Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gNVQFRrspQVjaejeOUXSPHDCPVs.roa
File:                     gNVQFRrspQVjaejeOUXSPHDCPVs.roa (raw, json)
Hash identifier:          0pHPuiEihM1ihMl2QaHbyuN0E7Ay8xeF4ab3j7FpaWc=
Subject key identifier:   80:D5:50:15:1A:EC:A5:05:63:69:E8:DE:39:45:D2:3C:70:C2:3D:5B
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       10D5
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gNVQFRrspQVjaejeOUXSPHDCPVs.roa
Signing time:             Sun 07 Feb 2021 12:49:10 +0000
ROA not before:           Sun 07 Feb 2021 12:49:10 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        180.218.192.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4309 (0x10d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb  7 12:49:10 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=80D550151AECA5056369E8DE3945D23C70C23D5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:69:d4:34:91:30:df:81:d9:48:9b:b3:5d:fc:
                    1c:6a:93:8d:16:46:5f:27:f5:ec:e7:cf:ca:65:04:
                    61:f8:76:1e:ed:ee:61:49:b9:25:32:d7:f2:c6:29:
                    5f:57:2a:10:fa:a6:96:19:eb:ae:5d:82:50:d4:64:
                    8e:61:4b:16:c9:dd:50:fc:b3:65:2b:cf:c3:8d:3e:
                    fa:72:9b:55:7c:a2:8b:0c:60:0a:64:c2:f1:ac:2b:
                    d7:61:cb:ce:35:d0:bd:34:b2:a4:88:eb:b7:99:d7:
                    62:2e:e0:54:3e:ef:75:32:48:da:6c:6c:0c:1f:58:
                    f5:17:73:62:c1:bd:42:29:d5:d6:d2:a3:01:60:6d:
                    e3:fb:1c:8f:22:8f:3e:08:6d:bd:3b:28:1d:be:24:
                    49:f8:ca:eb:b7:fc:97:cb:f8:38:96:74:3a:6e:07:
                    a4:ea:32:4e:33:7d:fb:f5:b1:28:79:f6:ca:9a:f5:
                    d1:17:a8:5f:f1:81:9a:d1:c2:90:a9:b8:df:7c:e1:
                    98:af:b9:56:85:46:5e:b4:bb:c4:cb:2c:86:f7:9f:
                    8c:d1:59:28:fb:18:bb:c4:69:91:2f:4a:05:a5:59:
                    0d:7c:4e:23:fd:b8:49:ba:97:90:ad:6a:24:89:9e:
                    1d:d2:38:96:95:99:b6:04:94:1f:d8:a2:d2:b2:94:
                    ed:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:D5:50:15:1A:EC:A5:05:63:69:E8:DE:39:45:D2:3C:70:C2:3D:5B
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gNVQFRrspQVjaejeOUXSPHDCPVs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         53:aa:63:d7:5b:25:4a:ae:0c:7d:9f:cb:9d:e4:25:f4:de:82:
         2d:da:8c:32:8c:d9:89:82:41:79:dc:05:9c:02:97:27:35:f1:
         fd:31:b4:81:f4:28:9b:cb:db:7e:d6:e9:3e:27:09:eb:7e:2e:
         23:0b:d8:eb:5b:68:63:52:a8:11:15:82:5c:dc:c3:1d:b9:76:
         3b:1a:8c:79:f8:9c:bc:b8:c7:25:2c:13:9b:d7:f0:e8:d7:7b:
         af:1a:16:2b:8f:dd:81:58:68:fa:98:b2:f5:8e:e8:a5:88:b1:
         94:8d:67:92:2b:c8:44:6e:4b:5f:3c:39:23:d6:d6:51:8f:51:
         60:79:c4:86:de:30:97:33:a7:de:96:91:0a:c0:9f:df:52:f8:
         c7:70:67:4e:cd:14:aa:b3:c5:5c:11:b9:69:86:4a:68:98:3a:
         d7:5b:40:bc:66:70:06:78:6b:c6:8a:87:55:66:8b:54:25:e5:
         96:74:09:4a:8a:88:09:0e:c3:c6:ae:50:96:48:fd:99:2f:44:
         f8:15:27:f5:a1:23:8b:c5:6b:16:f9:83:30:51:9c:a2:69:c4:
         c6:58:b9:8c:73:c5:54:41:03:db:aa:07:ca:c3:6f:09:4b:92:
         dd:b4:26:af:cd:cc:b5:21:04:e9:0e:e6:f8:e1:b2:d0:ea:cb:
         1f:ea:1b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:51 2023 by rpki-client on console-fra.rpki-client.org