Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FO8V331Gur1RzQasi3H3eH8FC_8.roa
File:                     FO8V331Gur1RzQasi3H3eH8FC_8.roa (raw, json)
Hash identifier:          9+QGfGH7ahn34k96FfOsTvWQ2mXpGHMp4Hrm8p5AKAY=
Subject key identifier:   14:EF:15:DF:7D:46:BA:BD:51:CD:06:AC:8B:71:F7:78:7F:05:0B:FF
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FO8V331Gur1RzQasi3H3eH8FC_8.roa
Signing time:             Thu 15 Sep 2022 02:36:03 +0000
ROA not before:           Thu 15 Sep 2022 02:36:03 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9924
IP address blocks:        180.218.246.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5374 (0x14fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 15 02:36:03 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=14EF15DF7D46BABD51CD06AC8B71F7787F050BFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:70:ad:9d:bb:c2:96:e1:b9:fd:a6:21:20:5d:
                    b1:bf:4c:06:8d:da:64:40:33:42:92:0a:13:71:aa:
                    c8:b3:91:67:04:bb:bd:35:21:94:ea:d4:12:a6:36:
                    64:6e:2f:a3:1d:92:28:ba:34:e2:45:d0:94:8d:f7:
                    77:b5:ea:ea:9c:8e:c2:27:7c:32:b6:80:df:ef:3c:
                    f0:4e:e7:8f:40:4a:6c:98:cd:d2:84:e8:f1:ac:98:
                    de:19:01:66:ea:0c:41:d0:9d:ac:17:65:db:2d:6d:
                    be:43:bd:ba:62:87:f2:de:f1:48:6c:1b:b3:55:4c:
                    80:60:bb:52:dc:2f:35:4d:34:69:9c:f5:22:01:53:
                    dd:54:58:3d:15:4c:38:bc:b8:04:ce:3a:4f:86:d9:
                    cc:e0:e5:d3:20:c8:57:f3:9c:64:7a:73:7d:c2:f5:
                    18:c0:91:92:04:a5:7e:0b:50:e4:a7:a4:2d:af:bd:
                    bd:42:24:11:f9:5a:b3:58:2b:cf:ce:54:a5:39:9b:
                    d1:45:fc:9b:b4:1b:dd:2e:86:28:67:6e:cd:83:58:
                    1c:89:ef:f1:be:14:ce:e6:32:3c:69:13:8d:53:dc:
                    d1:c9:36:91:9a:5c:55:82:65:52:ed:ed:43:0a:65:
                    87:14:ba:7b:86:da:77:2d:91:e5:1c:95:91:a5:2d:
                    4c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:EF:15:DF:7D:46:BA:BD:51:CD:06:AC:8B:71:F7:78:7F:05:0B:FF
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FO8V331Gur1RzQasi3H3eH8FC_8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:35:7e:be:ca:33:b4:be:86:6a:33:3e:e1:85:8c:cf:af:4a:
         66:e8:cc:a2:9d:10:1c:80:7d:3f:66:a7:c2:a3:85:bc:95:54:
         ae:f2:2f:b6:28:e9:26:c0:86:f6:6b:be:78:1a:88:08:ed:af:
         32:ae:26:8b:e3:8c:9d:16:21:75:5c:74:25:1e:49:0e:18:cd:
         b7:7d:79:d1:61:87:df:ee:0d:b4:17:03:a3:49:70:5d:f1:a0:
         1d:2c:f8:78:74:39:e2:b2:3f:2b:6a:82:26:65:ea:58:4c:cd:
         94:bd:ea:d7:3c:f8:43:12:ba:13:64:b2:7a:78:34:09:7a:89:
         9e:9c:42:c1:5f:c5:b4:0f:59:49:27:59:1f:ba:6d:24:15:d3:
         99:e3:04:38:5a:23:e9:e9:1c:0e:f7:b9:06:1c:b0:30:55:92:
         23:28:f0:84:b9:cf:9b:c2:90:53:39:39:71:9d:ac:f0:5d:ba:
         cc:79:f2:de:6a:49:e3:c1:3e:eb:de:58:6c:02:9c:4d:0f:9d:
         09:4e:a3:fe:1a:37:2f:f5:29:ea:d8:54:03:64:70:ae:e8:35:
         2d:eb:f0:be:bc:1d:2a:5c:77:1a:c8:b4:03:83:d0:f9:42:bf:
         ca:ec:65:a5:b4:7f:1b:22:0e:67:83:6b:8a:5c:d7:74:0f:78:
         ac:92:b7:28
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFP4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjA5MTUw
MjM2MDNaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDE0RUYxNURGN0Q0NkJB
QkQ1MUNEMDZBQzhCNzFGNzc4N0YwNTBCRkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCocK2du8KW4bn9piEgXbG/TAaN2mRAM0KSChNxqsizkWcEu701
IZTq1BKmNmRuL6Mdkii6NOJF0JSN93e16uqcjsInfDK2gN/vPPBO549ASmyYzdKE
6PGsmN4ZAWbqDEHQnawXZdstbb5Dvbpih/Le8UhsG7NVTIBgu1LcLzVNNGmc9SIB
U91UWD0VTDi8uATOOk+G2czg5dMgyFfznGR6c33C9RjAkZIEpX4LUOSnpC2vvb1C
JBH5WrNYK8/OVKU5m9FF/Ju0G90uhihnbs2DWByJ7/G+FM7mMjxpE41T3NHJNpGa
XFWCZVLt7UMKZYcUunuG2nctkeUclZGlLUwPAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUFO8V331Gur1RzQasi3H3eH8FC/8wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0ZPOFYzMzFHdXIxUnpRYXNp
M0gzZUg4RkNfOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG0
2vYwDQYJKoZIhvcNAQELBQADggEBADs1fr7KM7S+hmozPuGFjM+vSmbozKKdEByA
fT9mp8KjhbyVVK7yL7Yo6SbAhvZrvngaiAjtrzKuJovjjJ0WIXVcdCUeSQ4Yzbd9
edFhh9/uDbQXA6NJcF3xoB0s+Hh0OeKyPytqgiZl6lhMzZS96tc8+EMSuhNksnp4
NAl6iZ6cQsFfxbQPWUknWR+6bSQV05njBDhaI+npHA73uQYcsDBVkiMo8IS5z5vC
kFM5OXGdrPBdusx58t5qSePBPuveWGwCnE0PnQlOo/4aNy/1KerYVANkcK7oNS3r
8L68HSpcdxrItAOD0PlCv8rsZaW0fxsiDmeDa4pc13QPeKyStyg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:02 2024 by rpki-client on console-fra.rpki-client.org