Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WLfGITllPOTR5uxRSiDwQFBAe_U.roa
File:                     WLfGITllPOTR5uxRSiDwQFBAe_U.roa (raw, json)
Hash identifier:          uwnDaxY2ox4cGxL+r7BO44/dFf+r1HuG8qzAnkzEv8E=
Subject key identifier:   58:B7:C6:21:39:65:3C:E4:D1:E6:EC:51:4A:20:F0:40:50:40:7B:F5
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1A9A
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WLfGITllPOTR5uxRSiDwQFBAe_U.roa
Signing time:             Fri 16 Dec 2022 04:09:22 +0000
ROA not before:           Fri 16 Dec 2022 04:09:22 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24163
IP address blocks:        61.61.209.0/24 maxlen: 25

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6810 (0x1a9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Dec 16 04:09:22 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=58B7C62139653CE4D1E6EC514A20F04050407BF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:1e:cf:38:71:8a:8f:b0:d0:ae:c5:a1:96:20:
                    46:c5:99:aa:10:24:a5:b1:dc:80:8b:3a:7d:0c:e5:
                    78:90:4c:cf:f7:24:0f:d2:2f:22:b7:db:ed:8d:92:
                    b1:1e:be:c3:41:3c:56:7f:cb:9c:7b:9e:de:ee:90:
                    05:4c:74:4b:f4:9e:59:f5:fe:51:72:d4:73:93:91:
                    65:70:9f:6c:9d:b6:ad:c7:56:81:2d:f0:e2:3a:44:
                    64:09:7d:8e:11:42:ab:66:42:c9:44:2f:d9:65:60:
                    2a:f6:92:88:85:f8:5a:2b:bb:dc:26:1f:5b:1d:d6:
                    cf:5d:00:8f:52:62:99:05:c9:44:e8:d5:8b:44:c2:
                    c9:e6:d7:fe:70:36:f6:9e:a3:08:1d:0c:53:2c:56:
                    e1:88:ff:71:29:09:84:03:e8:e7:62:3f:35:8d:d2:
                    f2:a7:8c:48:ce:39:26:5b:52:bb:ba:8c:6f:36:a8:
                    27:bc:b5:84:e2:68:3b:72:f6:1b:ce:5d:4b:8c:51:
                    22:b9:ef:b2:9f:ca:55:72:f6:75:43:12:c8:59:2b:
                    80:1a:27:7d:69:97:ec:12:93:a4:a8:8a:c5:95:66:
                    f5:de:a1:bb:3b:be:13:21:16:65:a4:e0:6a:fb:3e:
                    4c:8d:62:f4:e2:25:ff:61:7f:fc:a2:ba:7d:b8:5d:
                    bd:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:B7:C6:21:39:65:3C:E4:D1:E6:EC:51:4A:20:F0:40:50:40:7B:F5
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WLfGITllPOTR5uxRSiDwQFBAe_U.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.61.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:f9:00:93:27:57:6e:f9:83:59:9c:f2:7c:1d:23:64:e8:af:
         2c:59:58:52:ac:d6:7e:41:09:8f:a5:b5:0c:68:d5:da:49:dc:
         bc:3d:15:e2:5e:28:11:3e:f4:1f:72:77:01:a2:71:1b:f3:3c:
         c7:f1:30:27:6b:99:4c:fc:5d:3f:6c:6b:f0:d8:c6:7f:b7:ba:
         ce:75:5e:94:dd:3e:c3:0b:9e:88:28:99:8c:f2:2d:26:32:1f:
         c6:41:e3:a1:1b:6a:c6:7e:da:c6:8f:63:ae:cd:29:c1:d8:8e:
         8e:4f:d0:90:e6:e5:2f:85:b5:a5:5c:d9:94:91:0b:1f:b0:14:
         be:28:34:34:6c:66:a5:a5:9d:7d:1e:e2:a6:2a:57:8f:54:34:
         46:47:de:3b:81:e9:d7:8f:40:e7:8e:b5:d2:e6:97:80:d1:36:
         37:d6:15:31:9a:fb:d8:36:f9:71:cb:e3:af:75:ab:d7:d4:7b:
         91:54:8c:ee:b5:ee:35:a1:09:cb:3d:cd:f6:2c:fa:09:a5:4b:
         c8:3c:7e:dd:ac:ac:76:30:5e:bd:b0:34:0d:5b:dc:89:ef:b3:
         72:53:3a:89:da:2c:f2:d5:49:ff:08:40:45:28:83:eb:45:cb:
         b5:f2:29:ef:69:9d:b6:59:5a:41:ad:fd:31:19:b5:2f:6a:26:
         ba:f9:07:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:47 2024 by rpki-client on console-ams.rpki-client.org