Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/F6kxODxc2JOs1MWgO9Wt7le1aXI.roa
File:                     F6kxODxc2JOs1MWgO9Wt7le1aXI.roa (raw, json)
Hash identifier:          LVh5iZKuiCgVo50VWFMtcoxCJyRkz9lnJGKu/t7QPeU=
Subject key identifier:   17:A9:31:38:3C:5C:D8:93:AC:D4:C5:A0:3B:D5:AD:EE:57:B5:69:72
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1946
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/F6kxODxc2JOs1MWgO9Wt7le1aXI.roa
Signing time:             Sat 22 Oct 2022 06:06:18 +0000
ROA not before:           Sat 22 Oct 2022 06:06:18 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24164
IP address blocks:        180.218.84.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6470 (0x1946)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Oct 22 06:06:18 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=17A931383C5CD893ACD4C5A03BD5ADEE57B56972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:28:86:24:e8:2d:1d:66:b6:28:4b:81:ab:17:
                    c4:25:e8:41:7d:0a:88:f1:54:3a:72:a8:4f:6f:5a:
                    66:d8:1b:cb:d6:96:47:2c:b3:c1:64:26:9b:c6:0b:
                    33:08:af:c7:c2:ca:0f:12:04:63:ed:18:a9:ed:04:
                    a6:10:8b:fc:01:78:b4:9f:24:4d:0f:2c:31:5b:22:
                    b7:23:14:87:d4:cf:03:a7:61:45:43:43:ae:3f:89:
                    39:48:fd:58:db:8c:59:e4:88:90:66:f0:1e:35:eb:
                    39:c8:79:a9:70:5a:e6:20:04:65:07:a3:db:48:02:
                    b5:b2:e5:31:da:aa:a8:0e:04:c7:a4:0e:9f:20:bb:
                    23:52:cb:a2:3b:6b:d0:d9:13:a0:92:41:1e:53:c6:
                    16:44:e8:c7:89:25:6b:1c:22:60:54:c6:de:69:6b:
                    79:c7:e2:8c:6e:e6:b5:82:93:45:33:12:d9:bd:e1:
                    00:0f:ad:9c:ea:cf:24:5e:e2:d5:36:d3:00:6d:3f:
                    dc:bf:ac:5d:c0:38:e6:62:41:6e:b5:2c:c1:8b:49:
                    0c:da:d5:b3:47:46:72:68:05:c0:b6:9b:d1:13:e2:
                    ba:24:0c:30:cd:48:c7:2b:43:e9:e2:a7:88:c0:c9:
                    93:d2:b4:a0:0d:9c:e8:82:5e:7b:35:0f:2e:ea:e4:
                    5c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:A9:31:38:3C:5C:D8:93:AC:D4:C5:A0:3B:D5:AD:EE:57:B5:69:72
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/F6kxODxc2JOs1MWgO9Wt7le1aXI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:67:8a:87:5d:f5:ad:a5:fa:32:ec:b1:f2:76:dc:fc:3b:1d:
         83:bb:23:d4:dd:bc:29:19:f4:73:86:8f:fd:b5:8d:84:1e:b3:
         a8:dc:3d:84:be:d5:09:b4:40:8c:c4:85:20:bb:62:e3:22:8f:
         a1:23:70:62:78:29:0e:9e:34:35:58:c6:8b:24:37:74:f6:55:
         21:88:5e:41:37:6b:65:75:14:bb:cd:1b:9d:89:0f:37:90:70:
         0d:59:ce:96:71:45:db:60:46:ea:e8:7a:fb:26:23:4b:84:d9:
         f0:76:06:3b:89:9d:5a:a1:22:53:03:4b:a3:79:9e:67:b9:c0:
         cd:f7:28:0f:00:70:6f:12:59:5f:ee:74:2b:ed:a2:f4:68:e1:
         ac:ff:3e:39:b8:1b:d3:41:89:84:23:08:b8:ce:86:7f:20:80:
         99:03:0d:66:ae:cd:20:fb:15:b2:98:5a:61:d5:e6:f1:70:63:
         ec:e9:21:c6:37:b9:dc:52:bc:6a:7b:58:85:15:60:b8:5d:e3:
         fd:42:c0:47:95:c5:53:23:22:5a:9d:f1:db:ea:e4:55:72:75:
         34:ca:0e:bc:57:f0:80:7c:d1:b1:c9:88:42:33:25:c8:22:d1:
         7c:1d:09:13:56:59:d2:ef:8d:cb:00:fb:f3:6f:58:c1:e9:38:
         58:b3:9c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:46 2024 by rpki-client on console-ams.rpki-client.org