Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/08u2_tECFlTO2hXyVtwUcotSGGs.roa
File:                     08u2_tECFlTO2hXyVtwUcotSGGs.roa (raw, json)
Hash identifier:          cZDVmHyQskBIg8FgwppAKNtgeFw2+Of0qyX7dtgaPz0=
Subject key identifier:   D3:CB:B6:FE:D1:02:16:54:CE:DA:15:F2:56:DC:14:72:8B:52:18:6B
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       17A2
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/08u2_tECFlTO2hXyVtwUcotSGGs.roa
Signing time:             Sat 22 Oct 2022 05:41:26 +0000
ROA not before:           Sat 22 Oct 2022 05:41:26 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24164
IP address blocks:        180.218.141.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6050 (0x17a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Oct 22 05:41:26 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=D3CBB6FED1021654CEDA15F256DC14728B52186B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:bc:9a:f3:1f:2b:0e:68:be:b3:cf:b6:f6:aa:
                    bd:32:02:57:ae:57:cb:8c:66:63:71:31:de:a9:8a:
                    04:22:f0:61:4b:72:d5:48:22:9d:c8:37:1c:2a:77:
                    31:a2:4d:61:b1:9d:38:32:6f:39:15:75:06:02:50:
                    69:de:3c:6d:23:71:81:59:8e:8c:52:69:9d:89:35:
                    59:3f:ae:98:75:b3:9e:c9:10:84:5f:9a:53:ed:18:
                    6f:b1:1c:da:de:a3:5a:52:01:1c:06:38:76:d3:1b:
                    b8:b6:3d:d4:d8:27:2d:c4:34:dd:7a:5c:5c:fd:f2:
                    65:60:28:e2:3f:e0:69:23:fe:c0:3e:5a:ad:f3:62:
                    14:4a:a5:30:0e:f3:36:fd:6b:fa:52:ea:ed:39:11:
                    78:81:06:c0:55:0f:9b:1c:f8:fd:cd:86:fd:7f:d5:
                    45:80:f0:33:6a:a9:a8:82:19:e8:d5:3e:04:c7:f7:
                    9f:76:bb:0e:2d:3e:4c:49:59:d3:ce:c9:0f:1c:71:
                    ec:e6:3f:1e:ba:90:c2:00:a4:c2:86:18:68:aa:ff:
                    05:16:32:1f:ad:aa:d8:4b:d4:53:7f:6b:de:a3:d2:
                    25:c4:8d:33:af:76:89:c2:83:65:7d:50:d0:89:75:
                    53:c3:6b:7f:6e:cc:09:b1:19:59:1b:57:84:d3:9e:
                    f9:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:CB:B6:FE:D1:02:16:54:CE:DA:15:F2:56:DC:14:72:8B:52:18:6B
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/08u2_tECFlTO2hXyVtwUcotSGGs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:d9:23:0f:97:31:96:d5:d3:ba:45:9a:0a:8f:7f:b4:8b:79:
         1e:8b:8f:70:db:ba:dd:f2:ad:b2:d3:56:f9:bb:92:a5:61:96:
         50:de:5f:ea:49:d9:05:ac:0c:87:7c:3d:ea:68:4c:96:73:f1:
         63:19:b7:34:b8:06:b3:45:26:26:d4:b5:9c:df:83:ef:f1:2b:
         0f:b1:78:ea:43:21:18:5b:39:df:68:5a:76:e4:51:a3:8b:de:
         c7:36:e0:b2:6c:1b:b7:d5:29:c1:c3:23:3b:d3:47:b8:0e:50:
         1d:72:f5:27:8f:87:8f:0b:a8:cd:71:0d:4b:ff:38:bd:43:fc:
         35:53:15:c6:0e:4c:2e:18:96:f8:65:6f:e6:a1:2e:49:83:50:
         92:e0:64:53:a5:3e:13:ad:ff:ea:fb:30:d2:e6:00:4b:c8:35:
         50:cc:d2:54:a6:46:9e:1c:67:39:fd:dd:e6:b0:a8:c6:10:ef:
         c8:2f:65:bf:ff:9c:e0:1b:b4:1d:b5:dd:b4:18:d4:a9:52:20:
         9f:85:a6:83:ec:fc:5a:2f:25:19:a4:cc:89:47:ca:04:b7:65:
         00:40:03:44:bc:55:1e:c3:4b:f5:2a:88:26:44:24:a4:ec:90:
         1b:fe:dd:93:7e:58:65:68:8a:d8:77:08:24:51:e6:6d:7c:5d:
         a6:86:7f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:01 2024 by rpki-client on console-fra.rpki-client.org