Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/euZPAVBe2VFurp_HoP4yM_yYIrA.roa
File:                     euZPAVBe2VFurp_HoP4yM_yYIrA.roa (raw, json)
Hash identifier:          UrwPyJonro029H1EtE+zZhz0EDYklAGYXrD9TJ+ZdrQ=
Subject key identifier:   7A:E6:4F:01:50:5E:D9:51:6E:AE:9F:C7:A0:FE:32:33:FC:98:22:B0
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1A0E
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/euZPAVBe2VFurp_HoP4yM_yYIrA.roa
Signing time:             Sat 22 Oct 2022 06:17:04 +0000
ROA not before:           Sat 22 Oct 2022 06:17:04 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     4662
IP address blocks:        61.61.224.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6670 (0x1a0e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Oct 22 06:17:04 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=7AE64F01505ED9516EAE9FC7A0FE3233FC9822B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e3:bc:55:70:2c:6d:58:a9:e2:2f:23:b1:19:
                    a4:1b:53:86:08:62:9e:7b:f0:70:ac:f2:28:b1:0d:
                    e5:e3:21:cd:2d:7f:4f:94:4c:b6:4f:36:fb:a4:e5:
                    4d:0d:8c:73:67:9b:c7:5b:27:97:77:a9:43:e7:98:
                    8c:35:4d:3d:46:6a:6f:c7:49:4a:8a:30:bc:86:2c:
                    29:e6:c9:44:e7:60:61:51:79:f7:61:bd:bf:0f:bd:
                    61:fd:51:6a:ce:72:8b:8f:81:55:91:b3:ce:26:3c:
                    4a:3f:01:56:91:61:8a:0d:00:52:9d:02:40:38:a7:
                    c2:b4:73:9b:da:5b:6c:2d:26:6f:93:59:66:70:c2:
                    e4:13:44:80:d3:0a:51:55:37:2c:32:0b:ce:cd:0b:
                    89:a0:d9:34:e8:33:37:8e:3c:5f:21:22:de:6a:2c:
                    98:a4:1e:30:1c:ef:8b:e8:11:93:9c:01:93:20:82:
                    c2:20:b7:89:52:1e:28:88:3f:f7:14:a5:16:e8:3f:
                    42:55:af:0a:47:df:36:fc:e6:47:fb:06:99:29:9d:
                    7a:19:db:07:42:26:74:c7:28:ee:ac:ac:38:b9:8a:
                    28:59:fd:c9:0a:82:a2:0e:c8:b6:f2:dd:cc:38:64:
                    e1:d0:b4:9f:ca:47:2c:2d:8b:b0:de:ba:c2:d2:65:
                    44:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:E6:4F:01:50:5E:D9:51:6E:AE:9F:C7:A0:FE:32:33:FC:98:22:B0
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/euZPAVBe2VFurp_HoP4yM_yYIrA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.61.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         92:70:c7:7a:ee:19:2d:84:99:69:9a:99:d0:02:40:94:4e:e9:
         0a:ba:07:78:dc:0e:b5:c7:dc:c1:21:6b:df:64:b4:2c:e1:97:
         9a:bf:7b:9b:f6:8a:24:fd:3e:4a:13:18:2a:a4:45:50:69:a0:
         55:2c:61:be:d7:44:19:3e:2e:43:b2:42:ad:65:bb:be:2f:c9:
         96:f3:9a:3a:0a:ff:86:1f:80:26:33:a9:d7:3e:24:d3:87:76:
         38:e7:b6:f9:58:4a:bc:43:17:e1:94:3b:1f:7e:43:71:44:75:
         3b:2c:6b:f3:62:1f:f3:28:8e:1b:69:d3:e5:7b:c1:82:dd:d6:
         35:1e:cc:12:d3:07:63:e7:a1:2d:b3:d2:6c:08:7d:ee:da:b1:
         2d:c2:8a:0f:e0:54:67:f0:b4:c0:e2:50:af:63:1e:8a:7f:f6:
         7e:90:06:93:06:01:00:e8:88:09:37:e0:15:0a:74:65:aa:10:
         d2:03:59:5f:93:6e:ba:d0:b6:5d:fa:d0:40:11:12:c5:53:e9:
         3d:0a:e8:47:5c:fe:ee:c5:c9:48:16:98:37:94:47:bc:4c:68:
         1c:22:c7:e5:ee:25:9c:4b:1b:12:97:97:6f:f1:70:70:8b:43:
         bf:ee:69:39:f8:3e:a1:b4:16:21:4e:ae:38:3d:d0:cc:9c:0e:
         a5:85:a6:1f
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGg4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjEwMjIw
NjE3MDRaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDdBRTY0RjAxNTA1RUQ5
NTE2RUFFOUZDN0EwRkUzMjMzRkM5ODIyQjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDB47xVcCxtWKniLyOxGaQbU4YIYp578HCs8iixDeXjIc0tf0+U
TLZPNvuk5U0NjHNnm8dbJ5d3qUPnmIw1TT1Gam/HSUqKMLyGLCnmyUTnYGFRefdh
vb8PvWH9UWrOcouPgVWRs84mPEo/AVaRYYoNAFKdAkA4p8K0c5vaW2wtJm+TWWZw
wuQTRIDTClFVNywyC87NC4mg2TToMzeOPF8hIt5qLJikHjAc74voEZOcAZMggsIg
t4lSHiiIP/cUpRboP0JVrwpH3zb85kf7BpkpnXoZ2wdCJnTHKO6srDi5iihZ/ckK
gqIOyLby3cw4ZOHQtJ/KRywti7DeusLSZUR3AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUeuZPAVBe2VFurp/HoP4yM/yYIrAwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2V1WlBBVkJlMlZGdXJwX0hv
UDR5TV95WUlyQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQ9
PeAwDQYJKoZIhvcNAQELBQADggEBAJJwx3ruGS2EmWmamdACQJRO6Qq6B3jcDrXH
3MEha99ktCzhl5q/e5v2iiT9PkoTGCqkRVBpoFUsYb7XRBk+LkOyQq1lu74vyZbz
mjoK/4YfgCYzqdc+JNOHdjjntvlYSrxDF+GUOx9+Q3FEdTssa/NiH/Mojhtp0+V7
wYLd1jUezBLTB2PnoS2z0mwIfe7asS3Cig/gVGfwtMDiUK9jHop/9n6QBpMGAQDo
iAk34BUKdGWqENIDWV+TbrrQtl360EAREsVT6T0K6Edc/u7FyUgWmDeUR7xMaBwi
x+XuJZxLGxKXl2/xcHCLQ7/uaTn4PqG0FiFOrjg90MycDqWFph8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:05 2024 by rpki-client on console-fra.rpki-client.org