Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/N-LXoqn9icfCOfOMovSrQOEO6w4.roa
File:                     N-LXoqn9icfCOfOMovSrQOEO6w4.roa (raw, json)
Hash identifier:          OVRF3AKflzgZBIV4rhawI4RBB29Uec1fQ0qdERYGfwU=
Subject key identifier:   37:E2:D7:A2:A9:FD:89:C7:C2:39:F3:8C:A2:F4:AB:40:E1:0E:EB:0E
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       193A
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/N-LXoqn9icfCOfOMovSrQOEO6w4.roa
Signing time:             Sat 22 Oct 2022 06:06:15 +0000
ROA not before:           Sat 22 Oct 2022 06:06:15 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24165
IP address blocks:        180.218.80.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6458 (0x193a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Oct 22 06:06:15 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=37E2D7A2A9FD89C7C239F38CA2F4AB40E10EEB0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:56:c5:2f:9a:15:63:8a:27:83:12:d7:c0:86:
                    e2:a3:66:21:ac:5a:82:82:4d:62:a2:b9:be:01:4f:
                    01:20:f7:ed:9b:b9:24:e5:53:5f:49:c0:9a:95:52:
                    69:0d:c2:39:bb:3f:2c:ef:4a:a6:6e:6a:13:e7:b8:
                    7e:82:2e:30:9a:9d:f6:cb:1e:9e:63:fb:72:15:91:
                    0f:36:b3:b7:c9:5e:8d:de:79:3d:11:b2:ca:86:82:
                    29:15:40:6e:7c:96:f0:da:ad:96:37:31:3c:51:2d:
                    6c:95:fa:d6:07:98:ae:19:be:08:b7:95:f6:4a:1e:
                    b9:e2:41:44:a0:15:68:66:f9:d6:5e:c2:f7:99:b4:
                    bf:c3:0e:18:ff:13:60:5b:bf:83:6d:4d:8a:8d:02:
                    ef:25:30:65:4c:12:42:e2:62:36:6d:56:75:fd:ae:
                    83:08:bb:f9:ec:0f:64:b3:15:d0:ef:ed:b1:81:e0:
                    04:ed:c7:f4:97:6a:7f:dc:64:20:43:81:fa:5d:34:
                    7b:5c:42:a5:84:6a:a7:b2:82:02:7e:09:ba:f2:b1:
                    67:4d:0a:fc:63:f1:fc:57:1a:38:7d:9b:01:68:d2:
                    4c:54:ca:a3:91:2d:49:2b:5f:5d:d6:f7:bf:8a:7f:
                    fb:27:db:4d:0f:0c:ce:00:dc:38:fb:23:a2:bb:a1:
                    ee:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:E2:D7:A2:A9:FD:89:C7:C2:39:F3:8C:A2:F4:AB:40:E1:0E:EB:0E
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/N-LXoqn9icfCOfOMovSrQOEO6w4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:17:15:fc:18:a5:01:81:86:eb:5c:5f:d4:34:4f:44:e3:37:
         6e:a7:66:d2:cb:ff:9a:68:14:8e:72:15:0a:70:a0:c6:c5:6f:
         f8:a0:b1:89:33:de:9d:1f:f3:cf:10:61:29:1e:1c:28:46:63:
         e9:f0:6e:31:6d:f2:ce:3f:cf:94:81:86:e4:00:6f:44:5c:67:
         4f:fa:80:1d:ac:a1:d1:4f:43:67:be:69:cb:c8:e0:5d:aa:a0:
         2d:2b:58:52:e9:2b:6a:cb:93:a7:8a:8f:43:0b:d4:1b:f7:75:
         6c:b7:fb:2c:95:60:68:97:e6:85:57:15:04:a4:4e:87:fb:f8:
         57:79:9c:69:5c:24:82:91:e4:a4:d6:d0:fa:4c:4f:5a:0e:e3:
         c8:80:de:5e:16:76:4b:54:0c:37:2a:eb:0b:13:8e:db:0a:f0:
         a3:39:15:b3:69:fb:63:d6:ec:b5:60:5c:3f:4d:7f:a6:23:f4:
         02:82:ce:14:d0:38:36:94:ac:a4:81:72:f6:29:f0:c4:e1:4e:
         6e:6a:c8:22:d1:31:5e:dc:5b:e4:be:89:b0:40:42:7c:04:82:
         5c:4c:89:e1:39:a7:f1:6d:75:0d:69:ad:cb:15:01:0d:08:9e:
         c2:8d:f8:e5:fc:27:54:d2:45:b6:0d:3a:e6:f7:1a:2c:6a:7a:
         c1:e2:19:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:03 2024 by rpki-client on console-fra.rpki-client.org