Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/euGN-l1K-Uv70bEh6l3bRuOTcKQ.roa
File:                     euGN-l1K-Uv70bEh6l3bRuOTcKQ.roa (raw, json)
Hash identifier:          S3SJoaXUp1pCCC5jCaAqInFet1TVfHI7iq8F32fneg0=
Subject key identifier:   7A:E1:8D:FA:5D:4A:F9:4B:FB:D1:B1:21:EA:5D:DB:46:E3:93:70:A4
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0F17
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/euGN-l1K-Uv70bEh6l3bRuOTcKQ.roa
Signing time:             Sun 07 Feb 2021 12:32:50 +0000
ROA not before:           Sun 07 Feb 2021 12:32:50 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        114.198.162.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3863 (0xf17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb  7 12:32:50 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=7AE18DFA5D4AF94BFBD1B121EA5DDB46E39370A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2d:90:48:eb:f6:a1:61:82:35:96:18:ce:f0:
                    6a:dd:90:e5:c9:b2:ec:4a:12:f0:cf:65:a4:aa:60:
                    1f:ab:ef:53:a6:60:75:3b:ba:d4:95:15:cd:db:eb:
                    b0:11:3d:d9:70:a4:62:5e:37:b3:09:c4:cd:5b:56:
                    16:26:b3:04:01:29:c4:8c:75:54:c0:8d:ed:0b:a8:
                    3a:82:fc:b2:f6:4a:73:52:a9:50:49:ce:90:04:c6:
                    66:28:2c:21:60:43:fe:eb:31:04:a3:aa:2d:d9:f8:
                    c8:5b:4b:17:52:ab:0a:b1:5c:2c:60:5a:47:44:bd:
                    14:17:90:0d:3c:58:b7:81:a3:8a:3b:dc:b1:cc:8f:
                    61:5e:93:e6:d3:fd:c1:bf:7d:d3:ec:50:d7:10:92:
                    b7:67:99:f7:94:19:e1:31:91:3b:ea:21:99:c1:34:
                    c3:ae:cd:23:ea:07:68:d4:79:f8:55:51:de:f3:f1:
                    5b:a1:b3:43:a4:62:09:f3:4a:16:03:f1:e4:fc:c0:
                    e6:8a:65:24:31:d0:75:7a:93:53:db:3c:bb:8d:74:
                    d3:50:7f:d9:a9:a0:39:42:af:c6:89:64:67:1b:a5:
                    71:6d:b4:d9:88:71:5d:6d:66:7c:84:af:f0:ea:42:
                    35:2b:c4:0d:dc:9d:94:ca:07:45:89:f3:98:93:82:
                    1f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:E1:8D:FA:5D:4A:F9:4B:FB:D1:B1:21:EA:5D:DB:46:E3:93:70:A4
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/euGN-l1K-Uv70bEh6l3bRuOTcKQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.198.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:f1:6e:21:f8:02:0e:df:85:59:3f:b6:76:e3:a2:6e:f3:c9:
         f3:3c:b7:c7:f2:54:e8:92:6a:46:05:43:0e:84:3a:67:ff:2d:
         51:db:17:99:90:e3:74:bf:61:3b:c1:16:1b:10:ab:a4:3d:82:
         06:87:b3:9d:68:ba:25:35:70:fe:2f:00:25:cd:bb:1f:e0:30:
         74:87:30:36:f3:aa:44:f2:2e:b4:ef:91:a8:92:2c:ec:6d:b9:
         73:2e:a2:ff:b5:65:12:6f:77:b2:f7:d1:4a:a0:c6:72:6e:e5:
         0b:e6:25:2a:3f:43:64:8e:41:5a:e0:eb:93:11:30:55:e8:d9:
         e7:5c:39:c9:a1:d8:88:68:86:1d:4f:c4:aa:59:7b:3b:78:14:
         ce:26:b9:da:e5:16:2b:20:8d:17:31:29:af:d3:87:d8:b8:ae:
         14:7d:cc:d8:43:75:f6:67:f1:3e:f7:6c:59:56:63:6a:3e:8c:
         b5:9d:4d:1a:3d:f3:df:8a:78:e7:bb:d2:f4:52:c0:5f:db:a8:
         bf:1f:48:03:fe:44:69:84:43:5a:31:9e:72:04:b8:a6:98:3d:
         a7:fe:04:8f:4b:1f:11:c0:c2:2b:a1:8b:e5:54:e7:0b:60:5a:
         58:70:76:b4:1b:8c:5f:76:2b:db:9c:e7:49:95:6e:2c:09:e6:
         38:6c:91:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:05 2024 by rpki-client on console-fra.rpki-client.org