Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/vp_Qe3k2HJ23GVVHMbaB7pOp1mc.roa
File:                     vp_Qe3k2HJ23GVVHMbaB7pOp1mc.roa (raw, json)
Hash identifier:          2xTNYCddvoLEL68hvYnQOc7kMNX0ec260p7J3PQDges=
Subject key identifier:   BE:9F:D0:7B:79:36:1C:9D:B7:19:55:47:31:B6:81:EE:93:A9:D6:67
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1447
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/vp_Qe3k2HJ23GVVHMbaB7pOp1mc.roa
Signing time:             Wed 04 May 2022 01:56:30 +0000
ROA not before:           Wed 04 May 2022 01:56:30 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24163
IP address blocks:        61.56.176.0/20 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5191 (0x1447)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: May  4 01:56:30 2022 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=BE9FD07B79361C9DB719554731B681EE93A9D667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:cc:6e:63:f9:0c:6e:10:7a:0a:f7:b1:38:db:
                    da:5a:11:be:29:05:63:cf:7e:fe:ef:33:0c:c4:73:
                    24:4b:58:b8:9d:a5:e8:84:b7:da:12:ef:d7:3f:ec:
                    f1:d9:e4:60:56:a6:22:50:77:ce:7e:d1:d0:75:1d:
                    fb:cc:12:d7:5e:70:44:f2:b5:c9:8a:a2:50:f3:94:
                    6e:25:1d:af:52:a6:49:96:3e:d6:06:46:fa:67:94:
                    99:c6:78:88:c1:c5:b6:82:04:17:8d:72:a5:24:bd:
                    3e:c2:3d:e0:b0:d7:a3:0f:f3:9d:1f:1a:4d:72:1e:
                    af:45:6b:41:1f:5c:65:22:e4:18:ec:0a:48:f9:ef:
                    6f:a5:d6:ed:a1:56:5a:66:47:1a:75:3b:c2:a1:6c:
                    08:f9:c9:66:56:dd:4f:2b:50:29:19:b9:95:f1:30:
                    b8:14:fa:ed:2a:7c:a8:d4:fa:1a:03:f5:a0:38:ec:
                    5c:a6:98:70:8b:5b:b4:2f:b2:7e:40:82:4f:70:b6:
                    65:13:66:f9:1a:be:92:64:81:2b:21:00:f5:48:33:
                    ba:32:ef:44:a7:81:fb:57:2b:e3:ff:9c:b8:e6:98:
                    55:01:f6:3c:45:2e:d5:13:0e:75:25:38:a1:a3:71:
                    b6:fa:bd:de:e9:b3:4b:aa:8a:de:8f:57:32:1b:1c:
                    80:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:9F:D0:7B:79:36:1C:9D:B7:19:55:47:31:B6:81:EE:93:A9:D6:67
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/vp_Qe3k2HJ23GVVHMbaB7pOp1mc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.56.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         12:9c:f7:b9:08:66:a3:1c:33:32:e1:63:ea:36:d0:3b:df:2b:
         7b:06:89:87:54:8c:90:62:9e:20:6b:48:e0:9c:60:7f:b7:2a:
         5c:10:05:18:32:72:c3:ed:4f:e6:a6:7d:6b:2a:08:31:bd:50:
         da:43:cb:3d:00:20:22:e4:d2:c7:75:4f:38:cd:55:36:c0:85:
         ac:c7:34:a2:b7:a9:1a:dc:96:d6:92:a3:e7:e5:72:b5:de:2b:
         60:62:1e:dc:4d:c2:12:62:d9:8a:8e:90:d3:f0:74:98:a1:05:
         2c:17:bc:cd:a6:a7:f8:d3:e4:cc:ed:62:7e:d8:bd:6c:c3:c4:
         3a:a5:0e:15:65:65:ff:dc:4e:f3:a2:af:57:c6:41:7d:3b:b8:
         02:8c:4c:ec:d8:18:5a:ac:e5:59:69:87:75:fc:ca:e0:09:de:
         f6:2d:93:1b:df:ef:81:7f:57:cc:b7:74:8b:4f:7d:75:b5:4c:
         96:fa:cc:ca:17:06:85:f4:9c:f2:a7:4f:4a:76:6e:3c:ec:f4:
         df:e3:16:d8:f1:42:72:4a:f0:c6:74:8b:a8:9d:d8:e7:c0:e2:
         27:83:7a:e5:59:f3:15:06:3e:d9:13:5e:ba:2d:c3:89:89:a5:
         1a:74:b8:fa:a0:82:f3:56:3f:37:94:51:c7:56:0c:79:6b:f6:
         9f:d8:f1:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:41 2023 by rpki-client on console-ams.rpki-client.org