Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/nLJSE_vOY7K6hGJqRVZvAFYIzsY.roa
File:                     nLJSE_vOY7K6hGJqRVZvAFYIzsY.roa (raw, json)
Hash identifier:          HOLLRl173YMJPJWHAKZp62h4a4pvmcJIYN56s4QwpQ4=
Subject key identifier:   9C:B2:52:13:FB:CE:63:B2:BA:84:62:6A:45:56:6F:00:56:08:CE:C6
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0EDF
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/nLJSE_vOY7K6hGJqRVZvAFYIzsY.roa
Signing time:             Sun 07 Feb 2021 12:30:39 +0000
ROA not before:           Sun 07 Feb 2021 12:30:39 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        119.77.241.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3807 (0xedf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb  7 12:30:39 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=9CB25213FBCE63B2BA84626A45566F005608CEC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:9b:88:b0:4e:17:fa:21:03:9d:9d:c9:e6:b6:
                    4d:7e:97:1c:14:26:a3:2b:18:dd:a8:63:76:7c:07:
                    d4:7f:a2:52:d4:9c:17:78:dc:64:28:40:e8:02:5b:
                    3b:12:f1:11:bc:42:05:cd:80:37:25:c8:b2:e3:63:
                    54:aa:22:6b:55:3a:6c:46:0f:14:53:27:3e:cb:d7:
                    c4:4e:c5:6c:7c:a4:ff:21:e9:bb:82:57:98:31:43:
                    3e:e6:87:1f:37:f9:e7:62:11:f1:ff:9d:2e:65:2b:
                    66:80:d2:99:84:fb:7e:dc:f0:57:63:70:3e:35:74:
                    41:6a:be:03:c7:7c:9a:7f:7e:6f:3a:d3:c6:5e:70:
                    00:5c:4d:46:99:03:11:17:73:e2:ed:86:45:50:7a:
                    17:88:23:0d:b7:40:09:52:1b:69:83:88:48:55:f1:
                    80:98:49:9e:6f:87:36:d4:7c:cc:8c:e9:75:75:b7:
                    42:62:0d:47:17:50:d7:a0:a4:ed:5a:41:c5:a3:4f:
                    ef:66:ce:9d:18:43:30:67:28:1d:7e:88:95:50:4c:
                    fd:f5:55:5d:98:95:70:63:e8:b1:79:2f:11:84:7a:
                    ea:4d:dc:68:f9:36:c9:e1:50:e4:89:0f:4d:83:2d:
                    38:0f:3d:e6:2f:f4:40:1c:2f:6e:40:8f:90:8f:59:
                    cf:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:B2:52:13:FB:CE:63:B2:BA:84:62:6A:45:56:6F:00:56:08:CE:C6
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/nLJSE_vOY7K6hGJqRVZvAFYIzsY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.77.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:1c:01:60:4b:88:34:4f:59:84:11:07:ce:94:0b:4c:90:ad:
         a0:56:43:10:b0:0f:5a:3b:89:ee:f9:31:c0:be:d5:e3:07:1a:
         63:c8:ed:64:1f:77:92:d1:7d:dc:f3:89:5d:5f:26:ba:15:e7:
         8a:82:36:15:de:64:3f:40:47:5d:24:c7:35:75:a2:ee:4b:02:
         92:63:dc:45:3a:2a:07:0b:22:0c:65:e6:51:82:8a:7b:a2:0b:
         00:bc:f7:87:71:02:2a:0f:1d:b3:2a:4b:0f:48:7a:70:a7:b9:
         ee:13:9e:3e:3a:d5:80:f6:c5:21:20:43:07:6c:9b:4f:09:d3:
         5c:9a:78:ec:e7:a6:e2:51:b6:99:10:45:57:f4:95:53:61:9a:
         2e:52:8f:61:d7:6e:fd:0a:b9:d2:68:29:ce:15:3d:63:60:04:
         29:ef:40:ea:3d:24:90:96:70:64:5d:45:7f:d6:13:c4:56:71:
         5b:a6:a6:35:88:d6:81:97:3d:42:78:74:6a:70:34:88:f5:83:
         20:62:3e:51:50:1e:b7:65:c4:c2:56:3d:ec:08:96:81:f0:00:
         69:f3:d7:b3:6f:01:8e:a2:36:e8:c4:7c:00:1f:7f:15:ce:85:
         c3:32:81:3b:70:09:e9:fa:4a:48:c0:00:5b:63:bd:0e:90:e6:
         36:20:e8:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:49 2024 by rpki-client on console-ams.rpki-client.org