Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/oBWnrrpPLPTL22Kal-Gkh4oyKok.roa
File:                     oBWnrrpPLPTL22Kal-Gkh4oyKok.roa (raw, json)
Hash identifier:          giJfme/5XZj1dP/NLg9+LNWRtmbKXSnjFF/QW2f66no=
Subject key identifier:   A0:15:A7:AE:BA:4F:2C:F4:CB:DB:62:9A:97:E1:A4:87:8A:32:2A:89
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1929
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/oBWnrrpPLPTL22Kal-Gkh4oyKok.roa
Signing time:             Sat 22 Oct 2022 06:06:10 +0000
ROA not before:           Sat 22 Oct 2022 06:06:10 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24164
IP address blocks:        119.77.224.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6441 (0x1929)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Oct 22 06:06:10 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=A015A7AEBA4F2CF4CBDB629A97E1A4878A322A89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:6b:5e:3f:2b:9a:b4:c5:1b:8c:f5:d3:35:cf:
                    9a:81:97:1f:15:68:10:2a:10:3d:6b:e9:e3:2c:22:
                    48:a8:71:68:89:f8:16:c2:c3:0b:c2:ce:4a:4f:e4:
                    8a:28:2b:cf:36:b0:bb:71:de:f0:f8:cf:8c:54:27:
                    18:58:a3:6e:bc:7a:1c:1c:c6:1a:54:ce:d9:7c:14:
                    f2:ba:59:e1:7e:be:b5:b6:b9:08:67:71:81:8e:af:
                    e4:16:fb:99:da:71:1d:a4:e4:da:9a:c7:26:88:3e:
                    0a:3e:8b:47:3b:0d:85:0a:78:41:62:96:72:59:67:
                    35:84:d6:75:f6:f7:e9:a3:ae:73:27:8c:d9:a1:f8:
                    02:bd:8d:40:fb:16:12:21:bb:99:2f:3f:db:65:3b:
                    2c:a5:21:33:b1:b2:19:66:9f:b2:3d:00:5d:7a:b9:
                    44:e9:7b:c1:3f:c1:5d:40:13:8d:dd:5f:93:db:50:
                    1e:ca:91:a5:5b:f1:b2:aa:1d:bd:61:5f:a5:25:2c:
                    87:79:f4:06:6f:c8:38:8a:41:51:a6:de:b0:c5:ba:
                    35:4f:73:57:e5:a8:74:cd:b8:da:f1:7e:ba:de:61:
                    28:d0:52:80:42:bb:8a:1c:c9:08:4d:da:1b:5e:d9:
                    b3:9f:a0:d4:4c:63:49:1e:56:03:2f:d7:e7:e5:04:
                    ed:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:15:A7:AE:BA:4F:2C:F4:CB:DB:62:9A:97:E1:A4:87:8A:32:2A:89
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/oBWnrrpPLPTL22Kal-Gkh4oyKok.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.77.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         14:6f:68:12:9b:13:b2:9b:79:67:b9:41:9e:f5:bd:b3:da:ec:
         45:d9:6f:e4:44:a0:71:0a:3b:99:26:f1:7c:5b:31:44:18:46:
         be:d1:55:55:69:98:56:fe:46:f1:fe:59:ca:66:c3:85:fb:24:
         ce:9d:05:c0:fa:92:0f:9c:5c:98:dd:c2:36:22:3a:b1:5b:85:
         8c:22:f0:30:e5:15:a8:ce:a9:81:d1:9c:55:1e:54:29:ed:4a:
         6c:a2:3c:e2:4b:a8:d4:78:a4:27:a2:f9:7b:4e:95:28:bc:f7:
         2d:5e:33:83:7f:ce:0f:85:a4:16:b7:38:2d:84:54:cf:80:d4:
         b1:7c:22:41:61:68:27:bd:c2:f0:ca:18:52:27:0a:4f:a5:2f:
         37:71:14:e8:44:3e:2b:52:25:c1:52:d6:92:19:5d:f8:2a:fa:
         e4:60:39:db:53:a0:b1:70:50:45:0a:8a:e8:fd:23:8f:ee:91:
         55:69:65:41:40:af:72:ba:70:46:f2:e9:66:89:4b:f6:c6:42:
         e3:79:0d:c9:dd:e7:2e:76:da:08:cc:35:51:4e:da:e5:7c:16:
         55:f6:09:9d:f7:1d:6b:6d:6c:bc:42:32:89:92:a7:fa:62:8d:
         11:73:95:c8:b6:7c:13:10:83:e5:e7:fa:9d:8a:1e:87:25:cc:
         bc:2d:41:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:49 2024 by rpki-client on console-ams.rpki-client.org