Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/rau9GaEimtW5IJ2rzEbwv3tc6B8.roa
File:                     rau9GaEimtW5IJ2rzEbwv3tc6B8.roa (raw, json)
Hash identifier:          FgZEUzxYZOfyiNEoXZAkLLTD8S99Peuopky4vxR0yHA=
Subject key identifier:   AD:AB:BD:19:A1:22:9A:D5:B9:20:9D:AB:CC:46:F0:BF:7B:5C:E8:1F
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0FE5
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/rau9GaEimtW5IJ2rzEbwv3tc6B8.roa
Signing time:             Sun 07 Feb 2021 12:36:33 +0000
ROA not before:           Sun 07 Feb 2021 12:36:33 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        49.159.136.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4069 (0xfe5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb  7 12:36:33 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=ADABBD19A1229AD5B9209DABCC46F0BF7B5CE81F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8e:b2:90:d9:4b:d9:b2:e5:50:a7:6d:1f:95:
                    a4:a8:96:39:ef:95:c0:77:45:a1:69:e5:62:86:54:
                    2b:eb:58:91:97:b9:6d:c3:a0:40:f8:41:b4:74:d0:
                    34:3e:87:9c:2a:da:2f:db:20:f6:7a:4e:c3:1a:14:
                    dd:a6:f4:2f:da:96:fe:fd:98:96:c3:80:87:3f:07:
                    b3:7e:d4:b4:23:27:d2:39:c9:95:c0:16:b0:0d:88:
                    ea:95:87:74:7c:df:2b:47:81:ca:1c:fe:b8:e5:b5:
                    1c:ef:fe:86:48:54:e1:a4:8c:21:d3:f4:05:c9:b9:
                    41:f9:44:b5:1d:9a:b4:a0:e4:2c:d4:16:f8:da:2e:
                    bd:ba:49:40:f0:14:13:08:a8:7a:3a:31:2f:18:cc:
                    9b:7a:cf:1d:28:1a:be:6f:dd:4a:9c:33:2f:4a:cb:
                    21:09:ba:97:db:2e:c5:64:90:1c:fe:ea:ed:7e:35:
                    ba:e4:06:87:3d:a4:28:54:87:ce:0c:c0:8f:a9:cd:
                    8e:b9:69:50:f0:94:f1:d8:89:ee:21:38:b4:39:2e:
                    bc:6a:56:f2:ca:d2:ed:8a:6b:24:8d:a0:56:81:42:
                    39:fc:97:41:5a:bd:1e:3d:22:32:99:01:16:cf:fc:
                    93:8e:d4:32:e6:6f:43:90:b3:c4:37:af:b2:13:93:
                    e6:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:AB:BD:19:A1:22:9A:D5:B9:20:9D:AB:CC:46:F0:BF:7B:5C:E8:1F
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/rau9GaEimtW5IJ2rzEbwv3tc6B8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.159.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3e:08:89:a5:b5:9a:d7:20:9f:60:d1:68:43:c2:36:6a:63:2e:
         f9:4f:53:c4:ea:f8:d8:80:5a:f0:7e:23:08:53:2d:08:9e:18:
         a8:94:28:ff:7b:ed:84:99:e5:42:0a:e8:3b:be:e2:66:c1:a0:
         90:e1:2b:7d:49:c3:99:34:93:ba:44:03:75:62:00:3f:d3:10:
         55:0a:09:a9:26:99:fe:59:91:19:24:4e:1d:8d:e8:1d:1a:d0:
         86:f2:88:19:49:84:01:5b:4b:8d:dc:b8:52:9f:a8:2b:96:a2:
         e8:5c:c5:f1:bf:12:21:3c:08:13:f5:ef:63:dd:5a:1c:a0:c2:
         fa:ee:0a:93:06:ce:35:25:68:1f:a6:c7:77:81:99:ff:ce:84:
         2c:29:fe:40:bc:86:61:a8:dd:35:2e:8a:1c:06:d7:3c:4f:5e:
         b3:7f:1a:14:b8:b0:ee:d7:c8:00:fb:f0:4f:7a:38:74:b4:b4:
         12:7d:11:f7:39:f1:77:7f:1c:8d:05:15:15:ac:4d:a8:b9:c9:
         1e:5b:26:1c:1b:43:ac:15:4b:1e:e4:94:6d:b1:a3:0e:ef:fe:
         6e:85:36:6a:dd:94:82:c7:f9:2a:fd:e5:d5:86:63:bf:3b:50:
         d4:90:c1:3b:3f:72:aa:ea:b3:92:7c:74:94:37:a9:93:7a:5d:
         c5:2a:77:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:52 2023 by rpki-client on console-fra.rpki-client.org