Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Rcy_s4kDnkLwqiGGhgp5FyOgJMY.roa
File:                     Rcy_s4kDnkLwqiGGhgp5FyOgJMY.roa (raw, json)
Hash identifier:          o86c5dXpjL5dn7uhIE5cGI4+IEj6/BpeS6VuZIDvpJ8=
Subject key identifier:   45:CC:BF:B3:89:03:9E:42:F0:AA:21:86:86:0A:79:17:23:A0:24:C6
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Rcy_s4kDnkLwqiGGhgp5FyOgJMY.roa
Signing time:             Thu 15 Sep 2022 02:36:02 +0000
ROA not before:           Thu 15 Sep 2022 02:36:02 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24164
IP address blocks:        180.218.192.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5374 (0x14fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 15 02:36:02 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=45CCBFB389039E42F0AA2186860A791723A024C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fa:ae:9f:f1:34:f6:d7:49:b7:2b:7f:a6:49:
                    7e:46:9e:ff:d2:a0:dd:d4:07:99:1a:ea:59:4f:f9:
                    ce:e0:24:bd:4b:3b:a2:01:88:72:fe:8a:85:de:d9:
                    b6:03:b6:98:82:58:94:f7:70:d8:b1:18:4b:c6:1f:
                    74:60:7c:6a:82:c3:01:c4:b8:9c:35:9e:db:d9:61:
                    60:14:1e:3b:f1:3f:39:b0:7f:5f:a5:ba:cd:e6:71:
                    9f:e7:f0:ea:7e:6c:b3:64:f4:11:b6:d2:20:07:06:
                    63:5e:4c:e0:fa:1c:77:19:8a:b0:2e:7c:71:4b:e2:
                    9e:61:31:ab:6f:c4:85:65:84:b5:8e:74:b4:1a:11:
                    c9:c2:1d:f8:8d:91:da:be:b4:29:17:47:8f:3b:f0:
                    39:41:fb:fc:a5:ad:b2:65:0c:2e:f6:64:5a:78:0a:
                    61:a3:47:5c:4b:33:d9:10:9a:9f:00:36:7d:2c:12:
                    f8:c5:7a:82:94:8b:11:8b:b4:cf:89:a7:13:20:65:
                    a3:36:cf:bb:36:a8:04:7a:6a:d2:c6:6d:62:e4:f5:
                    55:d2:80:13:d6:75:f9:28:52:5f:c5:fd:7f:cb:47:
                    ea:a3:da:87:84:ff:96:80:c4:4d:18:78:7a:55:62:
                    a6:06:54:25:c8:ca:af:b3:73:cc:8e:cf:ee:c4:95:
                    55:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:CC:BF:B3:89:03:9E:42:F0:AA:21:86:86:0A:79:17:23:A0:24:C6
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Rcy_s4kDnkLwqiGGhgp5FyOgJMY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         70:3d:46:0a:c0:02:d7:f0:f2:e9:34:71:4c:02:55:c1:de:98:
         b2:42:e1:fb:a2:8d:9f:45:1e:89:66:a7:01:78:2a:8e:a6:20:
         14:a7:e1:2a:0d:1e:2b:ec:3f:b4:33:8f:df:8d:1c:10:ab:ef:
         88:c0:23:64:0d:9d:01:16:86:e3:c6:2c:de:1f:83:ff:a8:ec:
         c1:dd:ad:70:1c:98:71:24:17:4b:2a:1e:24:7c:4b:d9:08:28:
         f9:f1:70:a5:94:59:30:99:97:bb:f1:fe:fa:0f:db:b9:cd:7e:
         39:84:73:68:77:1b:fb:94:ac:68:f7:b0:ee:5d:94:ff:a8:a2:
         d4:01:d1:1b:58:fe:98:b0:97:31:84:f1:06:4b:3a:c1:59:1c:
         03:ce:e7:8e:45:a3:46:9b:16:21:35:15:28:71:41:04:60:35:
         ad:9c:eb:fe:9f:a6:3d:80:e1:cd:fc:2f:f5:6d:fe:a6:b5:c6:
         50:06:31:f5:82:d1:76:2f:6f:ec:9a:2b:73:27:6e:3f:4a:84:
         d6:9a:cc:97:55:60:11:7d:7c:93:28:d1:e3:c4:64:68:2c:06:
         95:21:5a:f8:9e:01:95:bc:fc:ae:01:66:60:fa:3d:f1:40:7b:
         8f:51:25:3d:c0:ec:90:7e:ad:a3:b3:d0:c9:f3:a0:61:19:8b:
         31:0c:54:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:04 2024 by rpki-client on console-fra.rpki-client.org