Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/sUYF3gbIQtDEpQE4oS3mkz9tano.roa
File:                     sUYF3gbIQtDEpQE4oS3mkz9tano.roa (raw, json)
Hash identifier:          MGEvrOwg2KaTqMCPz/OYQ+UzqQuoNI9mFrL2PqeZ6EM=
Subject key identifier:   B1:46:05:DE:06:C8:42:D0:C4:A5:01:38:A1:2D:E6:93:3F:6D:6A:7A
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0B06
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/sUYF3gbIQtDEpQE4oS3mkz9tano.roa
Signing time:             Tue 29 Sep 2020 10:07:55 +0000
ROA not before:           Tue 29 Sep 2020 10:07:55 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        180.218.72.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2822 (0xb06)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:07:55 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=B14605DE06C842D0C4A50138A12DE6933F6D6A7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:06:6a:c6:7c:cd:e4:b0:de:d0:65:e8:32:2f:
                    1e:a9:9f:56:99:3c:43:11:45:48:c1:99:bc:22:2d:
                    55:37:31:80:6b:0e:ef:d7:78:35:50:c3:f2:59:b2:
                    64:7b:24:29:bd:af:09:77:d8:3c:99:2e:32:2b:7a:
                    f5:c5:87:50:78:65:4a:d4:52:34:73:8a:bd:91:ca:
                    fd:36:c3:9a:0f:2a:7f:ef:d8:7f:73:11:10:e1:7f:
                    90:78:93:b2:0a:d5:f3:49:1b:71:49:f0:b3:94:92:
                    c4:2a:99:e3:26:b1:ff:99:d5:2b:81:61:85:60:16:
                    3f:5f:79:db:45:28:03:68:01:73:fc:8f:d4:b2:f1:
                    36:f2:8c:28:7a:fe:f2:3f:16:8e:c5:71:83:49:43:
                    71:1c:08:35:0e:65:0e:e4:45:b6:76:39:53:b9:15:
                    d3:c9:9b:d4:da:40:b8:fb:bd:62:97:25:61:ee:bb:
                    6a:1c:5d:1e:9b:36:c0:06:35:b3:ab:5b:87:d1:09:
                    8b:22:4d:6c:4b:d0:9d:f4:57:f9:b6:cf:15:45:58:
                    90:86:8c:31:7e:a6:07:90:52:e3:26:af:e7:dd:eb:
                    dc:ce:bb:86:b8:74:be:1d:d4:15:06:44:c4:0e:1c:
                    da:16:ab:0f:1a:7d:29:e7:84:3b:6b:43:ee:80:66:
                    0b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:46:05:DE:06:C8:42:D0:C4:A5:01:38:A1:2D:E6:93:3F:6D:6A:7A
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/sUYF3gbIQtDEpQE4oS3mkz9tano.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1e:b1:6d:81:66:83:06:a2:6d:a2:bf:64:74:6e:7c:c0:94:b6:
         e6:3e:8e:e6:05:ad:88:08:fd:d4:0e:87:c2:fc:22:d8:c6:27:
         b5:fc:da:bc:a2:ff:f4:ba:26:c1:01:71:c8:ef:d3:6a:a3:7e:
         dc:c9:ed:96:a9:91:82:83:4c:03:06:8f:f3:f3:39:2a:b3:12:
         a7:b2:2b:b4:a5:94:c5:66:16:43:7c:d8:2b:3c:f1:55:7e:a2:
         30:28:3c:62:25:24:94:50:36:ae:f7:c6:be:68:df:b6:e0:95:
         f6:6e:af:51:e2:22:62:fa:96:f9:2d:42:1b:ca:89:86:51:82:
         b0:6c:e9:e3:3b:bd:49:17:e2:7d:a9:a4:91:27:db:47:0f:90:
         a0:d4:32:d1:70:16:5b:a2:8e:1d:72:fa:48:b1:20:e1:d3:da:
         8b:ca:8c:f9:1f:36:7d:47:7b:46:75:46:d1:03:64:78:a0:11:
         bd:65:f2:5d:63:4d:04:38:ec:66:ce:7f:40:15:0b:42:0a:b6:
         f9:18:b0:21:9b:d9:36:9c:99:62:80:16:c7:be:40:17:81:91:
         49:fd:c2:c4:5e:f6:b6:b2:e8:1f:22:62:fe:e4:48:51:d2:50:
         27:6c:cb:55:83:f1:16:66:30:bd:26:c0:30:22:7f:29:4b:d4:
         8f:79:d5:25
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICCwYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMDA5Mjkx
MDA3NTVaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEIxNDYwNURFMDZDODQy
RDBDNEE1MDEzOEExMkRFNjkzM0Y2RDZBN0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCqBmrGfM3ksN7QZegyLx6pn1aZPEMRRUjBmbwiLVU3MYBrDu/X
eDVQw/JZsmR7JCm9rwl32DyZLjIrevXFh1B4ZUrUUjRzir2Ryv02w5oPKn/v2H9z
ERDhf5B4k7IK1fNJG3FJ8LOUksQqmeMmsf+Z1SuBYYVgFj9fedtFKANoAXP8j9Sy
8TbyjCh6/vI/Fo7FcYNJQ3EcCDUOZQ7kRbZ2OVO5FdPJm9TaQLj7vWKXJWHuu2oc
XR6bNsAGNbOrW4fRCYsiTWxL0J30V/m2zxVFWJCGjDF+pgeQUuMmr+fd69zOu4a4
dL4d1BUGRMQOHNoWqw8afSnnhDtrQ+6AZgtRAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUsUYF3gbIQtDEpQE4oS3mkz9tanowHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3NVWUYzZ2JJUXRERXBRRTRv
UzNta3o5dGFuby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0
2kgwDQYJKoZIhvcNAQELBQADggEBAB6xbYFmgwaibaK/ZHRufMCUtuY+juYFrYgI
/dQOh8L8ItjGJ7X82ryi//S6JsEBccjv02qjftzJ7ZapkYKDTAMGj/PzOSqzEqey
K7SllMVmFkN82Cs88VV+ojAoPGIlJJRQNq73xr5o37bglfZur1HiImL6lvktQhvK
iYZRgrBs6eM7vUkX4n2ppJEn20cPkKDUMtFwFluijh1y+kixIOHT2ovKjPkfNn1H
e0Z1RtEDZHigEb1l8l1jTQQ47GbOf0AVC0IKtvkYsCGb2TacmWKAFse+QBeBkUn9
wsRe9ray6B8iYv7kSFHSUCdsy1WD8RZmML0mwDAifylL1I951SU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:50 2024 by rpki-client on console-ams.rpki-client.org