Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gIquWHkHjPq_aZGL8BAnatbUCIg.roa
File:                     gIquWHkHjPq_aZGL8BAnatbUCIg.roa (raw, json)
Hash identifier:          akQSjE2iFEn1Zc3yUcbHr3r9UdA+5YENDXnN4SOq5dQ=
Subject key identifier:   80:8A:AE:58:79:07:8C:FA:BF:69:91:8B:F0:10:27:6A:D6:D4:08:88
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0F5B
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gIquWHkHjPq_aZGL8BAnatbUCIg.roa
Signing time:             Sun 07 Feb 2021 12:33:49 +0000
ROA not before:           Sun 07 Feb 2021 12:33:49 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24163
IP address blocks:        122.100.96.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3931 (0xf5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb  7 12:33:49 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=808AAE5879078CFABF69918BF010276AD6D40888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:c9:36:e0:28:19:42:b3:93:e6:5b:61:55:61:
                    55:df:fd:d7:6e:31:7d:59:2a:dc:83:65:37:06:e3:
                    7b:f5:cd:66:01:9a:49:60:de:69:30:f8:af:ad:a5:
                    fe:d6:d8:82:68:ce:dd:94:a9:cd:f1:04:4b:9a:86:
                    12:ff:2e:f7:24:d0:e2:6b:b9:56:7c:e2:5f:ca:f3:
                    9d:1b:50:e1:0f:59:f4:84:77:90:2f:c2:43:cf:05:
                    c9:c5:66:11:e0:54:e9:ec:9c:3a:7b:d7:5c:1d:8c:
                    83:bf:69:7a:69:ab:ec:3c:a8:23:bf:15:b7:57:5e:
                    96:e5:cd:7a:36:71:ce:25:3a:80:23:01:8a:d6:ee:
                    8d:cf:b1:52:b5:88:f2:bc:96:3b:35:54:cc:93:85:
                    da:bb:a7:5a:fe:24:9e:c8:05:1a:2a:3d:45:29:10:
                    7a:91:50:98:5d:42:07:38:56:03:b5:d9:7d:33:69:
                    20:80:2b:bb:fe:03:c2:21:66:40:ef:db:31:51:30:
                    5d:d9:13:2c:6e:ff:48:ff:f6:a1:78:ac:b1:34:72:
                    f7:e2:39:a6:18:d8:c9:69:8d:ce:f8:a4:dd:bc:93:
                    cd:ad:f5:36:b4:1d:93:5d:cb:71:3f:9e:02:5e:56:
                    44:ac:c0:d2:a9:fb:2a:4a:b3:1a:f8:16:36:d7:b9:
                    d9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:8A:AE:58:79:07:8C:FA:BF:69:91:8B:F0:10:27:6A:D6:D4:08:88
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gIquWHkHjPq_aZGL8BAnatbUCIg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.100.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         21:00:b4:27:e7:62:3d:85:83:1c:e4:e3:19:89:72:21:06:4d:
         5b:f8:8a:2f:1c:e2:04:7e:b6:fa:3b:f5:28:56:12:0f:9a:80:
         1c:fb:d6:e2:e9:9e:8e:ee:a3:ac:33:f3:74:38:f0:4e:f5:69:
         06:5a:71:b1:87:c9:ef:61:60:d3:1b:d7:c0:f3:46:33:c3:06:
         45:f4:93:9f:86:42:9c:07:bd:0e:96:a5:6b:30:31:ea:71:f4:
         74:00:7e:b6:d5:c8:96:50:7b:f3:35:58:03:7f:12:84:65:2e:
         bf:03:29:2f:bb:25:f7:c7:9d:7a:15:09:85:1e:17:24:5c:b2:
         90:0a:58:01:bf:e7:53:59:e9:3c:fa:50:2c:29:c8:85:6f:14:
         bf:e3:d0:31:8b:96:a2:2e:35:b5:ff:a2:08:07:54:a6:f0:77:
         10:60:dc:64:03:10:92:c1:7f:9b:8d:7c:ab:27:41:4d:15:a5:
         f6:5a:5a:69:be:84:ed:5d:a7:72:59:25:d0:27:90:3c:7a:bc:
         d0:8a:21:ef:f4:8d:e2:e2:31:d3:12:c7:43:31:80:11:17:23:
         3d:a4:dc:8a:67:0e:db:3f:1e:b1:68:ed:77:01:ff:ec:1b:34:
         0b:9e:93:f9:9d:e6:e1:62:30:1c:2f:e3:3b:0c:7f:b6:82:b2:
         6b:53:48:64
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICD1swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTAyMDcx
MjMzNDlaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDgwOEFBRTU4NzkwNzhD
RkFCRjY5OTE4QkYwMTAyNzZBRDZENDA4ODgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDqyTbgKBlCs5PmW2FVYVXf/dduMX1ZKtyDZTcG43v1zWYBmklg
3mkw+K+tpf7W2IJozt2Uqc3xBEuahhL/Lvck0OJruVZ84l/K850bUOEPWfSEd5Av
wkPPBcnFZhHgVOnsnDp711wdjIO/aXppq+w8qCO/FbdXXpblzXo2cc4lOoAjAYrW
7o3PsVK1iPK8ljs1VMyThdq7p1r+JJ7IBRoqPUUpEHqRUJhdQgc4VgO12X0zaSCA
K7v+A8IhZkDv2zFRMF3ZEyxu/0j/9qF4rLE0cvfiOaYY2Mlpjc74pN28k82t9Ta0
HZNdy3E/ngJeVkSswNKp+ypKsxr4FjbXudnVAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUgIquWHkHjPq/aZGL8BAnatbUCIgwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2dJcXVXSGtIalBxX2FaR0w4
QkFuYXRiVUNJZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV6
ZGAwDQYJKoZIhvcNAQELBQADggEBACEAtCfnYj2Fgxzk4xmJciEGTVv4ii8c4gR+
tvo79ShWEg+agBz71uLpno7uo6wz83Q48E71aQZacbGHye9hYNMb18DzRjPDBkX0
k5+GQpwHvQ6WpWswMepx9HQAfrbVyJZQe/M1WAN/EoRlLr8DKS+7JffHnXoVCYUe
FyRcspAKWAG/51NZ6Tz6UCwpyIVvFL/j0DGLlqIuNbX/oggHVKbwdxBg3GQDEJLB
f5uNfKsnQU0VpfZaWmm+hO1dp3JZJdAnkDx6vNCKIe/0jeLiMdMSx0MxgBEXIz2k
3IpnDts/HrFo7XcB/+wbNAuek/md5uFiMBwv4zsMf7aCsmtTSGQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:49 2024 by rpki-client on console-ams.rpki-client.org