Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Eq4jVMqEdskUJSnK8VE92RFA6rM.roa
File:                     Eq4jVMqEdskUJSnK8VE92RFA6rM.roa (raw, json)
Hash identifier:          ZG5XRLDPExnLJiT9ugwcRrRsqYAAIRSTOM8BROV/XaM=
Subject key identifier:   12:AE:23:54:CA:84:76:C9:14:25:29:CA:F1:51:3D:D9:11:40:EA:B3
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Eq4jVMqEdskUJSnK8VE92RFA6rM.roa
Signing time:             Thu 15 Sep 2022 02:36:37 +0000
ROA not before:           Thu 15 Sep 2022 02:36:37 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24164
IP address blocks:        180.218.144.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5374 (0x14fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 15 02:36:37 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=12AE2354CA8476C9142529CAF1513DD91140EAB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:80:81:0e:3e:2d:aa:29:e5:9f:3c:c3:fb:1c:
                    a3:75:fa:2d:ec:86:94:ac:81:0b:dc:4d:a0:9c:b6:
                    a3:b0:6f:8e:79:c7:9d:04:ef:3d:80:b2:2f:e2:48:
                    1c:22:c2:db:a7:b7:90:49:0a:36:a1:25:64:3c:4d:
                    29:e6:e4:a0:e6:26:04:bb:18:5f:45:1e:03:dc:19:
                    2f:21:84:06:8d:4a:2a:5e:73:c8:5a:1b:bb:d5:d0:
                    2f:c7:87:a1:48:47:09:92:37:eb:36:8b:ba:d9:ce:
                    5c:d6:7c:4e:2b:2b:4a:2c:e3:3a:c8:05:21:2e:71:
                    c3:f2:14:46:35:f2:75:ef:e5:5c:99:ad:95:f3:e2:
                    e8:f6:c8:c6:b7:4e:b8:ed:00:0a:f1:a2:21:da:1b:
                    51:69:66:76:cd:8a:cc:0a:fb:f9:d2:96:95:38:61:
                    93:f3:c2:bf:62:f8:c5:f7:0b:6b:0d:e4:e5:99:ee:
                    e4:09:17:86:e8:94:9c:64:e2:18:c2:f6:fd:01:ab:
                    2d:cb:b9:7a:4c:94:60:86:0b:42:e8:02:04:02:99:
                    ae:b0:d6:d7:10:63:f0:94:0a:f9:47:d3:d6:28:a1:
                    3c:ad:e7:37:70:22:de:ee:f4:4f:6c:a5:13:92:90:
                    b2:7a:2a:a4:54:2b:a3:95:b2:14:b6:9a:6f:d6:43:
                    df:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:AE:23:54:CA:84:76:C9:14:25:29:CA:F1:51:3D:D9:11:40:EA:B3
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Eq4jVMqEdskUJSnK8VE92RFA6rM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1b:ce:d1:20:9e:14:6a:bb:bc:30:e9:1e:b0:bc:4f:cf:db:70:
         61:5b:90:cf:6e:43:61:6d:78:c9:c4:34:7b:3c:c0:6a:c1:24:
         b2:37:79:fa:fd:0e:14:15:3b:47:e0:41:82:79:e9:e0:12:18:
         fa:fa:45:b0:70:69:9b:bb:2b:08:c5:53:44:dd:7d:51:92:72:
         ae:19:08:7c:22:2d:b9:c3:e3:f2:3c:43:5b:7e:30:2e:68:1a:
         80:16:e1:02:59:09:7a:65:9c:f3:68:bd:25:03:7d:8b:fc:aa:
         83:d7:2e:45:15:03:f3:7a:53:96:99:fe:dc:42:d6:f2:05:6b:
         d1:fb:71:8a:2c:74:25:18:79:fc:21:3f:3c:b2:1e:93:ef:98:
         d0:f3:41:04:2b:30:6b:96:0f:53:b1:97:d6:2e:b1:38:27:52:
         b3:05:3d:95:3a:9f:16:3e:6e:c2:eb:c7:72:f0:77:df:9b:22:
         fb:44:48:dc:6d:6e:f5:13:d3:e0:ef:06:9a:af:99:c7:7a:42:
         fe:3e:06:1f:b8:f0:07:fd:38:7e:37:de:a0:6d:75:55:19:38:
         09:25:53:a5:1b:56:14:95:0e:13:13:52:70:12:2d:ae:d7:df:
         a2:fb:ff:c1:c4:df:d4:df:00:d6:dd:27:96:3b:3d:3f:3d:fc:
         b1:8a:9d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:46 2024 by rpki-client on console-ams.rpki-client.org