Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/EGO0bk1XFrRUqFwtxSFxe5Cv2Lw.roa
File:                     EGO0bk1XFrRUqFwtxSFxe5Cv2Lw.roa (raw, json)
Hash identifier:          1LDjc7w4XsFug6wkvsgPSv/0+ghyyiKs7f5+x7RFThE=
Subject key identifier:   10:63:B4:6E:4D:57:16:B4:54:A8:5C:2D:C5:21:71:7B:90:AF:D8:BC
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/EGO0bk1XFrRUqFwtxSFxe5Cv2Lw.roa
Signing time:             Thu 15 Sep 2022 02:36:14 +0000
ROA not before:           Thu 15 Sep 2022 02:36:14 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24164
IP address blocks:        180.218.144.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5374 (0x14fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 15 02:36:14 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=1063B46E4D5716B454A85C2DC521717B90AFD8BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1b:07:e2:a5:f1:00:b1:68:88:23:4b:3c:e5:
                    9b:28:49:ee:d7:11:9d:65:01:01:b1:8e:7a:fe:f5:
                    0f:a3:15:c2:28:19:f8:79:8e:e1:71:cc:fa:db:b1:
                    8a:c0:e5:af:dc:e3:de:d5:c1:6a:dc:98:c7:b6:93:
                    1c:18:93:a4:88:45:2e:05:d5:13:8e:ef:00:58:02:
                    2f:e3:96:a8:6f:dc:c1:ea:be:70:48:72:87:f5:3b:
                    1c:3f:bc:4a:a5:3b:b0:67:3f:cd:79:f8:c5:5b:84:
                    d1:6d:b3:72:48:f6:5f:77:f3:99:74:b1:bc:25:45:
                    51:19:6c:46:8d:41:d3:a0:d4:a5:df:2a:1d:0f:ac:
                    cb:4b:15:43:3f:1f:13:9c:c4:4b:23:4f:47:94:3a:
                    a1:51:9a:f3:bf:31:25:f1:17:47:7f:b4:d5:69:3e:
                    6a:58:12:aa:de:f2:b8:ae:8a:c5:d3:1e:89:e8:6e:
                    aa:2b:24:e4:2f:12:cb:6a:6c:35:96:23:d1:df:df:
                    03:31:99:2c:df:ee:20:04:3c:3c:4e:fb:30:34:2f:
                    01:b6:57:57:ee:db:78:4e:f9:db:80:19:42:41:97:
                    b6:4c:f0:e5:89:7d:2e:d7:f8:71:e0:bc:67:9a:09:
                    0f:76:97:d7:39:db:3c:66:64:52:1b:d6:ab:58:cf:
                    e5:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:63:B4:6E:4D:57:16:B4:54:A8:5C:2D:C5:21:71:7B:90:AF:D8:BC
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/EGO0bk1XFrRUqFwtxSFxe5Cv2Lw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1b:8c:1b:3d:7f:14:77:02:4c:56:76:62:0d:25:31:bb:04:40:
         eb:a0:ed:30:09:e8:2a:e2:7d:f9:80:c4:98:cb:c0:d3:aa:08:
         84:4d:d8:b0:87:ac:1d:6c:ab:a3:5f:16:4c:36:79:fb:47:7f:
         bc:84:3b:1c:5d:42:a8:2d:d4:ac:ce:64:fd:be:f1:ef:f3:89:
         e5:4f:4e:85:7e:8e:ec:a2:c9:22:18:1a:12:bc:44:41:9d:15:
         84:c1:f1:01:d0:c7:88:d6:a0:5c:2d:2d:05:28:c0:ec:41:2e:
         82:a1:f9:be:71:a2:60:96:5a:7d:cf:1f:15:02:84:fe:2d:be:
         fd:17:f5:24:ae:c6:f6:46:91:a1:99:76:5a:be:c7:8a:db:ae:
         49:e3:00:01:9a:cd:3e:f4:b1:e3:43:3d:0a:16:02:7f:39:15:
         a6:32:53:6a:ff:4b:2d:3f:3d:ac:e9:ae:1f:af:e6:05:68:f8:
         cf:99:b4:c0:8e:6b:70:0e:cc:14:5c:e4:f8:07:15:dc:0b:b1:
         0f:28:61:62:c4:9c:bd:a8:7c:72:ca:2f:6a:9a:9b:a9:5d:89:
         f0:d3:03:bb:35:cc:37:ce:b1:19:ee:35:46:08:5c:65:25:a1:
         f2:a8:7b:9a:6f:7e:1a:18:27:29:19:fd:e8:7f:d5:54:d0:27:
         ab:4d:6c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:45 2024 by rpki-client on console-ams.rpki-client.org