Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LqXBRGobYe3-vGErQiDTfaYuDSo.roa
File:                     LqXBRGobYe3-vGErQiDTfaYuDSo.roa (raw, json)
Hash identifier:          P5YDXslI4nJrv63Vdjb9ywEtTlYCx3YOY+/ba6h2VWc=
Subject key identifier:   2E:A5:C1:44:6A:1B:61:ED:FE:BC:61:2B:42:20:D3:7D:A6:2E:0D:2A
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LqXBRGobYe3-vGErQiDTfaYuDSo.roa
Signing time:             Thu 15 Sep 2022 02:35:27 +0000
ROA not before:           Thu 15 Sep 2022 02:35:27 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24164
IP address blocks:        180.218.186.0/23 maxlen: 23
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5374 (0x14fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 15 02:35:27 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=2EA5C1446A1B61EDFEBC612B4220D37DA62E0D2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:df:74:0e:73:91:9b:e6:47:af:5e:8d:4f:f4:
                    64:b8:fb:58:c6:1c:7f:ab:12:33:60:ec:af:56:03:
                    2c:65:ab:fb:fd:c9:fc:eb:a7:4e:6f:6f:ac:f0:20:
                    a2:c9:c9:2c:83:de:73:73:bf:ab:52:81:49:99:fd:
                    15:81:cf:17:74:db:0c:85:56:86:25:24:ba:ec:d0:
                    3b:13:83:3d:f0:d5:0b:6e:d3:32:6c:4d:0e:d3:05:
                    ea:9a:22:5f:cc:46:ec:4f:2b:0b:c2:05:b2:38:63:
                    df:3f:e6:fc:5a:f8:48:cb:ca:84:61:fd:7e:f5:86:
                    f8:be:b2:c6:10:d7:2b:fe:68:da:78:cc:8f:99:e1:
                    bb:b3:a1:55:b3:81:e7:81:d2:b0:fc:74:40:dc:7c:
                    d1:32:d6:6b:be:ef:e5:e5:b0:49:d8:0d:19:73:dd:
                    5d:c6:9b:95:b2:a8:d2:69:f0:95:d8:22:38:f5:84:
                    a4:26:f1:5f:d2:57:10:2f:73:ef:89:7d:41:b5:ad:
                    7f:f1:50:3f:02:5e:98:66:1e:8b:37:d4:be:18:21:
                    5c:36:cf:1b:73:49:f2:1c:63:63:3d:1b:cb:b5:b6:
                    1d:b3:b3:3a:e2:f5:c4:dd:d2:e6:8b:e2:e0:d5:32:
                    ba:ba:a8:34:aa:e9:fc:68:66:1f:3b:b6:3c:68:2a:
                    f5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:A5:C1:44:6A:1B:61:ED:FE:BC:61:2B:42:20:D3:7D:A6:2E:0D:2A
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LqXBRGobYe3-vGErQiDTfaYuDSo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         07:29:c1:92:97:e1:13:95:d7:e3:eb:95:b1:a5:4c:5d:94:c6:
         a9:de:85:8d:07:b9:46:08:7c:5f:04:6f:60:95:27:27:fd:93:
         cd:d3:09:6d:6d:52:8e:13:6e:c5:aa:cf:b6:20:ad:1d:cf:82:
         8c:18:6c:cc:8d:2a:a6:ab:9e:a1:f6:25:c8:45:c6:6e:fc:98:
         dd:75:92:e5:eb:ec:36:98:36:ac:be:34:3e:85:51:c8:8e:c1:
         8c:88:4e:f1:3b:28:be:72:92:eb:49:38:05:4a:42:4f:1b:3f:
         ff:33:b9:e4:db:e8:d8:00:9b:b4:f4:f1:63:53:eb:6e:06:14:
         bc:a7:8a:5a:1c:85:a1:d4:a1:b8:be:0c:e0:3d:ec:a2:ce:de:
         49:bd:e2:75:ab:9d:c3:3d:15:d7:7e:77:38:bf:72:c3:3c:8e:
         fe:60:8d:68:93:f5:fd:c6:ba:84:26:0b:ab:1a:bd:df:88:ef:
         1f:4d:46:d9:39:5e:0e:2a:c4:df:db:5f:f0:ab:9f:be:38:73:
         92:9c:7e:85:eb:1d:24:af:cd:a7:77:83:32:48:59:91:f7:4d:
         aa:15:b2:66:06:0e:8c:95:5f:65:9d:18:46:16:7b:44:79:09:
         ee:da:9a:3b:8b:a9:3a:56:6c:f2:92:35:69:22:fc:c1:61:24:
         97:db:4d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:53:40 2025 by rpki-client