Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/OjUq6iTI0dhh9XCWAIrnWUM5p0Q.roa
File:                     OjUq6iTI0dhh9XCWAIrnWUM5p0Q.roa (raw, json)
Hash identifier:          qptOHo2Dk20VZ6k59ztXCIs/ezRUMGKUkbvzehaDQAM=
Subject key identifier:   3A:35:2A:EA:24:C8:D1:D8:61:F5:70:96:00:8A:E7:59:43:39:A7:44
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       108B
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/OjUq6iTI0dhh9XCWAIrnWUM5p0Q.roa
Signing time:             Sun 07 Feb 2021 12:46:07 +0000
ROA not before:           Sun 07 Feb 2021 12:46:07 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        180.218.190.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4235 (0x108b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb  7 12:46:07 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=3A352AEA24C8D1D861F57096008AE7594339A744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:27:de:48:63:04:c0:b2:3b:6d:25:75:c4:54:
                    0e:c9:fe:88:c0:7c:7a:1d:6f:f8:b8:c0:77:aa:df:
                    a9:99:06:4d:22:95:fb:92:3d:86:f1:12:df:b7:91:
                    ae:cf:a4:02:36:13:27:ce:be:9a:5c:63:ec:db:62:
                    30:cb:9a:8f:3c:31:b0:48:eb:1b:6c:e2:3a:0b:98:
                    eb:b7:38:65:ea:ef:d1:61:36:00:f3:1d:7d:34:16:
                    f0:66:dc:b0:04:fc:1a:3a:af:08:af:7e:6e:00:ea:
                    df:d7:d0:60:25:9b:56:f0:16:bf:93:37:6a:67:83:
                    8a:22:4d:96:3d:4c:90:6a:8c:c0:d6:62:a4:fc:5f:
                    8c:fc:e5:80:d4:43:e9:c3:ed:cc:5e:7c:95:02:5d:
                    ce:c7:73:69:a0:63:f5:fb:32:a9:e4:17:43:81:56:
                    25:2c:86:c4:4a:f8:d6:ac:29:e0:a4:51:8b:b7:88:
                    9e:4e:b7:8c:03:5b:d1:56:23:cc:db:88:db:8b:9b:
                    d7:cc:d2:60:ea:81:c7:4d:fd:e0:ab:72:b9:c4:83:
                    53:87:10:db:74:fd:d3:41:d0:58:dc:54:bd:06:02:
                    c1:fa:e8:8d:ea:c8:73:fe:12:55:90:28:5e:f8:3f:
                    3c:87:c9:08:06:ba:5d:12:d8:3c:d5:20:3d:be:f4:
                    02:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:35:2A:EA:24:C8:D1:D8:61:F5:70:96:00:8A:E7:59:43:39:A7:44
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/OjUq6iTI0dhh9XCWAIrnWUM5p0Q.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:5c:46:9b:2c:c9:95:8d:37:3a:6f:48:f3:69:9d:e9:c6:41:
         33:99:36:b3:84:2f:d8:b7:8e:ff:9f:6e:c2:90:bb:69:5e:56:
         c8:3f:51:89:bf:20:f4:0d:8e:5a:38:2a:c8:85:bd:ec:02:70:
         80:c9:e8:24:6b:41:c2:15:17:03:3e:a2:ee:e2:9e:da:99:c0:
         a0:7c:08:2f:c9:39:d6:7b:92:dd:69:dc:ab:a5:20:87:c3:25:
         a4:f7:32:77:fc:90:d1:75:12:c9:03:79:6e:9e:f6:a1:db:a6:
         c1:cc:af:12:7c:ae:c4:67:2c:1c:41:0b:8c:29:b2:dc:d0:7c:
         76:9b:87:d4:96:d3:8a:c7:f0:74:10:16:d9:43:c4:b7:7f:0c:
         06:96:ab:14:a9:24:ce:2f:85:b8:0b:9a:b4:1a:1e:40:58:37:
         b2:39:49:94:0d:2a:e4:76:11:af:8e:dd:04:10:fa:4e:ac:29:
         13:a0:2b:69:96:bb:62:1d:17:fd:98:41:ce:18:7d:4f:8a:b0:
         98:10:b0:06:8c:5c:40:6f:bf:eb:de:49:62:c8:77:26:62:07:
         a4:1b:f3:25:db:06:cb:f2:c3:54:4c:d6:30:ea:dc:0e:71:f7:
         1d:f3:a4:b8:de:bb:18:32:24:ca:fa:01:b4:bb:b2:e6:22:ab:
         47:17:1b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:47 2024 by rpki-client on console-ams.rpki-client.org