Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/toMkNcPSE4jjBsXlLnepYRHdrJc.roa
File:                     toMkNcPSE4jjBsXlLnepYRHdrJc.roa (raw, json)
Hash identifier:          n6+lniHF2swtwdA+iKglSggugIe3E6//IeSAy92FLEA=
Subject key identifier:   B6:83:24:35:C3:D2:13:88:E3:06:C5:E5:2E:77:A9:61:11:DD:AC:97
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1127
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/toMkNcPSE4jjBsXlLnepYRHdrJc.roa
Signing time:             Sun 07 Feb 2021 13:13:58 +0000
ROA not before:           Sun 07 Feb 2021 13:13:58 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        119.77.191.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4391 (0x1127)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb  7 13:13:58 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=B6832435C3D21388E306C5E52E77A96111DDAC97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:01:a4:2e:3c:33:0a:fc:98:03:f5:58:5a:f7:
                    20:73:e6:de:13:c9:96:12:22:7f:be:0b:73:79:0c:
                    b9:6f:d1:a9:1e:5f:23:8c:e3:22:63:a8:ee:d5:39:
                    9c:6f:b5:cb:78:29:2a:0c:14:82:00:53:04:10:9f:
                    6a:57:26:f7:48:88:de:54:9d:91:10:74:21:ed:6e:
                    e1:16:a2:7d:c2:bd:6e:8b:2b:30:77:91:ba:ed:49:
                    39:70:8a:ea:73:b2:19:00:96:66:94:23:84:99:35:
                    77:18:2e:17:d5:9d:61:a2:01:31:5b:17:79:05:f1:
                    8a:16:97:4c:d1:10:43:07:28:5a:f8:5e:ff:49:f3:
                    ec:bf:06:c6:d1:41:68:76:fd:b3:ca:50:64:f9:d1:
                    3f:4f:38:8e:ef:18:7e:88:05:84:f8:03:c5:4b:b3:
                    92:3f:44:ca:df:f8:ac:75:29:d5:43:7f:bd:f6:65:
                    74:54:1d:a9:54:46:fa:7b:92:b7:f4:8e:d1:56:d9:
                    00:78:3b:91:ba:e9:f9:4f:39:a0:10:a5:7d:e4:0b:
                    ac:d2:06:c6:a8:e0:f0:e9:2a:26:7b:09:9c:3c:a2:
                    f4:a8:14:f1:45:c9:5e:1f:a4:c8:f9:35:bf:4f:ea:
                    bb:c1:4e:13:7a:3b:01:ae:4d:68:a8:39:74:6c:09:
                    05:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:83:24:35:C3:D2:13:88:E3:06:C5:E5:2E:77:A9:61:11:DD:AC:97
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/toMkNcPSE4jjBsXlLnepYRHdrJc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.77.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:cf:6f:cc:fb:40:95:9d:cb:58:50:ca:29:b6:2e:57:04:ea:
         89:24:92:10:8c:ef:a8:2f:31:cf:10:d1:be:d6:93:d1:3f:cb:
         28:af:bc:67:2f:09:ce:84:e1:5b:62:6c:fe:a5:31:ab:25:67:
         3a:41:fa:e2:ed:fb:c0:4e:39:1c:54:69:69:37:49:5a:1b:8f:
         7c:5e:50:4d:f6:d2:eb:39:b0:c9:eb:b4:4b:43:83:00:8d:04:
         4b:42:6a:54:09:9f:34:54:75:12:c4:3c:3e:0e:b9:62:73:23:
         aa:29:7b:c2:73:41:1f:a9:f3:0d:66:f5:78:fd:1e:51:7c:de:
         cb:63:e5:d9:b0:43:06:e8:06:c1:5f:7e:3d:cf:a5:e1:43:af:
         d9:27:6d:fb:3e:f4:94:cf:dd:d2:a1:34:2e:dc:15:8d:93:5d:
         31:32:09:e4:94:eb:17:91:82:2d:d7:b7:63:62:a3:58:9a:74:
         0e:f2:c2:e7:18:43:5a:fe:2e:eb:e5:6c:62:58:c5:b3:2d:48:
         0f:53:e3:a1:6f:9d:d8:a5:40:60:21:ea:17:18:2b:82:6b:90:
         4b:54:50:58:6c:af:8c:51:e3:2d:b1:61:fe:e6:65:3d:66:ef:
         da:cf:55:f8:ee:bb:65:e8:e6:6b:2e:b6:8b:4a:67:20:9f:0a:
         b3:96:1f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:41 2023 by rpki-client on console-ams.rpki-client.org