Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-B9cNLvWwRwdtS7b_8ftrmon9Kc.roa
File:                     -B9cNLvWwRwdtS7b_8ftrmon9Kc.roa (raw, json)
Hash identifier:          eMGZbjTfsjJK/pQstFxWxROg4fdufjbHqDf1ZNlVrm0=
Subject key identifier:   F8:1F:5C:34:BB:D6:C1:1C:1D:B5:2E:DB:FF:C7:ED:AE:6A:27:F4:A7
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       104D
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-B9cNLvWwRwdtS7b_8ftrmon9Kc.roa
Signing time:             Sun 07 Feb 2021 12:44:05 +0000
ROA not before:           Sun 07 Feb 2021 12:44:05 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        180.218.140.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4173 (0x104d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb  7 12:44:05 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=F81F5C34BBD6C11C1DB52EDBFFC7EDAE6A27F4A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:94:22:20:c8:2b:61:e3:93:e0:3e:2a:09:c3:
                    cc:6e:38:ef:c9:53:7e:89:e4:e1:9e:7b:69:3a:f8:
                    0a:f3:bf:98:f5:1f:dd:24:91:29:fb:b4:3c:2a:0f:
                    14:89:dc:65:84:f5:a3:0f:8a:2b:19:49:94:85:4e:
                    47:39:5d:69:7b:a0:02:dc:3d:4a:59:aa:69:23:fe:
                    80:07:b6:0c:0b:c9:b8:cf:a6:25:83:35:ec:72:a4:
                    c0:40:65:89:60:9f:e0:7d:ba:5c:11:6e:81:71:d9:
                    7f:73:95:98:e4:2c:3e:c3:da:e1:3c:5d:62:f3:81:
                    58:16:cd:49:55:3c:f6:70:24:a7:41:05:ec:74:d8:
                    df:98:c7:34:75:97:58:6d:98:75:fc:57:60:88:7e:
                    e0:82:b3:7a:63:5b:fe:8e:de:84:63:35:94:ae:fc:
                    04:28:99:8b:55:02:a6:4b:40:b9:a0:a0:62:14:04:
                    fa:bf:a7:06:cb:79:82:54:15:36:29:f9:e6:44:32:
                    79:7c:b5:ed:81:52:1b:5c:84:a4:ff:e7:7b:80:8e:
                    e1:ba:78:96:72:d2:0e:17:e5:73:e0:6f:e8:69:fe:
                    f1:ff:b7:0e:91:f0:c2:83:5b:97:47:12:05:5c:5d:
                    0f:8c:8e:43:c9:5a:88:84:13:93:a1:bb:81:58:7d:
                    ff:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:1F:5C:34:BB:D6:C1:1C:1D:B5:2E:DB:FF:C7:ED:AE:6A:27:F4:A7
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-B9cNLvWwRwdtS7b_8ftrmon9Kc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:85:30:3f:b7:75:00:d6:92:81:aa:a9:98:03:ed:bc:8f:09:
         ec:45:59:6f:3d:f8:5e:c3:a9:91:18:64:8a:d6:ab:76:cd:f8:
         f4:a4:1d:c8:22:c1:c2:6a:77:ee:3f:2e:6a:60:59:db:ff:3f:
         c3:75:73:ea:1f:fd:a5:3d:ca:99:50:41:b0:2c:b2:c7:74:9f:
         35:d5:a0:09:22:39:02:40:d1:59:46:c9:d2:32:16:1d:31:90:
         c6:7f:28:d1:b0:ce:2c:31:85:14:ee:78:97:57:20:52:c0:79:
         2b:32:ba:4f:5f:1f:9c:22:fa:3c:30:2b:e2:af:43:a9:8e:8c:
         73:ba:28:1e:2b:3b:ee:3c:97:28:97:60:74:11:69:89:b0:9a:
         8d:b9:3c:ac:22:22:3b:dc:b0:85:fb:ab:00:2b:51:ca:d5:53:
         c1:68:af:56:43:8f:76:8a:3b:64:26:13:f7:ce:50:23:cf:f6:
         e6:ac:09:0d:76:fa:1b:22:dc:10:15:36:b0:e9:12:53:22:60:
         99:11:7e:34:f9:af:e8:30:a2:96:d0:ba:f0:8b:1d:fd:75:32:
         3c:47:63:8f:06:30:b6:57:19:6f:9e:e6:ad:ac:81:4d:31:d7:
         11:dc:14:c0:f3:19:ec:f0:60:d0:55:59:6a:05:c7:4d:59:78:
         09:77:12:da
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICEE0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTAyMDcx
MjQ0MDVaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEY4MUY1QzM0QkJENkMx
MUMxREI1MkVEQkZGQzdFREFFNkEyN0Y0QTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDDlCIgyCth45PgPioJw8xuOO/JU36J5OGee2k6+Arzv5j1H90k
kSn7tDwqDxSJ3GWE9aMPiisZSZSFTkc5XWl7oALcPUpZqmkj/oAHtgwLybjPpiWD
NexypMBAZYlgn+B9ulwRboFx2X9zlZjkLD7D2uE8XWLzgVgWzUlVPPZwJKdBBex0
2N+YxzR1l1htmHX8V2CIfuCCs3pjW/6O3oRjNZSu/AQomYtVAqZLQLmgoGIUBPq/
pwbLeYJUFTYp+eZEMnl8te2BUhtchKT/53uAjuG6eJZy0g4X5XPgb+hp/vH/tw6R
8MKDW5dHEgVcXQ+MjkPJWoiEE5Ohu4FYff8XAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU+B9cNLvWwRwdtS7b/8ftrmon9KcwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULy1COWNOTHZXd1J3ZHRTN2Jf
OGZ0cm1vbjlLYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC0
2owwDQYJKoZIhvcNAQELBQADggEBAGiFMD+3dQDWkoGqqZgD7byPCexFWW89+F7D
qZEYZIrWq3bN+PSkHcgiwcJqd+4/LmpgWdv/P8N1c+of/aU9yplQQbAsssd0nzXV
oAkiOQJA0VlGydIyFh0xkMZ/KNGwziwxhRTueJdXIFLAeSsyuk9fH5wi+jwwK+Kv
Q6mOjHO6KB4rO+48lyiXYHQRaYmwmo25PKwiIjvcsIX7qwArUcrVU8For1ZDj3aK
O2QmE/fOUCPP9uasCQ12+hsi3BAVNrDpElMiYJkRfjT5r+gwopbQuvCLHf11MjxH
Y48GMLZXGW+e5q2sgU0x1xHcFMDzGezwYNBVWWoFx01ZeAl3Eto=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:01 2024 by rpki-client on console-fra.rpki-client.org