Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/5PziOHBId23Lz-x_xHPNfF7eOis.roa
File:                     5PziOHBId23Lz-x_xHPNfF7eOis.roa (raw, json)
Hash identifier:          VoOf13gKxu75kum/2gU8XhprU4LWg7eH/X/n6AcUlRE=
Subject key identifier:   E4:FC:E2:38:70:48:77:6D:CB:CF:EC:7F:C4:73:CD:7C:5E:DE:3A:2B
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       12EF
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/5PziOHBId23Lz-x_xHPNfF7eOis.roa
Signing time:             Wed 29 Sep 2021 02:55:10 +0000
ROA not before:           Wed 29 Sep 2021 02:55:10 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24164
IP address blocks:        180.218.156.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4847 (0x12ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:55:10 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=E4FCE2387048776DCBCFEC7FC473CD7C5EDE3A2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:93:98:df:2a:e0:df:64:7f:34:ef:fb:c3:6d:
                    03:cc:bd:43:76:09:18:da:a2:7c:0a:66:10:7d:19:
                    3c:53:d8:37:0d:05:96:8a:60:57:3b:aa:c8:b7:ec:
                    59:92:2c:cd:5a:95:cd:0a:47:cf:a2:8b:10:05:c4:
                    42:de:e8:92:45:ae:4d:7a:39:69:e7:af:f8:b3:73:
                    b6:ba:b6:32:7d:d1:59:bf:2f:b0:1a:67:52:5a:44:
                    22:19:cd:48:a2:bf:cd:85:4f:48:f0:20:a4:ea:fa:
                    f6:c9:25:ae:dc:2c:7f:7a:4e:c1:23:e6:a0:c8:50:
                    98:e8:24:21:16:d3:be:68:c7:68:b6:67:86:1f:63:
                    ab:89:99:fa:ec:c9:dd:37:d0:fd:6f:e1:48:00:3f:
                    4c:43:37:63:0f:35:32:01:c1:26:c7:61:b4:c7:c2:
                    8f:d9:c4:ce:85:02:04:45:17:e3:32:cf:86:ff:a7:
                    f7:ad:98:25:5f:b9:fc:63:69:91:d4:6a:6f:a0:7f:
                    1c:88:26:7a:27:cc:7e:bc:9c:ee:8f:3c:59:f9:93:
                    cf:01:18:db:60:62:99:23:19:73:48:e5:bf:be:c1:
                    5f:12:67:8a:67:55:c7:8a:ef:2d:3a:14:03:ae:98:
                    ae:c8:c6:1a:d0:95:e4:21:7b:e0:c9:c2:8e:ec:49:
                    10:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:FC:E2:38:70:48:77:6D:CB:CF:EC:7F:C4:73:CD:7C:5E:DE:3A:2B
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/5PziOHBId23Lz-x_xHPNfF7eOis.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:67:dc:5c:37:45:92:6d:f4:ba:6d:07:18:e0:73:67:d5:40:
         51:ea:33:f4:d0:5f:75:44:d4:58:3f:05:24:20:85:de:fe:f2:
         cd:63:3a:12:ba:9b:5b:f2:1d:32:8e:f1:97:69:38:10:f1:c9:
         83:12:f0:54:ae:37:bb:2d:ea:87:1f:61:e2:00:f4:b2:ca:b7:
         6f:a0:11:f7:e6:4a:e7:aa:c2:c5:4a:29:33:5d:bf:ae:8c:3d:
         d3:b9:d0:6c:26:ac:3a:58:e0:e8:f7:94:56:64:b0:aa:e7:9e:
         68:14:c1:83:6f:c7:5b:ea:02:b2:01:61:18:a2:c5:93:b0:48:
         b6:f3:53:e2:bd:6c:96:7d:7c:6f:28:c3:34:b3:f5:13:ae:e8:
         c2:3f:16:24:32:e6:be:2a:ce:ed:0b:51:06:82:d5:00:25:9b:
         bb:4e:d7:d9:30:f3:72:62:7f:fe:48:82:22:8b:98:0d:46:a0:
         55:71:d4:a9:6b:b6:35:9c:8c:4a:80:e5:ac:3b:87:f3:ec:c9:
         3a:85:23:1d:7e:1d:33:15:f8:9e:cb:54:7a:cc:e9:f0:cf:e6:
         48:b6:6e:58:84:14:67:98:a5:b8:a1:aa:8e:0c:83:db:6c:b8:
         09:22:38:67:fb:7d:1a:cd:bc:f7:57:f5:66:2c:06:5f:12:d0:
         b0:37:5b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:02 2024 by rpki-client on console-fra.rpki-client.org