Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/pRFw2InB3CcuwyjZfSV8KXauwdw.roa
File:                     pRFw2InB3CcuwyjZfSV8KXauwdw.roa (raw, json)
Hash identifier:          dZlfwj02E+3bJjqvkIrQru621WcRBgHWvhgYUaZwDdY=
Subject key identifier:   A5:11:70:D8:89:C1:DC:27:2E:C3:28:D9:7D:25:7C:29:76:AE:C1:DC
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       131B
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/pRFw2InB3CcuwyjZfSV8KXauwdw.roa
Signing time:             Wed 29 Sep 2021 02:55:23 +0000
ROA not before:           Wed 29 Sep 2021 02:55:23 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24163
IP address blocks:        180.218.245.0/26 maxlen: 26

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4891 (0x131b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:55:23 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=A51170D889C1DC272EC328D97D257C2976AEC1DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:92:65:fd:c7:dc:56:7b:ea:bf:0b:fb:47:71:
                    1f:f2:2a:46:1f:cb:7f:d4:ed:b0:01:fb:5a:17:f4:
                    ba:a9:41:8f:b6:82:66:b9:68:f0:8d:71:2a:52:1d:
                    e7:7f:03:b9:45:85:bc:fb:21:de:64:8e:13:e1:b1:
                    43:af:b0:16:4a:d5:ad:89:fe:dc:8a:d4:b1:28:28:
                    8d:ac:91:ab:33:4a:c5:5b:09:7e:86:70:58:5f:9d:
                    ef:0d:7e:dc:11:a1:df:28:13:60:d5:31:3a:b5:56:
                    41:ff:ef:67:35:fe:4d:8a:f0:a8:bf:00:61:36:eb:
                    df:91:c3:95:80:31:5e:05:85:86:cc:2d:eb:78:fa:
                    a8:1a:90:8d:c4:8d:31:3b:8f:f4:6e:cf:34:d5:16:
                    8e:68:d5:df:8c:e5:d9:ee:98:e0:78:2b:fc:98:70:
                    7c:c3:71:1d:3c:c7:6f:67:7c:fa:b4:8a:2a:50:5d:
                    ca:cc:6a:86:cf:43:e2:03:51:9a:09:da:f2:8a:c0:
                    cb:63:67:20:e9:d9:0b:7f:e1:c2:f8:a2:05:77:b6:
                    b0:0f:ab:ad:e5:2d:c4:e7:f5:62:62:40:29:18:98:
                    5e:43:df:fd:bb:78:32:4a:ea:68:68:36:35:3a:36:
                    77:c3:16:26:b6:b1:7a:9d:f4:2a:f1:00:45:54:6a:
                    27:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:11:70:D8:89:C1:DC:27:2E:C3:28:D9:7D:25:7C:29:76:AE:C1:DC
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/pRFw2InB3CcuwyjZfSV8KXauwdw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.245.0/26

    Signature Algorithm: sha256WithRSAEncryption
         5a:38:68:9d:eb:b9:6f:a4:62:a0:11:83:a1:7b:73:ed:88:e3:
         78:e3:43:92:a4:03:39:e2:12:0b:b7:e8:e9:5c:33:64:be:bf:
         4c:e9:49:7a:80:9c:fa:63:4d:16:a8:f8:f2:7f:d5:1f:5b:de:
         43:54:7a:27:1d:de:29:ff:f5:40:e7:e5:13:9f:74:bf:95:28:
         d9:50:8c:90:32:45:3a:7e:70:c1:75:c2:a3:b4:0c:4e:57:a9:
         09:53:a0:67:07:6b:2e:ab:a5:c0:2d:60:b7:e6:9c:58:8f:ec:
         48:e0:37:01:67:24:d5:9d:9a:77:87:93:87:9a:a8:91:ad:95:
         2f:4a:43:03:23:99:24:59:2d:33:49:0f:df:25:b5:55:c9:0d:
         55:08:a9:cb:5a:83:91:aa:16:db:8a:56:69:3d:06:31:11:62:
         30:55:60:d1:eb:b3:1c:2f:34:15:bb:22:34:21:d6:7d:7c:fd:
         7a:ab:66:f4:c4:41:c8:e6:31:1a:31:44:16:6e:b0:1a:63:ad:
         b8:a6:b3:7e:75:8e:3c:31:52:8c:73:f2:4f:43:c2:4f:67:46:
         27:35:e6:81:9a:79:bd:a0:44:39:23:5b:ed:4c:00:4d:6b:6b:
         d8:3e:63:d2:71:ad:b1:e7:ed:c6:b9:d1:2d:af:d5:b4:cc:4e:
         5e:88:9a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:50 2024 by rpki-client on console-ams.rpki-client.org