Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/I2K8vavjc5gj5r6adH-2y6ffJj4.roa
File:                     I2K8vavjc5gj5r6adH-2y6ffJj4.roa (raw, json)
Hash identifier:          2IM3rJPtye8zljbbVNQqT/TqIvqHZHEJijPSFViAv4Y=
Subject key identifier:   23:62:BC:BD:AB:E3:73:98:23:E6:BE:9A:74:7F:B6:CB:A7:DF:26:3E
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       190C
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/I2K8vavjc5gj5r6adH-2y6ffJj4.roa
Signing time:             Sat 22 Oct 2022 06:06:02 +0000
ROA not before:           Sat 22 Oct 2022 06:06:02 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24164
IP address blocks:        115.165.236.0/22 maxlen: 22
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6412 (0x190c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Oct 22 06:06:02 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=2362BCBDABE3739823E6BE9A747FB6CBA7DF263E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:92:95:b4:27:7d:1c:84:f9:1b:3e:a9:c7:5f:
                    52:81:fd:a9:10:7f:d8:2a:80:da:6e:89:d8:a9:08:
                    43:61:8a:23:97:bd:43:3b:29:c8:f1:cc:fd:00:9e:
                    66:21:c8:9c:1f:fb:17:86:42:34:1e:1a:56:e7:d6:
                    6c:9d:ed:d2:52:f5:80:98:45:98:35:51:40:cb:74:
                    3d:bd:0b:48:98:a0:73:c1:c7:39:a0:dd:8a:17:c3:
                    0f:25:83:0a:1a:00:84:85:0a:41:11:d7:a4:e2:21:
                    d6:ab:bf:26:48:8e:0e:ed:49:15:51:e2:f6:0f:39:
                    a9:e1:a9:e7:7e:18:ba:88:3b:21:91:04:cb:a3:97:
                    56:46:40:83:91:f4:e9:b4:ab:a8:7e:93:a4:eb:11:
                    75:f3:e2:98:31:0e:0e:3c:c9:b0:e2:95:b7:62:fe:
                    cc:68:63:bd:d6:e4:fb:fa:b3:4c:5c:a5:b9:59:f1:
                    89:d3:67:6f:f0:8c:10:2c:94:25:a3:af:5a:36:d1:
                    f9:1c:48:95:2d:de:48:08:9d:f5:02:ee:73:08:e8:
                    4c:29:ac:1b:db:d4:b6:a2:bc:79:42:13:23:ce:29:
                    ad:a0:38:0a:2d:94:ce:55:75:4e:c0:b6:50:cf:d6:
                    8a:e0:9e:c8:94:02:9f:83:53:61:a7:ac:83:61:e1:
                    fd:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:62:BC:BD:AB:E3:73:98:23:E6:BE:9A:74:7F:B6:CB:A7:DF:26:3E
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/I2K8vavjc5gj5r6adH-2y6ffJj4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.165.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:2d:de:45:1e:15:8d:f4:53:6c:3b:92:e2:30:32:dd:01:30:
         61:10:79:2e:33:24:e1:71:1d:af:51:04:9e:05:6f:98:1f:fd:
         7c:4a:eb:05:cb:61:61:9d:5e:39:25:2c:8d:c9:c6:b3:9c:7b:
         fa:32:a3:16:f5:0b:11:36:76:8d:d2:91:ab:d9:a9:59:24:52:
         61:f2:b6:df:3a:45:47:34:f6:a7:c1:a0:47:26:a4:70:25:f9:
         1c:ab:e8:89:6f:17:d3:23:e2:ba:f2:f2:4c:07:e8:58:5b:46:
         b9:98:0f:19:1f:4e:9d:7f:8c:a3:a4:c7:8e:e3:8a:72:76:58:
         96:b1:56:6e:a2:c6:0a:bf:02:d9:8b:5d:1a:37:c5:5c:b0:08:
         77:be:81:1b:99:6f:38:30:8b:b6:d9:d9:9c:fc:61:d7:c3:93:
         42:82:f8:be:c8:51:e3:b8:df:b3:fb:57:c1:eb:9c:a4:9f:9b:
         42:20:33:fd:92:a2:fc:7d:55:84:60:f5:1f:77:71:1f:56:91:
         ce:a2:69:74:aa:50:47:ee:d4:cd:78:6d:de:db:6f:b8:9b:20:
         55:db:99:f1:ad:ea:4d:9d:fb:88:95:b4:ac:1d:ff:b0:9f:6a:
         f3:a4:d7:13:51:be:65:9f:9f:d3:c4:3a:df:8e:46:7a:26:02:
         bd:44:a3:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:53:47 2025 by rpki-client