Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7G_hwLbiUcFfRzpPqdG7xW865aQ.roa
File:                     7G_hwLbiUcFfRzpPqdG7xW865aQ.roa (raw, json)
Hash identifier:          Xyhd+EOoq9bA1/OYtURKvVhhxl4kO+CbRp5Q1imzrpA=
Subject key identifier:   EC:6F:E1:C0:B6:E2:51:C1:5F:47:3A:4F:A9:D1:BB:C5:6F:3A:E5:A4
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0BAB
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7G_hwLbiUcFfRzpPqdG7xW865aQ.roa
Signing time:             Tue 29 Sep 2020 10:08:41 +0000
ROA not before:           Tue 29 Sep 2020 10:08:41 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        180.218.192.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2987 (0xbab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:08:41 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=EC6FE1C0B6E251C15F473A4FA9D1BBC56F3AE5A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:37:26:71:08:69:3d:b8:a9:cb:be:7c:4c:49:
                    98:68:aa:26:87:8d:ac:fc:0b:0b:7b:b6:16:56:7d:
                    2e:81:5c:09:3b:12:aa:96:ad:03:d3:55:1a:a7:75:
                    6b:bd:d4:14:b5:fe:52:1a:21:80:95:1f:01:96:27:
                    7a:ac:4c:cb:7c:fd:53:6c:34:7c:9b:58:1b:93:6c:
                    86:de:4d:d0:6b:67:6b:a7:45:a3:80:84:75:b4:7a:
                    a9:df:59:18:d6:43:fe:ec:09:55:95:77:61:60:da:
                    54:5e:27:41:39:a4:17:24:2b:72:1e:4d:69:38:92:
                    99:d7:98:14:4b:0e:1a:56:94:13:b0:87:1a:c5:bb:
                    dd:08:57:b3:43:d5:24:58:ca:22:d4:54:46:8e:11:
                    2e:e4:b9:ea:e8:eb:38:c7:15:51:07:13:27:8f:d7:
                    6d:07:c2:0e:cf:c4:15:14:0b:be:89:4c:59:bc:c4:
                    3b:ce:62:ae:65:ac:6d:1f:4b:01:19:4b:c7:87:c2:
                    cb:23:30:dd:4b:87:b4:60:fe:06:de:04:16:04:88:
                    30:bd:da:1d:a6:3e:6a:75:b3:7f:33:d9:ea:74:e1:
                    80:ae:17:48:d4:3f:53:d6:5d:3b:cd:3d:bf:bb:fb:
                    bc:6f:5a:72:82:f9:7a:e8:aa:53:62:e1:8d:40:b0:
                    54:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:6F:E1:C0:B6:E2:51:C1:5F:47:3A:4F:A9:D1:BB:C5:6F:3A:E5:A4
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7G_hwLbiUcFfRzpPqdG7xW865aQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         38:86:a5:3c:d6:3c:25:fe:9e:c2:d7:3b:58:cc:52:44:50:f1:
         8c:b6:5e:50:f1:23:55:45:26:33:8f:19:4b:5e:58:83:ad:a4:
         85:40:93:77:fd:3c:14:54:b2:49:35:b7:6b:55:95:62:b1:87:
         aa:64:18:56:12:5d:b9:fc:48:70:26:7d:ca:ce:88:e7:c5:91:
         ac:c0:24:09:92:e2:d2:3e:ff:87:e1:7c:3e:8b:78:86:61:ef:
         04:bf:4b:20:26:db:ef:7c:7c:f1:cd:83:49:53:c7:c1:1f:55:
         a3:cb:bc:f1:2d:ec:89:12:59:12:2c:81:9d:3c:16:c3:b8:7a:
         a6:a0:92:43:ef:f3:5a:2b:2f:b8:a5:ed:e6:f3:26:08:21:20:
         21:9c:98:f1:7d:9c:6e:1d:9b:75:57:0d:5d:89:a2:5d:f3:5b:
         f6:5c:8a:75:7d:da:7b:e7:2f:1d:ec:cd:c5:5b:51:03:cb:23:
         b8:d1:0d:02:78:97:54:2e:53:13:8a:dc:0f:d0:b7:d4:4d:ce:
         65:26:85:6d:8c:ab:13:8b:af:84:6d:08:f7:60:f3:a2:ce:bf:
         bc:ea:75:23:44:7f:d9:97:a2:a0:b5:d2:b3:18:26:6e:07:8a:
         3c:30:9a:e2:58:42:06:59:71:05:05:2c:eb:90:e2:1c:1d:6d:
         ad:f4:a1:11
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICC6swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMDA5Mjkx
MDA4NDFaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEVDNkZFMUMwQjZFMjUx
QzE1RjQ3M0E0RkE5RDFCQkM1NkYzQUU1QTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDRNyZxCGk9uKnLvnxMSZhoqiaHjaz8Cwt7thZWfS6BXAk7EqqW
rQPTVRqndWu91BS1/lIaIYCVHwGWJ3qsTMt8/VNsNHybWBuTbIbeTdBrZ2unRaOA
hHW0eqnfWRjWQ/7sCVWVd2Fg2lReJ0E5pBckK3IeTWk4kpnXmBRLDhpWlBOwhxrF
u90IV7ND1SRYyiLUVEaOES7kuero6zjHFVEHEyeP120Hwg7PxBUUC76JTFm8xDvO
Yq5lrG0fSwEZS8eHwssjMN1Lh7Rg/gbeBBYEiDC92h2mPmp1s38z2ep04YCuF0jU
P1PWXTvNPb+7+7xvWnKC+XroqlNi4Y1AsFTRAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU7G/hwLbiUcFfRzpPqdG7xW865aQwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzdHX2h3TGJpVWNGZlJ6cFBx
ZEc3eFc4NjVhUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAa0
2sAwDQYJKoZIhvcNAQELBQADggEBADiGpTzWPCX+nsLXO1jMUkRQ8Yy2XlDxI1VF
JjOPGUteWIOtpIVAk3f9PBRUskk1t2tVlWKxh6pkGFYSXbn8SHAmfcrOiOfFkazA
JAmS4tI+/4fhfD6LeIZh7wS/SyAm2+98fPHNg0lTx8EfVaPLvPEt7IkSWRIsgZ08
FsO4eqagkkPv81orL7il7ebzJgghICGcmPF9nG4dm3VXDV2Jol3zW/ZcinV92nvn
Lx3szcVbUQPLI7jRDQJ4l1QuUxOK3A/Qt9RNzmUmhW2MqxOLr4RtCPdg86LOv7zq
dSNEf9mXoqC10rMYJm4HijwwmuJYQgZZcQUFLOuQ4hwdba30oRE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:45 2024 by rpki-client on console-ams.rpki-client.org