Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7isavuBu_DEpQiP-7XWZHJtHs8U.roa
File:                     7isavuBu_DEpQiP-7XWZHJtHs8U.roa (raw, json)
Hash identifier:          AQcYNM/PS0PF0S3lmshor0TGVkDT7gTSGRzWyNT3Dpo=
Subject key identifier:   EE:2B:1A:BE:E0:6E:FC:31:29:42:23:FE:ED:75:99:1C:9B:47:B3:C5
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7isavuBu_DEpQiP-7XWZHJtHs8U.roa
Signing time:             Thu 15 Sep 2022 02:36:28 +0000
ROA not before:           Thu 15 Sep 2022 02:36:28 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24165
IP address blocks:        49.158.220.0/22 maxlen: 22
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5374 (0x14fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 15 02:36:28 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=EE2B1ABEE06EFC31294223FEED75991C9B47B3C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:69:ca:61:1d:86:cc:2d:77:35:37:2a:9b:f8:
                    7c:1b:01:d0:3b:46:4e:09:52:be:a7:44:60:11:8e:
                    07:18:18:53:ce:8f:30:96:79:69:10:18:3a:80:45:
                    ee:f1:f0:6b:f4:fe:83:31:1a:b0:a2:e4:68:bf:54:
                    d7:36:f5:77:ee:90:af:d3:e9:28:0b:84:9b:3d:3f:
                    90:05:c5:79:a1:5d:d3:ca:a4:e9:70:ce:e5:3b:a8:
                    67:a1:fd:4c:ae:9b:05:76:e5:52:29:b6:f6:2e:64:
                    3b:b5:22:9e:61:9e:6b:e6:7d:cc:61:bd:17:cd:a7:
                    f3:46:c6:2c:c3:26:ea:71:5d:53:9e:64:0c:69:7e:
                    58:f0:a8:81:87:1d:2d:52:a1:59:1a:84:47:80:55:
                    c0:6f:1f:b2:0e:b8:91:5a:8c:ea:03:6e:47:92:07:
                    96:c4:39:43:5c:5c:3e:4a:cb:4d:27:58:7c:11:a6:
                    a4:5b:f6:f6:24:b7:5e:57:e8:c3:8f:37:35:37:20:
                    27:2c:22:b6:d8:f1:de:13:85:da:48:9d:ca:98:0b:
                    fd:63:63:fa:01:a2:e7:2c:8d:99:d9:e3:4e:6a:9a:
                    9f:b5:e9:ec:19:1f:32:bd:6f:29:35:73:8f:10:22:
                    b3:0b:23:68:9c:67:b5:c3:57:ee:80:ee:32:fd:7e:
                    77:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:2B:1A:BE:E0:6E:FC:31:29:42:23:FE:ED:75:99:1C:9B:47:B3:C5
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7isavuBu_DEpQiP-7XWZHJtHs8U.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:7d:12:1e:e4:03:b5:81:3c:03:43:93:ef:42:1e:1f:41:bb:
         c6:f1:41:03:2f:74:ff:a4:80:a0:6d:dc:26:ab:bb:e5:b9:ee:
         96:1c:6e:e6:e2:29:53:7f:97:35:29:a5:83:28:46:71:1d:16:
         45:98:12:e4:8a:24:b2:8c:9a:65:ea:7c:3e:d7:34:80:d9:53:
         4e:85:6a:d6:7b:e1:f6:ed:3d:4d:91:2f:95:14:0e:49:6e:21:
         71:a4:e9:07:15:bf:01:53:72:92:20:9e:09:ca:01:ab:8e:cc:
         05:41:b7:14:53:58:6c:d1:4a:a3:05:0a:64:41:27:f7:50:c3:
         10:09:fb:17:74:b5:69:f3:ab:e3:b7:9d:37:c7:5e:49:b5:a0:
         95:57:55:5d:8d:31:7b:c9:12:f8:fb:32:10:3c:8b:42:67:4b:
         53:21:8f:22:78:8f:05:9b:7c:6a:19:51:a5:59:7d:ac:a5:b1:
         0f:1d:98:a9:de:dc:b2:b1:0b:af:fc:76:37:73:29:ad:3c:5c:
         46:53:32:9c:dc:f1:cf:18:42:58:3d:e5:ed:3d:2f:29:7c:41:
         02:d1:e3:b5:eb:d8:95:d7:a9:36:2c:28:44:61:9d:53:9c:50:
         85:66:6b:20:2b:a0:40:ea:4c:56:33:4f:ff:3b:c8:b4:d2:7c:
         47:4a:ce:a5
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFP4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjA5MTUw
MjM2MjhaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEVFMkIxQUJFRTA2RUZD
MzEyOTQyMjNGRUVENzU5OTFDOUI0N0IzQzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDFacphHYbMLXc1Nyqb+HwbAdA7Rk4JUr6nRGARjgcYGFPOjzCW
eWkQGDqARe7x8Gv0/oMxGrCi5Gi/VNc29XfukK/T6SgLhJs9P5AFxXmhXdPKpOlw
zuU7qGeh/UyumwV25VIptvYuZDu1Ip5hnmvmfcxhvRfNp/NGxizDJupxXVOeZAxp
fljwqIGHHS1SoVkahEeAVcBvH7IOuJFajOoDbkeSB5bEOUNcXD5Ky00nWHwRpqRb
9vYkt15X6MOPNzU3ICcsIrbY8d4ThdpIncqYC/1jY/oBoucsjZnZ405qmp+16ewZ
HzK9byk1c48QIrMLI2icZ7XDV+6A7jL9fnelAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU7isavuBu/DEpQiP+7XWZHJtHs8UwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzdpc2F2dUJ1X0RFcFFpUC03
WFdaSEp0SHM4VS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIx
ntwwDQYJKoZIhvcNAQELBQADggEBAIt9Eh7kA7WBPANDk+9CHh9Bu8bxQQMvdP+k
gKBt3Caru+W57pYcbubiKVN/lzUppYMoRnEdFkWYEuSKJLKMmmXqfD7XNIDZU06F
atZ74fbtPU2RL5UUDkluIXGk6QcVvwFTcpIgngnKAauOzAVBtxRTWGzRSqMFCmRB
J/dQwxAJ+xd0tWnzq+O3nTfHXkm1oJVXVV2NMXvJEvj7MhA8i0JnS1MhjyJ4jwWb
fGoZUaVZfaylsQ8dmKne3LKxC6/8djdzKa08XEZTMpzc8c8YQlg95e09Lyl8QQLR
47Xr2JXXqTYsKERhnVOcUIVmayAroEDqTFYzT/87yLTSfEdKzqU=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:39:21 2025 by rpki-client