Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gqSynvoREwVg3mejnfiHjnvu4Bk.roa
File:                     gqSynvoREwVg3mejnfiHjnvu4Bk.roa (raw, json)
Hash identifier:          V4v6L/O4RB3PDsxMHqSdlS8EVn8rt2zd93TuDGxNyK4=
Subject key identifier:   82:A4:B2:9E:FA:11:13:05:60:DE:67:A3:9D:F8:87:8E:7B:EE:E0:19
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gqSynvoREwVg3mejnfiHjnvu4Bk.roa
Signing time:             Thu 15 Sep 2022 02:36:21 +0000
ROA not before:           Thu 15 Sep 2022 02:36:21 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24164
IP address blocks:        61.61.208.0/20 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5374 (0x14fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 15 02:36:21 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=82A4B29EFA11130560DE67A39DF8878E7BEEE019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:2e:05:e6:a9:1a:5d:8b:4a:a1:b8:bc:df:c8:
                    9a:d5:0a:05:7c:18:3f:a9:17:77:ef:43:ca:9d:aa:
                    9c:be:0f:bc:97:6f:99:97:3c:74:9b:f4:61:a6:2f:
                    2a:63:13:30:1e:cf:ba:8e:35:5b:1c:a8:2d:63:ed:
                    52:2d:a5:43:a9:0c:95:72:94:22:dc:bc:90:80:40:
                    cb:fc:e1:c5:8a:db:c8:c2:6c:b1:b4:55:4a:86:42:
                    dc:80:d9:d1:ad:19:aa:7b:7e:3a:5c:29:03:08:bf:
                    df:2a:06:ae:31:60:69:be:8a:32:bc:cf:12:9f:09:
                    59:13:fe:6a:e2:94:d7:7c:72:24:a8:16:57:af:89:
                    a2:f9:94:5c:9d:80:90:23:af:7e:8f:50:75:a9:b4:
                    ed:fa:a3:2c:3a:69:c6:6f:d5:46:85:78:4d:1e:13:
                    69:43:55:a0:4b:47:3e:5d:58:1b:1c:fd:a8:1d:82:
                    b5:7a:ca:27:d4:b3:71:3c:da:96:b1:8f:4e:c5:70:
                    ae:d4:86:32:3b:99:b8:57:f9:9c:e6:74:34:5b:f9:
                    b3:3b:a7:fd:fe:ac:c0:7e:d8:b6:ab:fa:0c:36:07:
                    d9:c2:b8:10:eb:cb:17:9c:68:ce:f7:1b:4e:bc:34:
                    1a:a6:4d:f1:4b:c3:3c:8c:fe:9f:11:51:85:29:10:
                    b9:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:A4:B2:9E:FA:11:13:05:60:DE:67:A3:9D:F8:87:8E:7B:EE:E0:19
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gqSynvoREwVg3mejnfiHjnvu4Bk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.61.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0c:ba:b3:0e:83:7c:4b:91:41:dd:c5:e8:c0:8b:cc:7e:ac:c0:
         67:d2:d2:b0:76:4a:78:36:b4:16:e7:bf:17:b3:c4:65:9f:a9:
         5a:d0:f1:99:f9:74:37:fe:be:c7:3e:16:bb:c6:01:6a:79:bf:
         9e:87:92:1e:13:40:b2:4d:2c:64:43:63:d5:28:e7:be:80:cd:
         fd:41:b5:ea:1e:ad:96:75:8e:e6:94:ab:81:56:5b:6a:fa:e8:
         aa:0f:90:11:68:a4:af:d9:de:a0:4f:10:d1:58:56:06:45:ad:
         b4:76:85:9d:3a:ae:52:ca:bb:42:34:b4:91:79:b0:ca:3a:97:
         6f:52:bd:65:19:9f:23:fc:a1:22:34:11:00:6d:88:ff:08:5d:
         b9:8a:4e:d7:1f:7f:2b:f2:6a:14:03:cb:6f:a5:1e:6d:d1:73:
         52:7d:a4:2d:53:fb:6e:99:0b:80:11:cf:e6:31:6e:24:f0:fa:
         73:01:86:31:e4:d1:d9:8d:96:f3:16:9b:89:1e:67:d7:ae:93:
         13:31:0c:fe:9c:ea:b8:2c:06:5b:e7:12:a6:aa:e3:e9:f0:b3:
         bd:95:dc:c7:04:34:55:83:69:01:f5:06:b4:9b:63:51:34:1d:
         60:c0:d1:34:a9:95:d4:a1:a0:00:67:70:42:92:19:f1:99:2d:
         38:aa:79:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:49 2024 by rpki-client on console-ams.rpki-client.org