Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/E9MkWVbPRc4ffJVd02ndwKlEbE0.roa
File:                     E9MkWVbPRc4ffJVd02ndwKlEbE0.roa (raw, json)
Hash identifier:          oZvreA78PKk/QHi+UfLnA4fqWhDKZ3tot9tsH6Hd3fE=
Subject key identifier:   13:D3:24:59:56:CF:45:CE:1F:7C:95:5D:D3:69:DD:C0:A9:44:6C:4D
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1937
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/E9MkWVbPRc4ffJVd02ndwKlEbE0.roa
Signing time:             Sat 22 Oct 2022 06:06:14 +0000
ROA not before:           Sat 22 Oct 2022 06:06:14 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24164
IP address blocks:        180.218.128.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6455 (0x1937)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Oct 22 06:06:14 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=13D3245956CF45CE1F7C955DD369DDC0A9446C4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:82:0f:d8:e2:c4:c3:0f:48:ab:85:89:ec:b0:
                    c5:58:6a:6f:01:47:f2:b6:26:b8:f7:55:15:c9:f4:
                    55:5e:b4:f7:1a:a3:7b:20:90:af:d6:a3:a6:9f:b5:
                    cc:96:e7:42:6c:08:67:04:6c:f4:96:a8:b7:0d:0b:
                    76:6c:2c:73:6b:43:e1:7f:14:46:ce:25:bd:94:f7:
                    32:91:6f:c5:2a:bb:84:12:7b:0d:84:af:5e:63:20:
                    ff:c2:71:82:51:91:d4:89:ff:e0:83:97:3f:53:64:
                    d2:32:86:10:c3:58:2e:d2:1b:e3:64:25:a3:d4:5a:
                    db:68:fa:ec:d6:b9:21:38:23:f4:c2:11:b7:d5:0c:
                    82:12:6e:a0:15:c2:b1:7a:18:ee:cb:13:7d:54:c7:
                    9f:fa:44:13:8d:45:ca:c2:10:f0:41:60:1a:4a:6a:
                    1d:fb:5d:77:ee:2e:d8:bd:b2:99:96:a8:8d:aa:13:
                    a6:eb:31:4d:16:93:2a:2c:a9:34:0e:3b:6c:2b:f7:
                    24:59:39:e8:60:35:b1:73:92:a4:16:f0:33:ed:2f:
                    bf:4b:76:d8:56:51:d7:37:97:c3:81:e1:18:2a:7f:
                    6d:2f:8c:71:d3:3e:3f:62:e8:bd:30:91:5a:cd:d3:
                    0d:97:53:92:a9:9a:61:e1:e8:76:87:24:04:05:86:
                    84:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:D3:24:59:56:CF:45:CE:1F:7C:95:5D:D3:69:DD:C0:A9:44:6C:4D
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/E9MkWVbPRc4ffJVd02ndwKlEbE0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         3c:34:90:0e:8a:0f:b4:6a:24:b7:47:05:07:f7:7f:79:33:e9:
         32:fb:c5:1b:2a:4e:36:80:2f:7a:d1:ca:f0:d6:05:42:01:dd:
         3c:f3:f9:fe:cf:86:c5:7e:09:5b:fa:5c:03:af:97:76:6b:8c:
         64:e5:2d:25:79:cd:75:7f:9d:0b:e7:c9:05:94:f7:fa:28:02:
         33:af:02:dc:74:0e:9a:c4:8e:d8:89:73:40:bc:00:5b:bb:03:
         28:cf:ad:a1:15:2e:3f:71:18:43:27:f3:3d:e6:3c:d3:d4:7e:
         54:6e:d4:52:d7:3a:c0:19:13:72:bd:39:41:09:c9:13:dd:62:
         7e:48:9b:fc:46:cd:4e:0c:84:1e:68:e2:c6:03:d4:10:ef:fe:
         6e:35:26:86:af:66:94:f0:16:51:51:01:6e:58:25:ef:8b:c0:
         4a:73:7f:58:cf:6c:f8:03:8f:a4:df:a2:8c:44:c3:46:fa:a7:
         60:d7:1b:11:d0:54:ef:55:7b:18:ea:1a:1e:cb:cd:19:15:f4:
         0a:f5:f2:52:61:2d:f2:24:ef:8b:90:69:52:9e:f9:be:a3:a5:
         21:4a:bd:31:51:e3:5a:a7:47:f1:c6:4a:09:be:c7:14:59:86:
         55:f5:97:6a:1e:79:bf:fd:33:35:87:5e:23:b9:b9:78:72:70:
         b9:89:79:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:45 2024 by rpki-client on console-ams.rpki-client.org