Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ZnR8VTJXsQ77cEu3HApU5xrYUpY.roa
File:                     ZnR8VTJXsQ77cEu3HApU5xrYUpY.roa (raw, json)
Hash identifier:          mSYLHvqlMRO/WwXU3OVw2hvccCHVkztipafB4ZaSGyg=
Subject key identifier:   66:74:7C:55:32:57:B1:0E:FB:70:4B:B7:1C:0A:54:E7:1A:D8:52:96
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       12DF
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ZnR8VTJXsQ77cEu3HApU5xrYUpY.roa
Signing time:             Wed 29 Sep 2021 02:55:06 +0000
ROA not before:           Wed 29 Sep 2021 02:55:06 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24164
IP address blocks:        180.218.0.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4831 (0x12df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:55:06 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=66747C553257B10EFB704BB71C0A54E71AD85296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:40:f7:89:04:aa:9c:87:be:71:1a:b5:90:13:
                    a8:ad:dc:e3:3c:0c:8f:54:88:8d:8e:7c:64:e5:ad:
                    b0:a7:d5:06:12:2b:5b:de:19:8c:4f:a1:f2:5c:94:
                    65:65:30:50:b1:23:96:6d:48:91:75:41:5b:ee:84:
                    ba:d8:1f:d8:90:d5:d1:8d:17:d4:67:43:08:f0:04:
                    01:fd:1b:da:74:7c:f4:4d:b6:69:50:7e:d5:bf:20:
                    c5:5d:c4:91:e6:63:0c:5a:44:ad:79:24:00:05:c7:
                    8a:f1:b2:2a:13:34:81:b4:a7:51:ae:21:2c:c5:8a:
                    90:46:ef:6a:ea:18:00:35:24:14:03:71:2c:2b:81:
                    6d:66:88:4b:20:14:2c:fe:db:e7:81:e0:43:37:1e:
                    3e:41:67:ed:cb:99:4f:39:17:3a:f4:c2:68:31:32:
                    5a:41:6e:d1:6c:43:b5:a9:a8:74:28:3d:f2:0a:94:
                    05:e8:30:0a:1f:e6:54:7c:de:01:dc:0b:a3:99:63:
                    90:cc:13:7c:a7:45:52:4f:59:d3:4a:2f:1c:ec:89:
                    da:ce:f9:c5:f0:a3:3e:13:f9:8f:78:75:b2:21:17:
                    b2:33:30:79:f6:c8:79:59:25:c1:c8:93:d5:53:5b:
                    d4:00:ec:08:5d:2f:9c:f7:22:81:7e:9c:6c:7b:81:
                    c7:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:74:7C:55:32:57:B1:0E:FB:70:4B:B7:1C:0A:54:E7:1A:D8:52:96
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ZnR8VTJXsQ77cEu3HApU5xrYUpY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         90:2c:7d:22:f3:75:bc:8a:73:e7:4e:8d:19:5a:6d:87:7f:a3:
         17:67:44:de:29:70:86:f9:ea:6c:b5:d0:93:93:1e:04:4e:6d:
         8b:39:db:de:76:f6:85:75:3d:b9:f1:74:a3:3a:6d:79:dc:98:
         50:82:10:ca:27:f0:78:1c:63:fa:13:c3:0b:f3:1c:95:04:fd:
         7c:66:e4:47:2b:56:3d:cd:ec:2e:2e:a8:a7:eb:a7:d0:cd:9a:
         bb:81:8a:8c:36:81:0f:c9:af:0c:81:7a:23:fe:80:39:9c:bb:
         16:42:f6:f4:76:0f:30:4c:90:36:d6:69:4c:4c:aa:da:8e:91:
         c8:80:a1:88:d7:f9:10:23:d6:4d:62:3a:8c:15:f3:33:87:25:
         96:ab:1d:db:26:45:af:54:98:9b:15:14:50:3b:d0:78:f2:4a:
         84:82:22:c7:87:7b:5c:3c:c7:e1:f0:c6:1b:5a:2f:2d:27:95:
         2f:a9:b6:20:98:1e:5d:2b:7a:12:bb:8a:ad:b4:6a:18:f7:b1:
         ba:14:d9:0d:68:37:c2:79:53:3f:e7:2c:84:7d:ec:01:e2:e7:
         e3:70:56:b4:77:d8:76:00:53:b5:5f:71:23:e2:7e:51:03:8b:
         af:0c:34:cd:d9:99:f5:8a:bd:85:53:90:f0:1b:5e:15:1c:13:
         35:21:b4:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:04 2024 by rpki-client on console-fra.rpki-client.org