Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/5qmegYWFFSl6gztHv9bLSnKNuSs.roa
File:                     5qmegYWFFSl6gztHv9bLSnKNuSs.roa (raw, json)
Hash identifier:          9TAHUnXI3e9vAf75gBh7p3fXJCV8gmTPkGMJQNUmxaE=
Subject key identifier:   E6:A9:9E:81:85:85:15:29:7A:83:3B:47:BF:D6:CB:4A:72:8D:B9:2B
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       124B
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/5qmegYWFFSl6gztHv9bLSnKNuSs.roa
Signing time:             Wed 29 Sep 2021 02:54:25 +0000
ROA not before:           Wed 29 Sep 2021 02:54:25 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24165
IP address blocks:        115.165.216.0/21 maxlen: 21
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4683 (0x124b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:54:25 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=E6A99E81858515297A833B47BFD6CB4A728DB92B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:c2:f2:72:fd:1e:7a:a9:88:a5:70:35:1f:df:
                    70:18:f1:c4:a0:04:6e:1e:32:26:6c:59:92:28:62:
                    36:5a:e2:95:4e:97:b7:f2:02:74:ac:ad:52:33:0e:
                    14:c9:93:68:85:cc:c3:76:5d:a6:3b:55:c0:2b:3b:
                    9d:97:54:cc:d8:10:a5:f9:eb:72:f9:2f:f0:a6:17:
                    e1:dd:0a:90:52:d3:11:51:f5:04:82:54:f5:bc:74:
                    40:58:66:a5:24:0b:01:30:46:15:bd:b8:e6:97:90:
                    f9:f5:b2:b0:42:c0:32:27:b4:61:d6:e2:20:58:69:
                    fd:c6:13:16:b3:b5:9c:19:c4:34:a5:7f:b4:4a:a0:
                    0c:b6:61:a5:69:5e:33:69:fb:d3:af:34:ca:bf:d1:
                    2d:1b:52:53:4d:1e:62:8a:0d:da:75:4d:56:53:cd:
                    84:0f:06:40:6e:5a:ff:29:7b:02:d0:7f:6e:89:94:
                    9c:5a:71:9f:9c:40:5d:bd:f7:79:ac:4f:f2:e3:a1:
                    b3:b3:b4:d8:ae:6e:1e:5b:0a:a7:30:6e:e7:a4:74:
                    e1:48:fa:2f:e3:79:a4:4b:a9:7e:a4:da:4c:dd:e6:
                    6e:7d:72:eb:43:9a:8d:4f:08:70:ac:6a:04:4d:61:
                    17:77:8f:8e:1f:e4:7b:9c:3b:26:c0:c1:0a:0a:26:
                    6b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:A9:9E:81:85:85:15:29:7A:83:3B:47:BF:D6:CB:4A:72:8D:B9:2B
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/5qmegYWFFSl6gztHv9bLSnKNuSs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.165.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5a:b9:0f:4f:42:f5:7c:3f:68:a6:78:38:70:56:e7:6b:7a:38:
         b5:23:36:0d:4d:84:a1:ff:4d:3e:1f:89:9c:e4:d0:81:28:77:
         ea:f2:48:b6:78:a0:3d:1a:57:4d:ce:0b:ac:6a:88:27:d2:86:
         b8:21:a2:37:41:d4:4a:df:25:3e:ad:85:e3:fa:9f:84:c8:b2:
         e0:d7:39:a7:10:36:b8:dd:b2:d8:15:6c:69:e9:94:7d:0d:c1:
         71:f7:f7:14:51:f9:48:c2:90:0d:54:ac:c4:c6:7f:03:d4:ed:
         a1:53:0a:9c:45:a9:8f:27:aa:cc:40:27:65:8d:5f:8e:32:2f:
         9a:f5:0e:f2:83:ed:dc:4b:80:4f:42:d5:f5:c7:bc:69:bd:87:
         b4:e5:2e:02:71:66:74:c4:a4:37:27:82:7a:41:f5:6d:20:e1:
         64:7d:1e:8e:03:50:98:e2:93:a1:e5:43:b0:a9:93:34:cd:d8:
         cd:bb:a3:43:67:37:f6:92:ad:97:2c:d6:ab:62:fd:d7:cf:c4:
         7e:ac:c1:e3:f0:86:6b:ae:5c:7d:0c:c6:c8:78:e2:2c:40:73:
         0a:72:1e:31:cf:64:4b:93:ec:88:8b:cd:b3:45:39:79:03:b0:
         c6:8c:70:70:d1:1e:c7:cf:fa:3d:f8:b7:3b:26:c3:5d:f5:32:
         b1:8c:6f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:02:02 2025 by rpki-client