Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/a4gsbgyyNMRn_qtZKMxzPChW4Io.roa
File:                     a4gsbgyyNMRn_qtZKMxzPChW4Io.roa (raw, json)
Hash identifier:          wOPFQM9RmTTnKufcRt+DXLHNA5sdLQz9amOmTLZDOy4=
Subject key identifier:   6B:88:2C:6E:0C:B2:34:C4:67:FE:AB:59:28:CC:73:3C:28:56:E0:8A
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1336
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/a4gsbgyyNMRn_qtZKMxzPChW4Io.roa
Signing time:             Wed 29 Sep 2021 02:55:29 +0000
ROA not before:           Wed 29 Sep 2021 02:55:29 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     4662
IP address blocks:        61.61.224.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4918 (0x1336)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:55:29 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=6B882C6E0CB234C467FEAB5928CC733C2856E08A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1a:a6:69:47:1a:b5:a7:c1:57:dc:3e:ee:b9:
                    0f:fa:92:df:8c:6f:2a:44:fe:cf:0f:f5:49:32:3a:
                    4e:67:b1:34:0d:a9:3d:ea:83:a4:28:47:68:b6:d0:
                    6f:be:eb:e4:9b:c0:e8:f8:65:50:df:a3:50:a6:af:
                    bd:65:ba:05:ea:03:ca:a1:cc:c3:e4:1e:65:de:a8:
                    4b:5d:cb:64:9f:26:f7:32:d7:0f:6a:b7:81:fb:e6:
                    e6:c6:21:6d:b4:c8:ad:0e:a1:b5:ea:b3:b9:a4:8e:
                    f7:c2:fe:47:76:ec:06:45:22:83:28:9b:6a:32:41:
                    5c:ba:41:a3:bf:6b:21:a2:04:37:90:f2:e7:a6:39:
                    5a:05:4d:ca:d5:5c:14:e7:0d:c9:16:2f:c4:3b:41:
                    a6:ec:3f:e3:86:7a:66:69:c4:bf:13:4a:34:b2:5e:
                    19:8e:51:9f:83:cf:6f:97:4e:15:b0:18:1d:b5:d9:
                    de:73:47:0d:9d:e5:4c:40:a4:fd:e4:ee:ae:fd:c1:
                    74:d7:2d:a2:c5:e4:e4:cd:65:63:90:dd:79:4f:8e:
                    c5:4a:12:31:f9:03:d4:cd:5e:d3:ef:3d:a3:5a:46:
                    1d:a4:8d:46:89:1c:34:cb:ea:49:3e:07:b5:b2:a5:
                    31:4c:bd:67:fb:45:ca:2b:28:3c:32:10:87:02:bf:
                    03:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:88:2C:6E:0C:B2:34:C4:67:FE:AB:59:28:CC:73:3C:28:56:E0:8A
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/a4gsbgyyNMRn_qtZKMxzPChW4Io.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.61.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         61:d8:d1:30:52:97:bf:2d:c4:08:31:06:82:50:6f:33:ac:aa:
         15:f3:02:8e:55:07:26:e3:27:3e:1d:bc:4a:8d:f3:64:10:16:
         02:f7:db:78:4e:d5:ec:d3:f2:ab:ea:a6:db:32:38:c8:73:87:
         3b:34:69:68:07:ea:1d:51:e8:40:c8:de:c0:86:8c:8a:b2:cb:
         f2:5f:c3:42:3c:33:68:7f:c2:b1:9a:8c:60:6e:1b:cf:b0:8d:
         8d:3c:7c:a2:eb:7b:9c:23:c8:45:f7:81:0d:e0:66:08:d5:a9:
         c1:34:aa:86:1d:55:53:7d:00:48:1b:54:30:47:17:cd:f9:99:
         14:0f:29:d8:8c:ab:63:f5:66:48:d3:6f:d8:bc:fb:02:f2:3d:
         fc:1b:63:94:e0:22:1c:b1:6e:6f:5c:01:6b:54:50:49:e5:8f:
         ff:9e:37:4c:45:d3:3a:54:a8:ca:5c:75:45:93:76:e5:53:f5:
         af:8a:92:9f:6b:b8:53:70:6c:84:9a:c0:e6:b2:b5:25:3d:95:
         63:b5:95:73:8c:48:3a:3b:37:8d:96:2b:80:7c:03:6d:1c:61:
         27:cf:7b:bd:42:e3:8c:6c:5f:58:64:6c:0d:0b:84:3d:cc:ef:
         bc:82:c8:05:ab:93:99:19:f5:08:49:2a:8a:7c:91:55:78:b2:
         94:65:de:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:50 2023 by rpki-client on console-fra.rpki-client.org