Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/j9dH9IgHUcWV2q6TyoJBnchO95w.roa
File:                     j9dH9IgHUcWV2q6TyoJBnchO95w.roa (raw, json)
Hash identifier:          goZ2p9R7LcDUm3f8G/fvBVkjLkU3X71z3GbRRoiMdM8=
Subject key identifier:   8F:D7:47:F4:88:07:51:C5:95:DA:AE:93:CA:82:41:9D:C8:4E:F7:9C
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1083
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/j9dH9IgHUcWV2q6TyoJBnchO95w.roa
Signing time:             Sun 07 Feb 2021 12:45:56 +0000
ROA not before:           Sun 07 Feb 2021 12:45:56 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        180.218.176.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4227 (0x1083)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb  7 12:45:56 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=8FD747F4880751C595DAAE93CA82419DC84EF79C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:15:ae:8f:de:ff:2b:72:2c:c2:a9:39:b0:7f:
                    7a:48:c8:34:48:f7:8e:64:1d:7e:e4:1c:82:93:fa:
                    eb:bf:26:f3:97:d1:96:44:48:2c:ba:d2:81:7b:71:
                    d8:4c:14:16:15:aa:04:92:54:9c:66:8a:f4:1e:4b:
                    fb:16:a6:94:0e:ce:cf:90:be:92:2f:be:b8:2b:71:
                    f6:71:2a:74:68:5e:ab:da:75:b3:75:c3:bf:1d:90:
                    3c:db:f4:e1:8f:a6:fd:b0:3d:13:9e:df:b8:91:f7:
                    f3:b6:a9:08:72:59:6b:c3:60:50:74:9f:4e:1d:34:
                    27:b3:12:39:60:17:ec:97:69:80:93:e4:cd:db:eb:
                    aa:d6:35:4c:d2:22:90:cf:f3:bf:d9:06:7c:d4:fc:
                    bc:2e:db:b6:26:69:af:e0:a8:f9:01:8d:5b:19:49:
                    54:8a:12:b3:ad:9f:32:f4:90:03:ea:09:27:9d:f6:
                    62:ab:c5:4d:bf:c8:2c:77:6e:f2:04:64:56:5d:46:
                    10:14:39:44:70:60:53:cb:43:89:23:29:f3:fe:4d:
                    2d:bd:32:a9:c6:79:ea:d1:ad:39:11:ac:07:5e:05:
                    34:ca:53:0f:c2:15:fe:22:88:9e:08:73:ef:9e:01:
                    1c:cc:dd:8b:a0:12:b6:cc:51:5d:44:6c:27:46:91:
                    09:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:D7:47:F4:88:07:51:C5:95:DA:AE:93:CA:82:41:9D:C8:4E:F7:9C
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/j9dH9IgHUcWV2q6TyoJBnchO95w.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:8b:a8:74:f7:93:a3:3e:21:ff:a4:0f:1d:f7:46:cf:a8:20:
         6a:87:84:92:0f:25:64:64:bd:90:29:e3:55:7c:0d:cd:6c:7b:
         ec:1a:22:15:a8:d0:ae:09:2f:9d:e4:b3:5a:63:1a:62:a5:50:
         08:fd:b8:db:50:f1:df:4b:fd:bc:7f:43:2e:a2:b1:e4:dc:e2:
         9a:f1:da:d1:de:f8:e9:ea:63:86:ed:35:6c:44:47:48:95:ff:
         f0:dd:1e:3b:a3:a8:41:22:ae:83:da:a8:4c:fc:ec:b3:1f:36:
         98:eb:26:95:eb:f1:32:ae:09:86:c7:31:0c:b6:2b:62:5a:12:
         cc:ea:26:68:df:7f:1e:6b:c8:1f:1a:46:81:a0:1d:fe:7f:e0:
         9a:4a:c8:13:cb:59:b4:23:25:56:29:17:0c:e7:28:34:84:63:
         2f:97:e9:52:ac:73:a7:25:dc:0d:a6:00:0e:04:91:c3:04:8f:
         b3:ee:13:4f:40:76:5b:93:ef:d2:53:ed:05:e1:76:fc:93:07:
         af:2c:99:c5:ab:5f:19:84:a1:06:d7:ed:e3:d2:b1:8a:76:0e:
         81:55:0a:9c:1a:f9:f7:06:f0:54:60:fc:c5:e6:c8:cd:1c:24:
         13:cf:a7:4a:d8:b6:f4:cb:ab:00:88:13:ef:b6:40:2f:d6:9b:
         51:20:c8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:51 2023 by rpki-client on console-fra.rpki-client.org