Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/N0iT8GAtumGonaG5xWlWSrLl7D8.roa
File:                     N0iT8GAtumGonaG5xWlWSrLl7D8.roa (raw, json)
Hash identifier:          30ybTuzJOnsLFMjryhVJY6AlCUZf4mrbjbhQS0np0Ug=
Subject key identifier:   37:48:93:F0:60:2D:BA:61:A8:9D:A1:B9:C5:69:56:4A:B2:E5:EC:3F
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1918
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/N0iT8GAtumGonaG5xWlWSrLl7D8.roa
Signing time:             Sat 22 Oct 2022 06:06:06 +0000
ROA not before:           Sat 22 Oct 2022 06:06:06 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24163
IP address blocks:        180.218.224.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6424 (0x1918)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Oct 22 06:06:06 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=374893F0602DBA61A89DA1B9C569564AB2E5EC3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:72:a0:b3:e0:a7:f6:d9:d3:5d:e4:f8:e0:3d:
                    3e:a5:4c:76:5d:9b:14:9b:61:82:c5:8c:5e:df:22:
                    1a:8d:3a:81:3a:27:59:bc:91:cb:c7:de:2c:57:bf:
                    45:d0:69:16:c7:48:8e:21:25:93:54:74:ae:2e:90:
                    0c:3e:2a:9d:ee:d0:51:7b:de:2b:91:f3:48:b6:0a:
                    97:8c:80:52:58:fb:cb:70:e0:5a:2e:46:13:1c:c5:
                    92:21:ac:5e:0e:5d:58:95:81:77:92:72:e3:fb:c8:
                    31:23:ac:76:91:7d:e2:23:cf:a9:24:c4:67:00:b4:
                    7a:8a:aa:79:14:e0:ae:43:72:c0:2b:3f:9f:2b:ff:
                    48:00:40:91:8a:c6:ca:3e:75:de:26:1b:28:74:d8:
                    e7:f7:8e:2a:06:4c:5e:9d:b0:e1:8b:07:05:3f:c2:
                    cb:f3:9b:52:cf:2e:e8:c3:1e:5f:b4:c4:44:23:db:
                    eb:44:58:4a:52:99:07:13:36:56:98:5b:d0:f3:a3:
                    6c:5e:b6:69:87:c0:a4:fe:b6:94:07:43:f9:be:f5:
                    cd:31:a4:29:0c:cd:ff:27:fd:64:13:56:b3:4d:e5:
                    36:8d:1e:a9:14:65:1c:a6:af:d6:bf:c9:84:ec:fe:
                    d3:47:b2:fb:e0:f4:8e:6b:a2:ae:bb:f0:5c:06:b2:
                    69:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:48:93:F0:60:2D:BA:61:A8:9D:A1:B9:C5:69:56:4A:B2:E5:EC:3F
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/N0iT8GAtumGonaG5xWlWSrLl7D8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         36:34:56:8b:8d:ac:aa:66:a7:f2:ec:66:17:9f:d6:e2:b7:6d:
         54:73:4b:dc:5a:17:15:00:0c:22:af:63:d5:6f:62:d0:14:77:
         27:5f:41:73:5c:b1:66:42:e9:28:b8:a0:7f:33:60:6c:d7:63:
         40:ea:1d:6c:b3:cd:f0:85:75:3e:0a:37:38:21:f2:7b:bd:24:
         57:d0:33:bc:88:62:8f:fc:34:18:12:9e:80:73:b8:98:c4:a6:
         f7:6d:8f:43:0c:61:e6:6f:de:1d:09:7e:93:c1:a4:f8:d5:14:
         ad:a2:2b:88:19:5f:9d:c2:a5:7b:78:f7:d8:f0:15:82:02:9c:
         21:f3:4c:79:80:95:27:ce:be:1d:be:4d:4b:18:bf:a6:d8:76:
         3b:43:a7:0d:55:2f:5b:f5:ef:99:5e:9e:fe:7b:a1:fb:2f:7a:
         5d:4b:d7:d3:54:69:23:ab:30:62:4e:8d:1a:03:da:ed:e1:cc:
         1d:2c:c2:0f:0b:f2:c8:cf:67:dd:02:b7:2e:2c:55:69:54:8d:
         63:72:54:c4:3d:80:c1:b4:f1:03:3a:10:27:cc:aa:3d:d7:41:
         1c:88:1f:85:a1:3a:37:e8:8b:85:b8:29:97:f3:d4:25:3a:8c:
         fc:a7:84:fc:6b:e5:cf:17:80:d7:12:5c:ee:53:81:d3:0e:66:
         4b:15:45:92
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGRgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjEwMjIw
NjA2MDZaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDM3NDg5M0YwNjAyREJB
NjFBODlEQTFCOUM1Njk1NjRBQjJFNUVDM0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCrcqCz4Kf22dNd5PjgPT6lTHZdmxSbYYLFjF7fIhqNOoE6J1m8
kcvH3ixXv0XQaRbHSI4hJZNUdK4ukAw+Kp3u0FF73iuR80i2CpeMgFJY+8tw4Fou
RhMcxZIhrF4OXViVgXeScuP7yDEjrHaRfeIjz6kkxGcAtHqKqnkU4K5DcsArP58r
/0gAQJGKxso+dd4mGyh02Of3jioGTF6dsOGLBwU/wsvzm1LPLujDHl+0xEQj2+tE
WEpSmQcTNlaYW9Dzo2xetmmHwKT+tpQHQ/m+9c0xpCkMzf8n/WQTVrNN5TaNHqkU
ZRymr9a/yYTs/tNHsvvg9I5roq678FwGsmk1AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUN0iT8GAtumGonaG5xWlWSrLl7D8wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL04waVQ4R0F0dW1Hb25hRzV4
V2xXU3JMbDdEOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0
2uAwDQYJKoZIhvcNAQELBQADggEBADY0VouNrKpmp/LsZhef1uK3bVRzS9xaFxUA
DCKvY9VvYtAUdydfQXNcsWZC6Si4oH8zYGzXY0DqHWyzzfCFdT4KNzgh8nu9JFfQ
M7yIYo/8NBgSnoBzuJjEpvdtj0MMYeZv3h0JfpPBpPjVFK2iK4gZX53CpXt499jw
FYICnCHzTHmAlSfOvh2+TUsYv6bYdjtDpw1VL1v175lenv57ofsvel1L19NUaSOr
MGJOjRoD2u3hzB0swg8L8sjPZ90Cty4sVWlUjWNyVMQ9gMG08QM6ECfMqj3XQRyI
H4WhOjfoi4W4KZfz1CU6jPynhPxr5c8XgNcSXO5TgdMOZksVRZI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:03 2024 by rpki-client on console-fra.rpki-client.org