Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WkRZLJ9a7FbrlEhr00wzgD9g-Xg.roa
File:                     WkRZLJ9a7FbrlEhr00wzgD9g-Xg.roa (raw, json)
Hash identifier:          fHGcT+x8n8xUkfc/Oyn6N+zpQalu2Y//ZgebCy3Vhug=
Subject key identifier:   5A:44:59:2C:9F:5A:EC:56:EB:94:48:6B:D3:4C:33:80:3F:60:F9:78
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       193C
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WkRZLJ9a7FbrlEhr00wzgD9g-Xg.roa
Signing time:             Sat 22 Oct 2022 06:06:16 +0000
ROA not before:           Sat 22 Oct 2022 06:06:16 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24164
IP address blocks:        180.218.92.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6460 (0x193c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Oct 22 06:06:16 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=5A44592C9F5AEC56EB94486BD34C33803F60F978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:80:82:d5:91:aa:61:05:53:83:ab:f2:59:92:
                    fc:fc:f5:d9:c1:9d:b4:cd:bd:dd:0c:56:4f:3b:cc:
                    41:b0:5c:24:e2:45:59:c4:97:cf:54:f7:15:d8:e8:
                    3b:6a:11:8f:80:ba:48:7d:61:eb:aa:94:d6:de:ce:
                    e3:47:01:da:15:d0:90:23:30:61:3c:71:88:30:6e:
                    df:bd:a9:fe:3b:16:ec:6a:1b:49:64:53:15:da:e3:
                    bd:56:e4:f3:86:0e:92:a4:93:6f:c4:8d:75:c4:d4:
                    77:73:6f:91:3f:10:0a:4d:23:ed:e7:96:43:44:21:
                    d5:05:9e:2e:ab:36:7f:a6:e9:b5:5e:73:8c:6c:e4:
                    d7:2a:6c:89:cb:73:89:c8:06:05:7e:f8:b7:dc:d7:
                    3c:3c:8f:82:34:90:8e:ca:a4:68:10:f8:ea:d2:ea:
                    b1:31:3e:ff:9b:23:59:21:92:ab:47:b2:df:22:72:
                    22:9e:59:16:2f:9f:b3:d0:08:bb:a3:0b:c6:28:c2:
                    3e:36:ed:21:f8:74:b7:7d:1a:60:3c:5e:ed:a6:a7:
                    5c:7a:96:05:73:6a:06:15:53:dd:c2:44:cb:76:af:
                    34:24:e4:a4:26:82:c8:fb:f1:06:3d:d3:47:4a:14:
                    71:9c:71:aa:85:da:9e:2f:c3:73:58:19:03:d8:27:
                    e7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:44:59:2C:9F:5A:EC:56:EB:94:48:6B:D3:4C:33:80:3F:60:F9:78
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WkRZLJ9a7FbrlEhr00wzgD9g-Xg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:64:19:24:0b:23:43:30:f0:79:f5:ee:ee:a9:17:cc:92:04:
         4a:77:d8:ad:90:23:56:23:17:d2:05:75:94:4a:1c:3f:a9:d6:
         4b:0a:6a:a9:70:6d:e8:1e:c2:b3:cd:e5:c0:e5:ee:90:66:94:
         97:4d:c2:06:55:89:01:ef:f8:71:e2:b0:84:29:7f:10:8b:7b:
         15:fd:21:72:61:7c:ca:71:40:de:5c:de:c4:a5:a3:6c:f5:32:
         e6:71:d5:49:55:4a:af:8b:e8:20:20:75:4b:8b:42:86:6d:0a:
         68:ef:03:ee:fc:e3:58:12:2a:06:ac:63:64:db:74:87:24:61:
         76:17:f0:58:cf:63:8b:15:ff:0a:28:03:82:a3:72:a5:b0:d3:
         e0:bc:4c:5b:82:2d:41:d0:76:0f:31:e9:08:0a:54:c0:66:00:
         13:43:48:b4:85:ac:bd:d3:3c:3a:07:38:a0:41:94:fc:a5:ab:
         67:0b:53:b0:c0:04:c6:3f:cd:03:ba:c9:9c:e5:04:97:46:13:
         47:de:0d:57:e0:37:dd:37:80:ce:20:6f:28:ce:1e:ae:27:07:
         33:95:40:10:a9:92:0c:45:6d:60:9f:63:cd:ff:3f:58:03:55:
         57:fd:14:23:36:08:56:eb:cf:f5:3a:db:7c:e6:6f:29:1f:86:
         0e:9a:0d:31
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGTwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjEwMjIw
NjA2MTZaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDVBNDQ1OTJDOUY1QUVD
NTZFQjk0NDg2QkQzNEMzMzgwM0Y2MEY5NzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC6gILVkaphBVODq/JZkvz89dnBnbTNvd0MVk87zEGwXCTiRVnE
l89U9xXY6DtqEY+Aukh9YeuqlNbezuNHAdoV0JAjMGE8cYgwbt+9qf47FuxqG0lk
UxXa471W5POGDpKkk2/EjXXE1Hdzb5E/EApNI+3nlkNEIdUFni6rNn+m6bVec4xs
5NcqbInLc4nIBgV++Lfc1zw8j4I0kI7KpGgQ+OrS6rExPv+bI1khkqtHst8iciKe
WRYvn7PQCLujC8Yowj427SH4dLd9GmA8Xu2mp1x6lgVzagYVU93CRMt2rzQk5KQm
gsj78QY900dKFHGccaqF2p4vw3NYGQPYJ+fjAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUWkRZLJ9a7FbrlEhr00wzgD9g+XgwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1drUlpMSjlhN0ZicmxFaHIw
MHd6Z0Q5Zy1YZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0
2lwwDQYJKoZIhvcNAQELBQADggEBACtkGSQLI0Mw8Hn17u6pF8ySBEp32K2QI1Yj
F9IFdZRKHD+p1ksKaqlwbegewrPN5cDl7pBmlJdNwgZViQHv+HHisIQpfxCLexX9
IXJhfMpxQN5c3sSlo2z1MuZx1UlVSq+L6CAgdUuLQoZtCmjvA+7841gSKgasY2Tb
dIckYXYX8FjPY4sV/wooA4KjcqWw0+C8TFuCLUHQdg8x6QgKVMBmABNDSLSFrL3T
PDoHOKBBlPylq2cLU7DABMY/zQO6yZzlBJdGE0feDVfgN903gM4gbyjOHq4nBzOV
QBCpkgxFbWCfY83/P1gDVVf9FCM2CFbrz/U623zmbykfhg6aDTE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:47 2024 by rpki-client on console-ams.rpki-client.org