Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/wMazdISUmiERJmlzZxHVeIKuoLE.roa
File:                     wMazdISUmiERJmlzZxHVeIKuoLE.roa (raw, json)
Hash identifier:          7bDnwNIgeLla8yKq9Xknb4lxXTxaa+59AJHm4HnbJR0=
Subject key identifier:   C0:C6:B3:74:84:94:9A:21:11:26:69:73:67:11:D5:78:82:AE:A0:B1
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0F55
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/wMazdISUmiERJmlzZxHVeIKuoLE.roa
Signing time:             Sun 07 Feb 2021 12:33:44 +0000
ROA not before:           Sun 07 Feb 2021 12:33:44 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24163
IP address blocks:        122.100.92.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3925 (0xf55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb  7 12:33:44 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=C0C6B37484949A21112669736711D57882AEA0B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6d:cc:e4:c3:8a:1e:6c:32:cb:51:a5:9b:57:
                    60:3a:d1:f3:b0:f6:40:8c:4c:6c:fb:96:42:49:d5:
                    f8:55:8f:62:87:aa:3f:fe:a0:3d:0e:5d:40:ea:fb:
                    7d:35:72:ce:2c:fa:25:b4:b8:c3:68:ad:4f:8e:90:
                    a3:17:94:78:17:1f:ac:dc:19:e3:fb:3d:25:36:56:
                    10:47:25:66:64:d5:95:dc:17:3d:9a:82:a3:80:44:
                    62:14:1d:e8:ae:d6:03:51:36:71:31:75:ac:a4:65:
                    aa:a2:28:b9:9d:51:2f:51:46:3f:84:71:c8:e4:d3:
                    a0:de:c7:14:63:f0:85:d7:3b:19:60:b1:f9:e9:1f:
                    5e:cc:96:e1:15:3f:2a:02:ec:66:8d:f1:ba:e5:61:
                    99:07:db:27:ff:76:68:2e:ba:7c:62:aa:19:96:e4:
                    19:b0:cd:41:9e:59:7d:5e:23:b7:f0:66:96:c5:9f:
                    34:b9:38:76:cf:83:c1:8a:9d:e9:47:ee:2e:07:40:
                    ba:c8:b7:36:f9:de:56:83:b1:08:4f:a7:da:0e:df:
                    19:03:bf:50:20:b2:31:2f:62:1e:b4:95:32:37:8c:
                    a8:81:2d:07:05:e1:b8:38:07:89:3c:e9:e2:09:b0:
                    93:b3:55:c2:13:8c:d9:8a:19:63:c0:94:2a:c8:f0:
                    b3:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:C6:B3:74:84:94:9A:21:11:26:69:73:67:11:D5:78:82:AE:A0:B1
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/wMazdISUmiERJmlzZxHVeIKuoLE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.100.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:17:d7:30:7d:e2:a0:38:96:48:fc:fd:16:68:3d:86:1f:c5:
         84:c7:9a:ee:0a:dc:57:3f:c4:58:3a:fe:a8:77:7f:c1:0b:0a:
         65:d3:92:14:5f:68:ca:9a:2f:e8:3f:92:4f:e5:50:93:23:33:
         af:86:42:76:bd:ae:2a:66:a0:2e:45:61:1c:d1:a0:d1:46:3d:
         a2:19:f9:da:58:be:b1:b5:2e:fd:e5:ce:2c:5d:99:3e:90:47:
         e5:6c:f4:1c:95:6a:97:1c:9a:d9:77:83:c2:12:34:ca:3f:2c:
         90:89:fa:6f:4c:8c:ab:01:98:85:a7:db:ea:b1:47:f8:8d:4b:
         32:16:70:92:e7:04:7c:42:8e:c1:68:b7:42:77:79:b5:2d:ed:
         28:40:3c:f9:3f:54:4f:75:15:92:61:79:6a:98:66:73:2e:ed:
         32:9c:e0:9f:cc:52:fc:1c:83:33:98:30:9d:0d:57:d7:fe:3e:
         43:06:7e:9b:5c:a1:3d:c3:5f:cc:19:0a:a1:ac:5d:cf:fe:b2:
         07:3e:e6:91:c4:ee:7c:1e:ab:cd:d7:63:ac:b6:d1:bb:d3:1a:
         ed:d7:f2:e1:cf:25:59:29:37:00:7e:8a:a0:dc:4c:97:e1:e4:
         83:ff:2c:cc:b3:88:c4:cb:85:7e:96:df:81:6d:6d:bc:b1:bd:
         5c:f6:1b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org