Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lFODQg2ACFSv0oihpGfv2gdpJyY.roa
File:                     lFODQg2ACFSv0oihpGfv2gdpJyY.roa (raw, json)
Hash identifier:          AK1DV37pWQL9i8tV26hduqMxWjrqdNy82bh5MZUMpmk=
Subject key identifier:   94:53:83:42:0D:80:08:54:AF:D2:88:A1:A4:67:EF:DA:07:69:27:26
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0BAC
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lFODQg2ACFSv0oihpGfv2gdpJyY.roa
Signing time:             Tue 29 Sep 2020 10:08:42 +0000
ROA not before:           Tue 29 Sep 2020 10:08:42 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        180.218.192.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2988 (0xbac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:08:42 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=945383420D800854AFD288A1A467EFDA07692726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8e:d1:1e:42:55:3a:89:d2:74:c6:33:9a:88:
                    b2:eb:83:2a:2c:3c:98:af:c3:e6:63:26:3c:8a:21:
                    de:88:81:62:1d:17:7f:60:ff:a6:bc:59:c2:bf:03:
                    0c:2d:79:c5:f4:34:d9:82:a5:29:04:38:6a:f8:22:
                    1e:1e:52:06:b6:7f:73:07:89:59:77:56:80:e1:51:
                    a6:9c:a5:81:a7:95:b8:c6:a4:e3:6b:87:46:e4:ad:
                    e7:27:86:2e:d0:5b:c5:23:23:75:9c:7e:2d:5f:ae:
                    e0:1c:a9:9a:3b:d0:8d:6a:76:ec:fc:34:65:4c:ca:
                    e8:0b:af:be:9c:f1:03:9b:84:ba:d7:90:e6:4b:4d:
                    65:7b:b6:b5:ca:be:71:f8:34:b4:95:bc:32:6e:69:
                    bf:08:24:4c:05:c6:9d:c8:bb:6d:df:90:e1:d8:93:
                    b9:42:db:13:9a:79:a4:ae:32:d5:c6:17:ec:6d:37:
                    89:12:60:13:cf:eb:9f:53:3c:9f:1f:e2:e3:9d:2c:
                    f0:89:b1:bc:e8:f4:42:3f:ef:5c:16:51:ad:d6:df:
                    b5:64:11:52:73:dc:15:ce:d3:86:da:b1:77:71:53:
                    7c:8c:2f:2a:fb:a3:60:33:4f:ef:bc:51:21:9d:34:
                    5b:a8:b2:3c:3b:3d:de:39:cc:7e:3f:92:d2:53:15:
                    c1:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:53:83:42:0D:80:08:54:AF:D2:88:A1:A4:67:EF:DA:07:69:27:26
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lFODQg2ACFSv0oihpGfv2gdpJyY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         2d:b4:b6:f7:1b:bb:6b:c3:8b:0f:54:12:91:68:de:67:57:b1:
         c1:3c:43:28:ec:79:92:6a:c1:9d:54:22:e2:0f:89:64:7c:18:
         e9:bc:03:71:12:e8:2b:10:4e:74:15:4c:ab:3a:86:12:48:ae:
         82:11:62:fd:da:13:c7:80:33:5a:26:4e:3a:a4:7c:ff:6b:0d:
         d1:dc:6d:c0:d1:48:95:8c:6f:54:de:28:99:8e:84:50:ad:f8:
         96:31:76:98:42:1f:ec:0a:bc:74:fe:1c:82:14:0b:43:b1:d1:
         e1:a7:81:a7:c2:e7:80:1c:47:c8:de:64:23:7a:8e:e9:93:f0:
         35:0e:b6:79:5a:f9:57:6b:bb:31:49:f8:17:ba:20:a6:ae:8e:
         e7:87:ae:d6:6a:b3:66:85:96:3c:5f:91:16:b3:cf:f2:ff:aa:
         cf:e8:14:0d:b4:88:25:2c:08:f8:27:4d:1d:10:19:16:69:54:
         db:47:53:34:a7:78:80:18:82:cb:34:6f:99:c3:5e:43:d1:52:
         8a:8d:33:db:39:96:2a:01:13:3b:7a:79:94:4f:63:60:e1:8a:
         5f:d9:2c:b9:f2:32:d2:3a:e0:53:ee:8b:25:07:0f:59:dd:1c:
         fe:b7:40:1d:3a:f6:3b:0e:2c:b6:55:13:4a:85:5c:2b:60:7b:
         fc:e1:0a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:49 2024 by rpki-client on console-ams.rpki-client.org