Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/vG_LLy51AqW7tkkR7irmmyzvCb0.roa
File:                     vG_LLy51AqW7tkkR7irmmyzvCb0.roa (raw, json)
Hash identifier:          eDBQNsuP2mozcB0pOVFL8UyCkk7zp65VNTifKv7iaMA=
Subject key identifier:   BC:6F:CB:2F:2E:75:02:A5:BB:B6:49:11:EE:2A:E6:9B:2C:EF:09:BD
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0FCF
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/vG_LLy51AqW7tkkR7irmmyzvCb0.roa
Signing time:             Sun 07 Feb 2021 12:36:09 +0000
ROA not before:           Sun 07 Feb 2021 12:36:09 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24163
IP address blocks:        49.158.216.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4047 (0xfcf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb  7 12:36:09 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=BC6FCB2F2E7502A5BBB64911EE2AE69B2CEF09BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:cc:20:6c:2b:43:6e:58:d9:19:55:83:82:b2:
                    55:9b:1a:c3:51:d0:b3:a6:d6:bf:15:cf:a6:b9:97:
                    1f:10:44:9b:c6:d0:88:38:82:85:37:d3:83:c1:d7:
                    18:2f:ae:5a:6d:3b:5a:5c:16:06:01:ea:90:77:6a:
                    56:fc:4b:be:01:d4:9f:45:93:93:0e:4f:54:bb:07:
                    1c:c3:4d:76:11:d9:4e:1e:02:8f:94:ad:e3:b3:c0:
                    79:08:c0:53:8c:39:6f:2f:c4:9d:d4:27:16:39:54:
                    b1:7e:ea:23:8e:06:bd:ee:d3:74:bc:9a:28:9e:10:
                    03:44:68:bc:3a:cc:91:57:2d:2a:33:7c:91:2b:57:
                    5c:57:0b:2c:5a:a0:29:4d:b2:06:1e:ef:37:b2:48:
                    50:22:02:43:f4:45:a3:85:07:35:a8:01:21:9c:a8:
                    82:fd:6a:c0:55:01:6e:1f:5c:7f:49:f1:9e:23:09:
                    67:96:b5:c4:97:c3:26:e5:1e:03:84:55:92:dd:f8:
                    b1:55:28:ef:87:b1:2b:ba:fc:a0:e0:b8:be:ae:8c:
                    ce:66:aa:c0:74:8f:c5:7d:6d:9b:2b:bb:5d:f7:7d:
                    fc:1d:2f:e8:64:c9:c0:31:f3:d5:fa:4b:30:a4:4e:
                    d0:d4:c1:ee:2d:b5:a1:3f:47:32:a5:47:eb:e8:7c:
                    4e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:6F:CB:2F:2E:75:02:A5:BB:B6:49:11:EE:2A:E6:9B:2C:EF:09:BD
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/vG_LLy51AqW7tkkR7irmmyzvCb0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         05:e9:94:53:03:d2:43:f1:39:bf:94:06:82:24:8d:7a:b2:5d:
         63:fd:07:ec:80:8d:6d:a7:90:e1:72:04:65:5d:2c:69:ea:50:
         de:7d:27:39:2e:45:24:1e:ff:70:0d:65:9d:89:93:07:a3:bd:
         f9:5f:68:36:bb:ec:d0:d0:07:bd:a6:71:f8:d0:9e:28:89:38:
         91:28:95:8d:7a:e6:96:67:f6:d0:bc:fe:49:fc:e2:c1:32:6c:
         f4:67:15:74:f3:33:2e:03:19:94:c4:6f:ef:54:9b:d6:e8:4c:
         af:9e:9d:94:2b:15:d3:0d:e9:90:cc:c5:cf:c1:0e:4e:b3:97:
         34:0f:c3:18:80:99:97:a3:6d:ed:55:22:50:8c:06:83:bb:de:
         e0:1e:e4:4b:e1:18:63:bc:4c:e1:52:da:ea:ab:2b:5f:dc:f6:
         67:d7:81:98:d9:28:42:8f:ac:01:71:52:f0:d8:bb:b4:d4:1e:
         42:22:d4:d4:05:93:fb:c1:7e:f8:3a:ce:e2:1c:3d:d6:9c:02:
         8d:b0:56:73:00:4d:36:1e:24:ed:00:2d:5f:38:ed:9f:88:24:
         a3:10:e0:0b:76:de:cc:6c:44:46:72:a4:24:32:eb:b7:39:6a:
         17:9e:19:60:39:51:74:35:13:29:a1:60:c3:8d:2d:50:e6:bf:
         c9:ef:70:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:53 2023 by rpki-client on console-fra.rpki-client.org