Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/UKmJCaBQgz8iptS8jyOnaJwSggc.roa
File:                     UKmJCaBQgz8iptS8jyOnaJwSggc.roa (raw, json)
Hash identifier:          xWotnnVhHNCHPJ01xHoNMLWEDx56vLkOVwa20qd0+1E=
Subject key identifier:   50:A9:89:09:A0:50:83:3F:22:A6:D4:BC:8F:23:A7:68:9C:12:82:07
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1065
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/UKmJCaBQgz8iptS8jyOnaJwSggc.roa
Signing time:             Sun 07 Feb 2021 12:44:34 +0000
ROA not before:           Sun 07 Feb 2021 12:44:34 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        180.218.184.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4197 (0x1065)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb  7 12:44:34 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=50A98909A050833F22A6D4BC8F23A7689C128207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:27:8c:ff:96:b1:93:ba:e2:3e:85:22:bc:df:
                    8e:42:0c:01:04:57:6c:cb:00:9b:2a:0b:bd:bf:e2:
                    b6:ca:01:e6:71:a5:55:06:70:c4:b9:93:4d:c2:58:
                    69:1d:a5:2e:6d:eb:61:e5:95:b4:b1:dd:7b:3a:e6:
                    86:b6:a2:29:61:7b:d6:e5:0c:51:71:73:d9:d8:e2:
                    78:49:af:b5:b3:36:5a:5f:d2:1f:c7:d7:10:6a:a2:
                    cb:86:e3:0a:e9:ba:0c:20:0c:1c:f4:bb:66:c2:0d:
                    f4:a6:e7:7d:ca:27:0d:d2:bf:7f:c5:a8:c0:8a:0b:
                    b3:18:b0:c2:2a:74:16:fa:ee:ee:e2:58:e6:8d:ff:
                    a5:cc:59:84:a5:d9:08:43:97:f3:02:f7:b7:9e:0e:
                    22:d8:c9:93:7a:8e:5b:c8:45:2d:83:da:f1:e4:fb:
                    58:a7:f9:a9:68:53:fb:2e:89:42:d9:0b:8d:64:b3:
                    b3:08:5d:77:c7:80:95:bf:31:01:0c:8d:d9:a4:86:
                    66:ee:8b:dd:eb:0c:6b:fa:9d:01:6a:db:d6:77:5d:
                    1e:78:c6:e7:06:c4:3a:dc:e2:e2:34:df:98:27:e9:
                    8d:d8:22:ec:32:59:66:25:1b:07:fe:84:e1:7b:49:
                    f5:0f:7e:6b:10:25:4e:22:df:64:01:44:59:ef:d0:
                    d4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:A9:89:09:A0:50:83:3F:22:A6:D4:BC:8F:23:A7:68:9C:12:82:07
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/UKmJCaBQgz8iptS8jyOnaJwSggc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a0:8e:9c:e6:12:76:9e:2d:db:e8:3e:79:2f:66:f7:9f:2c:8d:
         a9:bd:2f:de:23:29:09:52:bf:eb:41:f6:1c:92:ed:86:2f:b6:
         52:7f:c5:ee:4c:1f:b2:88:2f:f4:51:4f:1c:1a:18:fa:fe:6b:
         6d:57:56:b4:39:39:5d:d8:8b:29:5f:a3:b7:fc:8a:1f:78:f0:
         99:b0:93:8c:43:b1:3a:98:b3:06:83:8d:d0:05:6d:8e:99:9c:
         39:90:53:6b:84:bc:d8:27:a7:1a:00:82:82:90:3b:7a:e2:ac:
         f6:4f:a8:00:51:2e:2f:ba:ed:cd:e7:99:89:0a:99:38:a1:59:
         59:b5:8e:a2:30:cc:10:7b:c0:e7:f1:d2:e0:5b:ce:22:47:62:
         d3:f9:29:31:0d:63:2f:0e:3b:bc:53:37:8b:4e:15:65:f3:92:
         79:25:f7:ea:f9:4f:d0:9c:5a:5d:dc:96:f3:89:b3:cf:94:32:
         e4:3e:b9:3e:37:ab:f6:3b:a5:b9:96:dd:d0:85:e5:a3:23:57:
         e8:43:2f:ec:4c:42:9b:4f:e5:e3:af:f9:5b:c9:c2:a9:83:bf:
         5f:5a:ba:df:2f:77:2e:fa:b5:69:e3:04:56:e2:49:12:81:49:
         3b:9c:a1:2a:47:72:ec:a5:17:49:22:ba:a8:43:06:58:57:bb:
         8a:e7:10:99
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICEGUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTAyMDcx
MjQ0MzRaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDUwQTk4OTA5QTA1MDgz
M0YyMkE2RDRCQzhGMjNBNzY4OUMxMjgyMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDAJ4z/lrGTuuI+hSK8345CDAEEV2zLAJsqC72/4rbKAeZxpVUG
cMS5k03CWGkdpS5t62HllbSx3Xs65oa2oilhe9blDFFxc9nY4nhJr7WzNlpf0h/H
1xBqosuG4wrpugwgDBz0u2bCDfSm533KJw3Sv3/FqMCKC7MYsMIqdBb67u7iWOaN
/6XMWYSl2QhDl/MC97eeDiLYyZN6jlvIRS2D2vHk+1in+aloU/suiULZC41ks7MI
XXfHgJW/MQEMjdmkhmbui93rDGv6nQFq29Z3XR54xucGxDrc4uI035gn6Y3YIuwy
WWYlGwf+hOF7SfUPfmsQJU4i32QBRFnv0NQtAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUUKmJCaBQgz8iptS8jyOnaJwSggcwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1VLbUpDYUJRZ3o4aXB0Uzhq
eU9uYUp3U2dnYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0
2rgwDQYJKoZIhvcNAQELBQADggEBAKCOnOYSdp4t2+g+eS9m958sjam9L94jKQlS
v+tB9hyS7YYvtlJ/xe5MH7KIL/RRTxwaGPr+a21XVrQ5OV3Yiylfo7f8ih948Jmw
k4xDsTqYswaDjdAFbY6ZnDmQU2uEvNgnpxoAgoKQO3rirPZPqABRLi+67c3nmYkK
mTihWVm1jqIwzBB7wOfx0uBbziJHYtP5KTENYy8OO7xTN4tOFWXzknkl9+r5T9Cc
Wl3clvOJs8+UMuQ+uT43q/Y7pbmW3dCF5aMjV+hDL+xMQptP5eOv+VvJwqmDv19a
ut8vdy76tWnjBFbiSRKBSTucoSpHcuylF0kiuqhDBlhXu4rnEJk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:04 2024 by rpki-client on console-fra.rpki-client.org