Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/5oWmcZI6KLUzDR_rP7QATeJOC24.roa
File:                     5oWmcZI6KLUzDR_rP7QATeJOC24.roa (raw, json)
Hash identifier:          lrq/WFuxrdVwT2y6ZdsPpbfmU1plvMAFWduxEi7r6N0=
Subject key identifier:   E6:85:A6:71:92:3A:28:B5:33:0D:1F:EB:3F:B4:00:4D:E2:4E:0B:6E
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       18E1
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/5oWmcZI6KLUzDR_rP7QATeJOC24.roa
Signing time:             Sat 22 Oct 2022 06:05:50 +0000
ROA not before:           Sat 22 Oct 2022 06:05:50 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24165
IP address blocks:        115.165.192.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6369 (0x18e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Oct 22 06:05:50 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=E685A671923A28B5330D1FEB3FB4004DE24E0B6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:bd:fe:2d:3c:5c:df:fa:c2:f0:9a:f1:4f:ef:
                    16:6e:fe:db:e8:6e:c4:90:e2:d9:74:be:50:27:97:
                    b9:d8:80:e0:09:6d:06:b1:bd:cd:bc:40:a3:de:90:
                    1d:0a:a0:f8:58:a3:9f:2b:fe:38:0a:54:dd:11:dd:
                    6b:6f:2e:6e:6d:b7:04:5f:7d:87:37:0f:16:d1:ab:
                    d2:7d:cb:9c:ef:d4:6f:8b:a1:97:89:f8:0e:ae:21:
                    f8:46:f3:8b:27:02:5e:cc:2f:13:6e:7d:74:77:31:
                    12:0d:cc:7b:8b:47:37:b3:2a:8f:57:45:64:6d:96:
                    48:20:89:ae:82:c4:b7:3e:ea:8a:39:94:b4:38:79:
                    32:fa:10:75:78:e8:33:89:c2:83:1c:4d:c3:76:a5:
                    28:1c:4a:80:b4:26:8c:f9:c7:97:3e:97:12:04:d2:
                    d5:59:b1:a8:6c:f1:96:3a:a1:f4:21:a7:e5:39:7d:
                    1a:4f:9e:3d:e9:61:6d:bf:35:64:45:8c:9c:c2:32:
                    b1:2c:08:ed:9f:57:cc:fa:bd:0e:54:1d:e9:01:bf:
                    4f:42:5b:33:e2:23:b5:56:64:16:4e:d0:61:e9:33:
                    24:3c:fb:e4:60:50:4f:2c:c0:8e:60:db:6c:d1:2e:
                    02:fc:f0:66:3f:57:05:1c:fb:ea:df:17:4b:06:83:
                    9e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:85:A6:71:92:3A:28:B5:33:0D:1F:EB:3F:B4:00:4D:E2:4E:0B:6E
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/5oWmcZI6KLUzDR_rP7QATeJOC24.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.165.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         7d:3f:6f:31:13:48:18:8b:ba:55:db:d1:c6:30:39:80:6f:e8:
         5e:7d:f9:a6:b3:a1:4f:05:6e:ab:c6:79:47:3b:20:c6:77:5a:
         a4:48:d5:04:ea:b7:ce:fc:9e:8a:d3:2f:8c:0f:c9:ee:c3:b4:
         8e:ea:de:10:8b:d5:82:e5:cd:5c:45:3f:81:36:4b:3c:bb:eb:
         cc:07:cb:1c:22:e6:e0:9e:32:da:80:20:45:92:eb:57:18:f0:
         d8:5f:cf:d4:e6:93:58:f2:bb:ac:9c:47:eb:0c:16:e5:45:50:
         0e:00:eb:76:aa:02:11:57:d7:ba:86:52:44:3d:b5:21:76:c0:
         aa:6e:24:5f:18:33:ea:98:b3:19:8d:b0:e5:06:09:95:d1:cd:
         c0:72:6c:78:3e:fe:22:1b:f7:ff:9d:db:a5:1e:36:eb:9a:75:
         76:44:36:64:bd:91:aa:e2:8a:1c:2a:c3:61:c4:ee:d4:f9:4e:
         dd:25:95:74:b2:33:a2:75:77:c2:f4:d6:b9:6c:89:f9:55:04:
         a6:21:51:96:39:19:0b:af:23:17:f5:71:55:80:c5:d6:ae:f1:
         a3:82:61:b9:1a:1c:28:e9:97:36:9b:78:bc:04:b4:fb:c2:24:
         f3:73:b6:82:65:aa:f3:5e:45:ac:04:80:0f:17:09:16:88:88:
         7e:e8:ae:2c
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGOEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjEwMjIw
NjA1NTBaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEU2ODVBNjcxOTIzQTI4
QjUzMzBEMUZFQjNGQjQwMDRERTI0RTBCNkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCjvf4tPFzf+sLwmvFP7xZu/tvobsSQ4tl0vlAnl7nYgOAJbQax
vc28QKPekB0KoPhYo58r/jgKVN0R3WtvLm5ttwRffYc3DxbRq9J9y5zv1G+LoZeJ
+A6uIfhG84snAl7MLxNufXR3MRINzHuLRzezKo9XRWRtlkggia6CxLc+6oo5lLQ4
eTL6EHV46DOJwoMcTcN2pSgcSoC0Joz5x5c+lxIE0tVZsahs8ZY6ofQhp+U5fRpP
nj3pYW2/NWRFjJzCMrEsCO2fV8z6vQ5UHekBv09CWzPiI7VWZBZO0GHpMyQ8++Rg
UE8swI5g22zRLgL88GY/VwUc++rfF0sGg55nAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU5oWmcZI6KLUzDR/rP7QATeJOC24wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzVvV21jWkk2S0xVekRSX3JQ
N1FBVGVKT0MyNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAZz
pcAwDQYJKoZIhvcNAQELBQADggEBAH0/bzETSBiLulXb0cYwOYBv6F59+aazoU8F
bqvGeUc7IMZ3WqRI1QTqt878norTL4wPye7DtI7q3hCL1YLlzVxFP4E2Szy768wH
yxwi5uCeMtqAIEWS61cY8Nhfz9Tmk1jyu6ycR+sMFuVFUA4A63aqAhFX17qGUkQ9
tSF2wKpuJF8YM+qYsxmNsOUGCZXRzcBybHg+/iIb9/+d26UeNuuadXZENmS9kari
ihwqw2HE7tT5Tt0llXSyM6J1d8L01rlsiflVBKYhUZY5GQuvIxf1cVWAxdau8aOC
YbkaHCjplzabeLwEtPvCJPNztoJlqvNeRawEgA8XCRaIiH7oriw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:02 2024 by rpki-client on console-fra.rpki-client.org