Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qenw3PfLXbASR5C4cN_yPSHqKIA.roa
File:                     qenw3PfLXbASR5C4cN_yPSHqKIA.roa (raw, json)
Hash identifier:          a0WxxlxpJ3OE6Uj3wQPVLTb/KVWbDFlUhcjZEpd4fQg=
Subject key identifier:   A9:E9:F0:DC:F7:CB:5D:B0:12:47:90:B8:70:DF:F2:3D:21:EA:28:80
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0F51
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qenw3PfLXbASR5C4cN_yPSHqKIA.roa
Signing time:             Sun 07 Feb 2021 12:33:40 +0000
ROA not before:           Sun 07 Feb 2021 12:33:40 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24163
IP address blocks:        122.100.80.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3921 (0xf51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb  7 12:33:40 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=A9E9F0DCF7CB5DB0124790B870DFF23D21EA2880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:98:82:c1:77:de:85:65:5a:5a:4f:e8:ed:a9:
                    80:7c:42:ce:ad:04:e8:4b:25:a2:2c:f6:a5:a8:74:
                    c9:43:02:a7:7e:1f:35:5a:0f:c9:d4:83:7d:3f:82:
                    40:31:d5:8b:10:a6:e4:60:dc:f6:52:0e:ea:b1:f4:
                    b9:d9:79:44:58:fe:70:59:2d:dc:ef:77:7b:41:da:
                    51:1e:41:62:34:39:6e:b3:03:88:b1:61:f1:42:33:
                    35:5d:d8:eb:cf:6f:dd:8b:3c:1f:4f:c8:6a:15:92:
                    a7:66:cd:f6:ea:e0:94:0f:1f:1e:29:60:3a:d6:f3:
                    40:f4:34:4d:89:a9:8f:02:aa:ee:ff:c5:e9:ff:a8:
                    23:b4:89:ab:c5:b7:1d:1a:f7:61:f6:cd:57:0c:6d:
                    a1:9a:43:2a:f0:3c:dd:bd:17:69:44:a4:35:d0:cc:
                    97:8e:2f:98:35:68:70:ba:66:57:fe:b9:ba:af:73:
                    d1:ac:c9:0d:e0:94:52:f6:a5:85:c0:24:2e:7d:e5:
                    d3:ea:47:57:f5:31:7b:d0:72:bf:42:a0:52:08:9c:
                    86:04:0d:26:f7:d5:15:6b:1f:df:16:a8:0b:a4:66:
                    ab:b2:52:8c:9e:10:49:78:4b:ce:1c:b9:3c:5d:e9:
                    58:96:8a:31:c9:7b:02:1d:11:9a:02:b4:8f:33:89:
                    1f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:E9:F0:DC:F7:CB:5D:B0:12:47:90:B8:70:DF:F2:3D:21:EA:28:80
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qenw3PfLXbASR5C4cN_yPSHqKIA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.100.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         01:f0:c4:c2:16:b6:12:52:b6:9c:11:a5:46:76:e6:1e:f1:4c:
         3f:e6:f2:c9:52:46:ef:6a:c8:cb:36:9f:e6:ca:22:c8:6f:7f:
         54:3c:27:74:08:37:ad:cd:33:6d:77:6a:05:6c:a0:c2:27:a6:
         5e:87:c9:ba:36:f0:91:a1:25:2d:4f:b5:7e:b5:75:17:f2:ed:
         63:a3:a6:76:6a:ca:2a:dd:dc:7c:27:e8:af:b8:b3:4a:3a:b8:
         33:2e:fa:e4:40:34:2b:41:ed:44:3a:2b:01:e9:84:a5:04:04:
         fa:8d:03:70:0e:c1:46:71:1d:b0:e4:df:59:c9:d7:59:75:66:
         4f:6e:89:42:73:3a:65:86:bb:f8:8b:0c:9c:07:9a:00:09:31:
         a1:9b:7f:54:dc:9e:88:76:09:df:5c:4b:04:9b:0e:ac:68:67:
         ab:e5:c0:93:3f:17:bf:33:ce:48:73:17:24:b7:e3:68:b0:e9:
         e1:e3:ca:f8:1a:58:b7:50:34:c8:c6:07:18:90:c3:05:ca:5a:
         f3:e1:e1:80:a6:11:b3:f3:32:3b:de:9a:50:bf:6b:91:b8:ac:
         87:bc:0c:35:25:6d:a6:8c:6c:67:2a:91:4e:68:9a:3d:a2:3b:
         be:53:55:62:86:d7:fd:26:38:29:4c:30:f8:cb:ba:40:66:ee:
         69:cf:af:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:40 2023 by rpki-client on console-ams.rpki-client.org