Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/f_UxWR743ue7liTGF__pvZQQIbI.roa
File:                     f_UxWR743ue7liTGF__pvZQQIbI.roa (raw, json)
Hash identifier:          UF4894iPDWwB9cfz3BvUZood/l12ODBOufq9sy+/gPY=
Subject key identifier:   7F:F5:31:59:1E:F8:DE:E7:BB:96:24:C6:17:FF:E9:BD:94:10:21:B2
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       12E2
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/f_UxWR743ue7liTGF__pvZQQIbI.roa
Signing time:             Wed 29 Sep 2021 02:55:06 +0000
ROA not before:           Wed 29 Sep 2021 02:55:06 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24164
IP address blocks:        180.218.56.0/21 maxlen: 21
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4834 (0x12e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:55:06 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=7FF531591EF8DEE7BB9624C617FFE9BD941021B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:06:d7:b5:4d:d5:de:9c:14:b5:fe:6f:f3:09:
                    a3:1a:dd:67:1a:72:a2:79:d7:38:55:09:ac:aa:f6:
                    f5:2f:c5:74:ca:c8:3d:01:bb:b8:f9:c7:b3:b6:fe:
                    d2:66:ed:d5:4c:36:69:32:b9:9d:36:46:d4:bc:d0:
                    a7:66:40:e2:da:2f:47:14:d0:17:5e:a5:72:24:7f:
                    1a:0f:9c:d6:b8:02:91:ed:bd:93:15:99:b0:7b:ac:
                    fe:ce:57:66:24:15:c4:da:4d:e5:39:0b:e3:62:fb:
                    77:7b:25:9c:b8:fb:01:50:6e:19:1d:64:4a:92:f8:
                    12:18:e6:fc:ad:d1:22:eb:51:6a:ff:c8:c1:a2:8b:
                    0c:8a:4e:2e:61:eb:b0:6f:aa:00:85:b8:d2:79:16:
                    47:91:5d:a9:d0:d0:fc:f9:81:a9:56:e6:53:ea:57:
                    18:8b:e3:ff:23:21:13:4f:07:a6:8a:e0:e5:9c:e6:
                    fd:e4:d9:87:13:49:1e:5c:62:ff:52:1c:11:6e:1e:
                    8a:26:66:12:63:21:7e:75:c0:c0:fd:ee:11:32:88:
                    b3:cc:75:03:fa:70:48:83:ce:ca:18:45:5e:92:0e:
                    b1:f9:84:26:fd:89:0c:91:eb:39:7c:a6:0f:3e:da:
                    1d:25:6a:12:84:3a:08:4e:be:4c:8a:3a:63:6c:7a:
                    38:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:F5:31:59:1E:F8:DE:E7:BB:96:24:C6:17:FF:E9:BD:94:10:21:B2
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/f_UxWR743ue7liTGF__pvZQQIbI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         08:cd:11:d4:8b:90:71:d7:ad:7d:0c:18:4f:28:4b:6f:dd:f1:
         85:b0:ff:34:b1:8a:87:b3:7c:59:83:33:c9:79:7e:9f:d7:9e:
         3a:a2:c2:72:cb:9a:b3:30:3e:a8:9a:02:dc:b3:d6:fd:f9:c4:
         28:0d:20:0b:28:cd:80:97:51:1e:7b:35:09:90:ba:c7:8d:b3:
         e4:99:c2:5c:7b:ca:67:d3:a2:b0:e9:f5:91:d3:02:a8:4d:63:
         47:77:ec:cb:31:b1:42:fe:a5:b2:54:1a:77:b3:c0:e0:4e:3d:
         19:8c:ef:30:cc:79:8d:b3:34:d4:a8:49:9b:12:e5:e5:ef:e2:
         e9:c6:06:f0:fa:58:c0:48:c3:49:ef:df:c1:a2:34:f9:12:d0:
         67:3c:91:f3:22:cb:27:50:65:3b:09:83:dd:f9:fc:d6:23:97:
         5b:27:db:37:67:f8:b9:b6:99:b9:14:31:64:e0:36:d7:43:52:
         b7:86:ae:9a:2f:a0:85:90:ab:0d:95:8f:d3:e2:3c:7f:d3:19:
         35:0c:3e:b2:2e:1c:98:93:30:cb:e7:fa:8c:da:37:75:d8:0e:
         1f:8e:d1:42:c4:d4:ac:4a:07:85:13:e5:09:d3:57:52:7b:85:
         1e:d0:6e:63:f0:df:c3:f0:cc:9f:db:6e:b9:d9:de:53:8d:02:
         f7:93:3c:f8
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICEuIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTA5Mjkw
MjU1MDZaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDdGRjUzMTU5MUVGOERF
RTdCQjk2MjRDNjE3RkZFOUJEOTQxMDIxQjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDnBte1TdXenBS1/m/zCaMa3WcacqJ51zhVCayq9vUvxXTKyD0B
u7j5x7O2/tJm7dVMNmkyuZ02RtS80KdmQOLaL0cU0BdepXIkfxoPnNa4ApHtvZMV
mbB7rP7OV2YkFcTaTeU5C+Ni+3d7JZy4+wFQbhkdZEqS+BIY5vyt0SLrUWr/yMGi
iwyKTi5h67BvqgCFuNJ5FkeRXanQ0Pz5galW5lPqVxiL4/8jIRNPB6aK4OWc5v3k
2YcTSR5cYv9SHBFuHoomZhJjIX51wMD97hEyiLPMdQP6cEiDzsoYRV6SDrH5hCb9
iQyR6zl8pg8+2h0lahKEOghOvkyKOmNseji5AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUf/UxWR743ue7liTGF//pvZQQIbIwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2ZfVXhXUjc0M3VlN2xpVEdG
X19wdlpRUUliSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0
2jgwDQYJKoZIhvcNAQELBQADggEBAAjNEdSLkHHXrX0MGE8oS2/d8YWw/zSxioez
fFmDM8l5fp/XnjqiwnLLmrMwPqiaAtyz1v35xCgNIAsozYCXUR57NQmQuseNs+SZ
wlx7ymfTorDp9ZHTAqhNY0d37MsxsUL+pbJUGnezwOBOPRmM7zDMeY2zNNSoSZsS
5eXv4unGBvD6WMBIw0nv38GiNPkS0Gc8kfMiyydQZTsJg935/NYjl1sn2zdn+Lm2
mbkUMWTgNtdDUreGrpovoIWQqw2Vj9PiPH/TGTUMPrIuHJiTMMvn+ozaN3XYDh+O
0ULE1KxKB4UT5QnTV1J7hR7QbmPw38PwzJ/bbrnZ3lONAveTPPg=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:47:12 2025 by rpki-client