Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/B7N0Eeog0_p5xZjifh0UtU5UhOk.roa
File:                     B7N0Eeog0_p5xZjifh0UtU5UhOk.roa (raw, json)
Hash identifier:          jJBJUHiE7p4y+auLY6g0Q2aFqbnbRjmPost01g6fe2U=
Subject key identifier:   07:B3:74:11:EA:20:D3:FA:79:C5:98:E2:7E:1D:14:B5:4E:54:84:E9
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0B75
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/B7N0Eeog0_p5xZjifh0UtU5UhOk.roa
Signing time:             Tue 29 Sep 2020 10:08:27 +0000
ROA not before:           Tue 29 Sep 2020 10:08:27 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24165
IP address blocks:        180.218.40.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2933 (0xb75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:08:27 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=07B37411EA20D3FA79C598E27E1D14B54E5484E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:14:f9:91:f6:5a:7d:9c:f4:97:79:06:e4:13:
                    ee:66:1e:5b:1b:f6:80:a6:f5:fe:48:24:e0:f2:75:
                    cc:87:09:7f:b1:09:46:66:1a:89:99:a5:b8:7f:f1:
                    47:58:c0:e3:09:34:51:5d:2b:4c:f9:bf:ae:f4:e2:
                    e2:33:ee:e9:ff:a8:c2:9a:c5:39:d1:62:f9:cd:d0:
                    25:d4:4f:32:c1:d2:c7:af:b9:fc:85:be:2d:fb:5c:
                    16:ff:56:15:4b:20:60:49:3e:86:8f:90:69:35:f6:
                    4a:56:64:c9:cd:04:e4:a3:71:5c:56:f9:a8:86:e1:
                    29:1d:1b:41:da:61:1f:46:c9:26:03:5e:48:8a:46:
                    2b:08:6f:d6:98:7c:59:00:e7:d2:a1:39:c5:f5:92:
                    33:57:12:2e:bd:94:b9:cd:38:59:4f:d9:52:e0:16:
                    bc:d5:9a:f1:50:97:2d:15:7b:10:c4:d8:9e:e1:55:
                    32:31:6b:2c:1f:34:37:7a:22:ee:c3:45:52:e7:37:
                    e5:c9:1e:e4:2f:87:d6:97:ce:97:da:be:bc:db:b2:
                    bf:94:52:6d:f3:23:53:d8:e9:4c:d6:0a:d3:fc:18:
                    23:33:d1:12:c7:02:91:14:a1:5e:d0:f9:e3:06:81:
                    c5:d6:6a:45:a9:02:3a:9f:30:ab:d7:16:59:00:dc:
                    6d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:B3:74:11:EA:20:D3:FA:79:C5:98:E2:7E:1D:14:B5:4E:54:84:E9
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/B7N0Eeog0_p5xZjifh0UtU5UhOk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:fd:0a:c9:43:23:cf:9f:02:37:25:cb:db:f8:46:c9:e9:2c:
         15:7b:d7:e3:36:20:0c:7a:9a:1f:0c:c0:50:81:ff:60:39:f5:
         b0:6c:a9:91:77:5a:2e:75:01:2f:88:8b:9a:64:9d:9e:d8:da:
         fe:38:cd:71:da:f3:05:e9:4b:c1:9c:42:97:ab:a2:52:49:bd:
         be:3a:a4:a4:a4:9b:53:90:51:32:24:04:fa:f4:78:ea:87:7e:
         c9:80:54:4e:ed:47:54:e1:26:44:dc:c1:48:46:27:d5:60:0c:
         4e:32:29:9b:72:c1:78:2b:a2:d9:15:e0:c3:b3:00:0f:eb:f5:
         92:60:bf:b2:af:64:ab:d5:fb:c9:f9:ff:2a:74:19:de:e3:7d:
         27:ae:d2:e6:95:af:93:a3:44:96:9f:4e:dd:3d:03:dc:ce:44:
         41:33:ba:df:3d:f6:b5:a5:80:33:1e:6a:1e:79:30:c8:dd:c5:
         d9:d1:dd:8d:c0:05:e5:59:84:41:18:13:97:a4:f7:5d:ee:34:
         46:98:d6:0e:2d:96:c6:69:9d:44:87:0f:28:c9:23:c5:ab:cf:
         f1:58:59:ae:3e:f7:c9:5b:a9:e6:2b:4c:19:f4:7f:46:64:b1:
         8f:73:96:3d:69:fd:e8:92:3a:cb:4e:c8:67:25:bf:28:66:04:
         6c:9b:cb:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:45 2024 by rpki-client on console-ams.rpki-client.org