Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/em14v8MLQluxBtOD0ZoXh3Zw38M.roa
File:                     em14v8MLQluxBtOD0ZoXh3Zw38M.roa (raw, json)
Hash identifier:          Vz431J1+wNsuHXBGAHS7N20aZgm84gfRtdpkVJcnU5o=
Subject key identifier:   7A:6D:78:BF:C3:0B:42:5B:B1:06:D3:83:D1:9A:17:87:76:70:DF:C3
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/em14v8MLQluxBtOD0ZoXh3Zw38M.roa
Signing time:             Thu 15 Sep 2022 02:36:36 +0000
ROA not before:           Thu 15 Sep 2022 02:36:36 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24164
IP address blocks:        211.76.63.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5374 (0x14fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 15 02:36:36 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=7A6D78BFC30B425BB106D383D19A17877670DFC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:07:82:8f:95:f2:a6:31:19:38:eb:5a:8e:28:
                    2e:d3:fe:cd:37:11:f8:e7:58:de:1b:ab:e4:ca:b9:
                    a8:0a:c2:89:5b:31:cb:1e:f2:45:a2:62:33:84:2e:
                    73:e0:0b:a1:c1:be:e2:79:fd:cb:74:cb:22:df:7f:
                    1a:42:f3:e6:1e:01:b8:13:17:63:dd:43:41:06:7c:
                    c8:2b:b9:52:66:13:cc:c9:eb:be:a0:67:bc:91:eb:
                    ef:be:fd:b8:0f:e3:78:e9:18:2a:70:43:ad:61:99:
                    81:83:1d:5f:ae:53:cb:f8:7c:f5:87:da:7b:ee:65:
                    fa:a0:ce:b5:ba:44:b8:4f:6f:1d:c1:f0:fa:31:5c:
                    81:64:c9:af:74:97:b6:2b:29:c6:e8:da:14:7c:82:
                    3b:e1:21:93:8b:45:4d:26:c9:aa:84:9c:17:22:79:
                    c1:e3:a2:a0:fb:f8:af:61:c8:8c:a7:d2:f4:fa:fb:
                    c5:f8:67:7d:6a:16:7c:f7:ff:a9:a4:12:2d:2a:ca:
                    c6:c3:e6:2a:28:81:27:63:8a:89:ce:6b:f3:ee:d0:
                    d5:9b:5b:fc:04:0f:f6:30:70:45:26:d1:63:c7:1f:
                    73:45:be:93:73:db:22:d3:3c:74:9e:01:f8:d9:93:
                    55:62:e4:9d:b8:70:2a:9b:f9:ad:c5:01:af:de:c4:
                    e9:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:6D:78:BF:C3:0B:42:5B:B1:06:D3:83:D1:9A:17:87:76:70:DF:C3
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/em14v8MLQluxBtOD0ZoXh3Zw38M.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:1d:ba:a5:49:30:0a:a8:1d:e6:b0:54:40:d7:12:31:50:2c:
         bc:9a:ab:9f:cd:77:e2:47:c3:53:10:4c:0d:2c:b2:0c:7d:fa:
         28:14:e6:4d:68:02:5d:3f:96:79:00:46:0d:4e:43:a0:34:c0:
         da:9f:f7:93:d6:0d:9c:93:e9:06:01:77:86:7c:39:7f:1a:a7:
         5c:98:36:d3:94:a0:0c:c5:75:0e:30:9e:9a:84:30:58:52:b8:
         a1:89:8d:c4:a3:d5:c7:b1:09:0c:63:69:96:81:0b:fa:6e:9a:
         34:18:9e:90:b5:0d:27:5a:b1:45:70:20:79:49:06:18:b3:c7:
         43:70:48:af:7a:60:c1:23:68:9c:00:9a:3c:f1:a4:96:1a:40:
         96:5a:c2:d3:cb:a8:07:9e:c1:f8:cd:f8:d5:2e:9e:95:d6:ce:
         b1:81:4b:4b:8d:00:90:01:43:d3:8f:28:68:3f:dd:8b:66:0a:
         5f:27:55:07:30:22:1f:65:39:3c:de:2f:05:b0:63:6b:fb:95:
         04:44:02:9d:9b:30:58:38:fe:57:5f:79:2d:88:69:85:8a:60:
         b3:56:38:1d:2c:60:7e:2f:19:aa:f8:bf:ed:74:63:ef:27:31:
         7d:23:ce:c8:0e:99:32:24:d0:30:e5:dd:ee:4d:a8:dc:a4:7c:
         ec:3a:28:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:05 2024 by rpki-client on console-fra.rpki-client.org