Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/kVdXBqEKrxfAbC13JRKMNjFt9Ig.roa
File:                     kVdXBqEKrxfAbC13JRKMNjFt9Ig.roa (raw, json)
Hash identifier:          syXYHrZtPU7rhFn4qxEEUxn1mXu/XbrHPY/cKqdnQJo=
Subject key identifier:   91:57:57:06:A1:0A:AF:17:C0:6C:2D:77:25:12:8C:36:31:6D:F4:88
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1912
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/kVdXBqEKrxfAbC13JRKMNjFt9Ig.roa
Signing time:             Sat 22 Oct 2022 06:06:04 +0000
ROA not before:           Sat 22 Oct 2022 06:06:04 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24165
IP address blocks:        115.165.224.0/21 maxlen: 21
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6418 (0x1912)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Oct 22 06:06:04 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=91575706A10AAF17C06C2D7725128C36316DF488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:30:ea:d6:5a:aa:cd:19:a6:55:bd:67:bd:e7:
                    d2:ab:de:ad:6f:c2:f8:17:52:23:a5:45:d4:6e:e8:
                    87:35:d5:e5:8f:19:96:ef:83:91:4f:ce:4a:4e:e4:
                    39:70:67:07:1b:14:22:2a:72:ed:e9:bc:e9:ad:da:
                    f0:9a:da:99:57:e8:b2:87:73:13:f7:f8:15:a9:09:
                    1c:96:3d:01:1e:ac:11:be:7c:54:01:fc:a3:2c:be:
                    fa:2f:41:3b:11:27:b8:b0:bb:e9:75:f7:c5:51:4c:
                    6b:ae:33:80:07:3a:a9:98:0b:79:89:e2:6f:cb:b4:
                    a2:71:74:26:a4:d1:9f:1c:ed:e4:08:ce:56:84:16:
                    1d:5b:05:51:50:cb:d5:bd:5f:de:4f:65:93:b6:f4:
                    74:79:e8:38:e7:14:5b:5c:42:ba:af:b1:aa:22:83:
                    88:34:ae:01:01:62:17:6b:1d:be:98:03:76:d3:d3:
                    cc:90:fe:f8:0d:14:71:9e:30:33:f2:c7:b4:e0:0c:
                    61:87:74:ce:85:0e:45:1d:3c:91:40:53:69:cd:6f:
                    6c:76:ad:aa:12:0f:ab:45:1b:9b:62:9b:db:80:58:
                    fb:d1:bd:1b:0e:a3:38:3e:62:0a:68:29:12:ce:72:
                    72:ac:ac:48:0a:16:e3:75:68:02:d6:eb:49:a5:46:
                    29:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:57:57:06:A1:0A:AF:17:C0:6C:2D:77:25:12:8C:36:31:6D:F4:88
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/kVdXBqEKrxfAbC13JRKMNjFt9Ig.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.165.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         88:8e:da:3a:22:45:5a:ad:fc:1a:62:d2:ef:c9:07:fd:8d:f5:
         d4:e0:7d:e7:a8:53:92:8b:42:29:44:aa:6c:51:f1:6f:80:29:
         87:03:0d:fe:4b:e1:a8:e5:d5:0c:b8:b4:57:a2:8f:53:14:3a:
         69:3c:38:8e:92:16:fb:3b:9d:00:9c:2a:ba:70:92:35:c2:22:
         a4:b7:69:a9:7d:90:cc:f3:59:d0:c3:53:92:98:15:e9:89:b0:
         ed:96:34:83:94:7d:b6:30:f2:0a:76:58:d6:de:f0:07:2a:56:
         59:1d:ae:ae:48:1e:fd:10:60:fa:af:7a:d5:33:f1:ab:f7:4a:
         db:8c:b8:03:77:94:f3:c3:c3:34:a0:c3:68:9b:48:82:aa:d4:
         5e:43:a5:34:21:f7:f8:30:14:6b:85:0b:5c:ca:c5:ee:a3:15:
         55:26:16:e5:28:64:cb:fa:f5:9b:fe:1f:c7:53:fb:57:d2:02:
         27:6c:0c:76:9a:28:ca:33:cc:5d:28:a6:5a:16:ef:4b:3d:3c:
         02:0a:75:e6:ca:2f:1d:41:af:50:d5:13:37:c2:4d:92:26:5a:
         77:31:27:1a:ba:39:c3:c7:41:51:e5:cd:f4:a6:65:81:b5:7b:
         e4:05:99:d4:08:f5:b4:38:11:fb:92:84:dd:3e:63:19:ac:0e:
         c8:3e:2e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:45:39 2025 by rpki-client