
                    26:3d:bd:d7:9e:6c:90:82:c4:37:9f:3d:22:63:b5:
                    aa:c9:93:a2:d3:e8:fe:b6:58:c3:7d:35:05:70:8a:
                    5c:7a:c8:0b:cd:d0:d3:2f:b6:c1:f6:72:98:41:bf:
                    95:43:01:ae:71:77:52:e1:0b:90:fa:3e:1e:46:a4:
                    a1:1a:b1:c3:9a:df:64:8e:0c:e3:4b:5c:4e:52:7d:
                    50:07:9a:27:a8:5b:50:2c:ae:7f:20:38:ba:c0:84:
                    6e:b9:27:d7:ab:4b:99:e5:6a:2a:e9:6a:17:cd:d1:
                    82:c8:1f:80:42:e2:c2:7e:a5:c6:07:63:de:98:49:
                    9f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:8C:EC:68:6A:82:FE:66:45:F8:B3:E2:34:5B:6B:D8:93:39:F3:B9
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/V4zsaGqC_mZF-LPiNFtr2JM587k.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:24:8c:c8:94:62:2d:dd:24:a3:45:65:83:eb:a3:9c:1a:2a:
         be:e4:94:90:c7:15:c2:1e:8b:15:59:48:ad:14:01:50:55:56:
         40:1c:34:40:70:be:98:6e:6d:78:33:c3:2b:be:9c:ab:6d:57:
         6b:97:5c:0c:dd:f2:00:db:b2:aa:3f:f4:6c:a6:76:71:07:11:
         39:d9:2c:79:5b:32:6d:c4:03:9e:a3:42:e8:41:0f:95:86:ef:
         8e:7a:59:4a:e4:e9:1b:11:83:47:f8:f7:d7:90:b6:28:d1:5a:
         ad:db:f4:cb:e0:f1:f0:f1:1f:ef:ce:a2:dd:c4:0b:e1:e2:38:
         05:e4:3a:fc:ae:dd:19:09:4a:73:d7:26:70:ad:e5:c5:dc:5e:
         89:35:97:fa:56:bd:e0:de:50:d9:ed:6e:2f:38:dc:8c:67:be:
         18:2f:0b:66:ff:4b:f6:a0:da:b8:04:53:f0:90:11:d8:89:6c:
         50:24:1e:33:b6:c5:60:46:11:4c:2d:f5:f5:bc:ba:80:41:99:
         74:b1:6b:ac:49:53:1f:76:47:eb:83:4d:04:2d:ee:50:e2:bf:
         08:10:8c:28:f1:c2:7d:49:be:ad:8f:bb:b6:b8:57:df:2d:24:
         3e:dd:6a:9e:14:af:22:5b:aa:da:4a:13:4f:47:28:c9:0d:25:
         ce:df:77:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:47 2024 by rpki-client on console-ams.rpki-client.org