Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/15SlEaAeouzOgG-61-EfLt1m_Nw.roa
File:                     15SlEaAeouzOgG-61-EfLt1m_Nw.roa (raw, json)
Hash identifier:          WShOTgUiG06nRHOQMlroz6uNhRh3zzMf+rv/FTlinZA=
Subject key identifier:   D7:94:A5:11:A0:1E:A2:EC:CE:80:6F:BA:D7:E1:1F:2E:DD:66:FC:DC
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1057
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/15SlEaAeouzOgG-61-EfLt1m_Nw.roa
Signing time:             Sun 07 Feb 2021 12:44:17 +0000
ROA not before:           Sun 07 Feb 2021 12:44:17 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        180.218.152.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4183 (0x1057)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb  7 12:44:17 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=D794A511A01EA2ECCE806FBAD7E11F2EDD66FCDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e3:91:41:6d:62:7e:79:8d:9e:82:b0:ea:32:
                    56:0b:d1:bc:bd:3e:92:f3:9e:18:f4:3e:1e:de:2b:
                    db:d3:dd:32:40:91:0d:86:18:44:2b:e2:bd:12:31:
                    fe:de:57:38:59:2d:6d:45:ae:00:25:2e:16:cb:47:
                    a4:ff:f0:93:ef:57:5c:2e:0a:37:09:92:be:43:cf:
                    6d:03:73:92:8f:02:af:6c:4b:2e:83:77:4b:44:6a:
                    2d:dd:40:2c:86:9b:77:dc:c4:77:32:45:94:05:b4:
                    e9:95:22:c8:68:51:52:ad:b3:58:40:ed:c1:fc:29:
                    e3:cb:78:93:ba:4d:c7:22:69:f4:95:10:ff:4b:25:
                    c3:96:93:72:c8:d9:b7:7f:af:c8:d5:59:b2:38:69:
                    30:08:08:3b:1b:ef:4b:ec:96:26:6b:e1:d9:b2:85:
                    35:39:a0:b5:39:57:47:e5:7d:81:d8:a1:ef:58:c6:
                    52:1e:06:bd:db:33:aa:2c:3e:0e:ad:5a:d5:0c:89:
                    bc:32:ca:63:5a:6d:d3:b8:e2:28:c6:93:ac:0e:47:
                    e1:d5:34:e5:48:25:54:f5:e2:97:c8:40:b3:de:97:
                    79:0e:c1:c6:ed:f9:c0:f6:c0:86:2b:c3:b1:a2:b9:
                    75:3a:f1:a0:de:b8:5f:db:11:d6:bd:62:9d:a6:cf:
                    53:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:94:A5:11:A0:1E:A2:EC:CE:80:6F:BA:D7:E1:1F:2E:DD:66:FC:DC
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/15SlEaAeouzOgG-61-EfLt1m_Nw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:87:2d:55:1c:cb:62:87:5c:2f:13:ca:2f:d7:f0:ff:57:55:
         55:b2:bd:45:1c:51:bc:ff:0e:2f:ff:72:98:2b:9e:ae:d1:41:
         d2:63:97:e1:6a:92:5d:a8:ee:94:20:3e:2a:0d:c2:3d:fa:9d:
         0b:ac:3e:1d:1f:c7:2d:9e:9d:65:4a:7f:f1:d4:64:ec:fc:69:
         ff:62:61:fe:b3:ab:82:9f:db:91:8a:db:cf:da:f9:2d:66:84:
         af:f1:0f:1b:c2:93:f6:f7:46:aa:e8:9e:03:24:af:54:f4:5b:
         93:f5:9d:87:1c:54:4e:14:fc:14:d7:a3:35:45:36:56:9a:25:
         5f:eb:eb:00:e7:57:ff:92:24:5d:af:df:9e:4a:af:c5:1a:bf:
         60:b3:5b:18:f9:a4:21:8d:8a:2c:d6:c1:ba:c8:41:71:a7:da:
         84:17:81:ed:48:c6:9e:b6:0e:da:a5:0f:b9:10:83:24:90:d8:
         a8:27:ed:31:ec:0a:e7:e1:bf:a4:f9:27:57:77:90:b3:35:71:
         fd:99:e2:af:62:7a:92:38:a8:ef:90:ef:82:a9:48:7c:50:6e:
         63:d0:f7:06:16:75:51:10:89:23:05:a5:d7:f6:cc:1d:6a:e9:
         9f:dd:d0:8b:ae:06:29:cc:81:ac:d7:66:fa:d6:79:a7:3f:44:
         80:b0:c5:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:33 2023 by rpki-client on console-ams.rpki-client.org