Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/0Yqs0cADZmW96W19HkD-cXEq09E.roa
File:                     0Yqs0cADZmW96W19HkD-cXEq09E.roa (raw, json)
Hash identifier:          CfN1YaMHnn14FOuoYC+NVRgoVbKv55uDZ+cwAiwNJBk=
Subject key identifier:   D1:8A:AC:D1:C0:03:66:65:BD:E9:6D:7D:1E:40:FE:71:71:2A:D3:D1
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1913
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/0Yqs0cADZmW96W19HkD-cXEq09E.roa
Signing time:             Sat 22 Oct 2022 06:06:04 +0000
ROA not before:           Sat 22 Oct 2022 06:06:04 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24164
IP address blocks:        49.158.145.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6419 (0x1913)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Oct 22 06:06:04 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=D18AACD1C0036665BDE96D7D1E40FE71712AD3D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e9:7a:61:5c:19:d6:db:23:94:24:9f:36:64:
                    fd:73:f9:29:cb:d8:45:36:35:8c:a5:67:60:ca:0b:
                    b6:47:12:e7:0f:2a:82:17:12:6c:3f:86:e5:23:e2:
                    1f:cb:0c:a3:f2:61:45:2f:51:1a:2e:51:56:c1:b2:
                    00:48:42:ec:cb:14:91:5f:31:eb:f2:c5:bc:d8:fd:
                    aa:4e:26:a2:0d:45:07:c1:83:ec:db:e5:6d:a7:57:
                    77:04:fa:83:ab:ce:b7:13:c6:b3:b6:8e:6f:80:85:
                    c8:6b:db:1e:8c:d2:37:cb:09:2a:a2:96:76:65:67:
                    75:6e:68:4f:70:27:dc:0e:22:61:27:22:74:5b:65:
                    17:9f:ca:82:fa:7c:e1:2f:46:7f:c6:2d:40:3e:f5:
                    70:54:b4:6c:82:ae:ad:fd:57:47:e6:97:a7:09:ce:
                    77:9d:09:c9:c2:94:7b:e5:25:6b:99:f4:91:2e:03:
                    63:ae:6e:c7:48:24:ad:77:11:3b:43:02:24:47:d1:
                    04:82:b5:32:80:3f:48:73:42:77:84:f1:98:f5:32:
                    98:ec:93:f2:ad:7e:38:4d:2a:f1:65:50:bb:ca:fe:
                    67:76:80:76:47:0c:a5:a0:62:12:74:a9:ba:4c:4a:
                    17:9d:82:a0:71:ec:84:e7:b3:7d:9a:1c:ee:22:23:
                    78:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:8A:AC:D1:C0:03:66:65:BD:E9:6D:7D:1E:40:FE:71:71:2A:D3:D1
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/0Yqs0cADZmW96W19HkD-cXEq09E.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:53:56:59:ef:17:58:e1:40:5a:df:24:16:68:79:ea:15:89:
         19:36:a2:a7:e8:bb:6b:9c:8e:5b:e2:8d:1a:c1:ea:f9:78:8f:
         74:87:e4:cb:03:c7:c9:10:1d:ee:bf:9c:38:e2:9f:b3:fc:86:
         3f:4d:54:07:dd:ee:9c:83:c2:22:c4:e3:45:97:4d:b8:18:35:
         a1:6c:40:29:d1:dc:5a:66:e5:e5:01:2b:89:c2:72:08:5c:dc:
         ce:6d:60:36:74:4b:70:d4:f2:4b:ff:6f:aa:00:e5:48:1c:04:
         b4:3a:7a:ba:8b:41:ed:fd:55:78:5e:8e:2e:92:9f:48:ec:83:
         b5:a2:5b:78:12:a5:6d:09:19:8e:1f:90:52:eb:50:a1:f4:ab:
         1a:1b:66:7a:e0:6e:5c:2e:87:9a:08:f7:22:d5:21:43:67:3e:
         1d:73:4a:83:0b:12:c9:f2:16:7c:7b:0b:83:6a:e2:0f:23:66:
         60:2c:87:76:13:83:0a:79:5c:94:a9:63:32:0d:f5:ed:6c:9a:
         f5:18:06:b5:3e:bb:2a:03:6d:1c:84:20:89:8c:df:c1:0e:14:
         07:6c:11:64:e4:91:c6:67:96:12:7b:4c:d2:fe:0e:d0:39:11:
         90:e4:27:3c:33:95:d2:e2:73:4f:5e:67:b3:95:a6:e7:18:f0:
         32:e2:0f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:01 2024 by rpki-client on console-fra.rpki-client.org