Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/TjblVS0N8iFAM3Iew7qDUI_N3jM.roa
File:                     TjblVS0N8iFAM3Iew7qDUI_N3jM.roa (raw, json)
Hash identifier:          cAUplk8pCRTzOxZ3+Dvw37mzcn8UTcGWmo9pakw+wfU=
Subject key identifier:   4E:36:E5:55:2D:0D:F2:21:40:33:72:1E:C3:BA:83:50:8F:CD:DE:33
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       12F1
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/TjblVS0N8iFAM3Iew7qDUI_N3jM.roa
Signing time:             Wed 29 Sep 2021 02:55:10 +0000
ROA not before:           Wed 29 Sep 2021 02:55:10 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24164
IP address blocks:        180.218.164.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4849 (0x12f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:55:10 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=4E36E5552D0DF2214033721EC3BA83508FCDDE33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:34:5c:ac:bc:99:c7:e3:53:78:74:a5:7d:44:
                    75:d4:d2:eb:86:d8:2c:7a:55:f4:d3:e5:49:bd:a6:
                    13:7f:15:67:50:8d:5e:e9:1a:f1:13:7e:cd:08:a8:
                    3f:e3:fa:67:4d:36:33:34:41:e0:c3:09:bc:40:bf:
                    7a:97:3a:f8:8a:b8:b4:ca:d2:bf:94:92:2f:c4:50:
                    eb:5a:18:65:e2:a2:44:61:a9:f6:44:b3:8f:f2:32:
                    c7:d2:03:c9:3b:df:45:7e:9b:17:bc:e1:87:0d:93:
                    50:0c:63:a4:5c:66:69:e9:3f:0b:38:66:91:49:c3:
                    75:e0:00:5c:67:2a:d9:ae:c6:ed:8d:c5:68:b8:b1:
                    9c:14:20:e8:85:bb:1a:21:69:2f:61:c4:7a:ad:b9:
                    26:7f:2a:90:ea:89:a0:ac:85:14:81:81:63:de:80:
                    57:58:1b:89:1b:03:70:b4:a3:f3:7f:e0:c0:8d:49:
                    92:b1:0d:68:82:f5:50:c6:2d:4e:04:52:d0:0e:27:
                    33:21:99:ae:cd:23:d7:13:d5:4e:63:3a:6c:74:c8:
                    96:47:e1:61:e4:66:7b:96:c9:83:7f:c2:db:ca:ba:
                    8a:ee:e2:37:d1:ce:05:5f:8c:e8:ad:18:e6:9b:f5:
                    79:08:02:f0:ae:3f:75:03:08:6e:21:2a:39:74:2d:
                    ca:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:36:E5:55:2D:0D:F2:21:40:33:72:1E:C3:BA:83:50:8F:CD:DE:33
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/TjblVS0N8iFAM3Iew7qDUI_N3jM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:7e:5b:1b:b9:73:7a:f8:00:61:b0:d6:27:ec:b9:d5:c1:62:
         f5:77:d2:20:a9:33:83:b6:16:9e:f3:4b:05:b5:a6:01:c3:c6:
         62:3b:c6:f4:fc:f5:bb:49:97:ee:e3:d4:0a:ca:3c:c0:6f:a2:
         14:32:47:10:3c:5a:7a:3c:f6:33:1c:ee:2a:e8:4f:3b:1c:1f:
         2e:93:f8:29:d9:7c:2a:87:6a:fc:e8:e3:29:32:dd:5a:e4:f3:
         dc:8b:32:3a:e5:12:5d:86:52:12:26:af:39:4b:ad:d6:27:96:
         48:07:af:8d:2b:89:a7:db:bb:87:9e:50:7a:fb:06:6b:21:4c:
         63:48:91:73:2c:97:21:5a:0f:17:7f:53:8c:da:ec:eb:3f:4a:
         f0:12:06:32:0c:19:30:d5:5e:19:68:22:81:ae:42:be:bf:f7:
         07:a2:49:ad:01:35:70:60:98:f1:4d:d0:e5:41:e5:87:39:ad:
         a7:b2:19:a3:d5:03:d3:90:82:76:67:6b:36:92:67:67:63:bb:
         9e:8d:a6:38:54:6f:4b:8a:4b:4e:90:cd:e4:00:c8:41:75:3b:
         66:34:19:7e:43:02:97:7b:58:54:33:b5:eb:b4:f3:a3:cf:8d:
         c3:7d:ba:d1:ae:8a:f4:33:ef:3f:b1:52:22:fc:94:49:9c:2f:
         8e:f1:86:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:47 2024 by rpki-client on console-ams.rpki-client.org