Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ku-9EcDQpPlf6tkVzGcDT7D_xjU.roa
File:                     ku-9EcDQpPlf6tkVzGcDT7D_xjU.roa (raw, json)
Hash identifier:          T0uuq/1pojYt5mO42u6g/ji/SVplfyGXVWZoWoMrk28=
Subject key identifier:   92:EF:BD:11:C0:D0:A4:F9:5F:EA:D9:15:CC:67:03:4F:B0:FF:C6:35
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1980
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ku-9EcDQpPlf6tkVzGcDT7D_xjU.roa
Signing time:             Sat 22 Oct 2022 06:06:36 +0000
ROA not before:           Sat 22 Oct 2022 06:06:36 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24164
IP address blocks:        180.218.0.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6528 (0x1980)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Oct 22 06:06:36 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=92EFBD11C0D0A4F95FEAD915CC67034FB0FFC635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a2:ae:02:a4:4b:fc:50:38:46:87:29:fc:70:
                    ba:9f:f6:1d:e2:f8:4f:3f:5a:30:2a:41:69:2d:0a:
                    4a:e2:e9:b9:42:09:3f:d2:23:70:2a:69:0f:55:ae:
                    17:43:a9:e9:cc:5a:9e:c1:85:38:5b:de:35:06:4f:
                    33:ef:5f:18:d1:b0:38:07:6a:f4:65:62:06:43:a0:
                    c6:57:3f:7a:7c:9f:bf:65:18:2c:87:c0:69:fb:2f:
                    1a:46:91:35:c6:f9:24:74:74:a8:9c:2a:04:6e:75:
                    7c:3e:5e:18:2a:17:45:d5:d5:b1:aa:a1:e3:43:0f:
                    8a:57:e4:ce:41:26:40:f7:60:33:90:5b:a2:55:d8:
                    9c:cf:ac:b3:4a:59:e4:82:1e:4f:d1:f5:8a:4b:05:
                    6e:52:72:e4:29:59:54:57:28:47:90:9e:8d:0b:77:
                    74:d7:3e:ed:0b:a1:68:0d:21:fa:31:ad:92:b8:12:
                    25:a0:14:ff:07:cb:bf:42:4e:c6:80:34:f9:af:09:
                    2a:d9:86:26:e6:54:9c:09:31:ed:5e:89:a1:6a:b0:
                    04:07:20:a2:a1:59:0e:1e:3f:04:c7:e5:27:97:f6:
                    44:fb:da:0e:39:72:fe:89:fc:3d:b1:e3:3a:c6:36:
                    c0:ff:43:5e:36:e3:1f:3e:91:3d:f4:3c:a0:c4:38:
                    d5:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:EF:BD:11:C0:D0:A4:F9:5F:EA:D9:15:CC:67:03:4F:B0:FF:C6:35
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ku-9EcDQpPlf6tkVzGcDT7D_xjU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         04:d8:93:a8:6f:56:bc:f1:60:b4:94:cf:25:e1:84:2e:b7:48:
         75:99:07:5a:22:2f:bb:eb:aa:03:ae:39:85:96:fd:e5:9d:e2:
         1b:78:44:5b:6b:ed:47:57:48:14:17:47:ef:7f:01:ed:ed:93:
         c4:dc:0b:a8:29:34:d5:96:4e:03:5d:ab:98:7f:6e:b3:fc:a0:
         5f:75:83:60:0a:b5:90:5f:29:b8:9e:51:36:43:e9:bc:3a:07:
         49:24:0c:87:80:0a:7d:51:cd:a5:60:8d:92:98:13:b2:2d:1f:
         8b:26:4b:09:b0:0b:71:7e:9c:84:60:84:33:d1:a6:97:09:55:
         de:23:76:fe:f8:07:15:fd:ab:6e:13:86:84:72:76:f5:3c:0e:
         c8:b8:db:64:5f:73:26:14:6b:5c:9f:9e:d9:ac:1b:34:5b:7e:
         91:c3:f8:28:66:6b:04:84:06:2d:71:78:fe:8e:97:1f:d8:e8:
         a1:e6:b2:87:32:be:8c:5c:a4:3a:09:45:94:98:83:17:9b:1a:
         be:a2:bb:fb:32:ab:4e:8c:ac:47:40:d1:3e:7b:1b:1f:ff:cd:
         ba:5f:0d:6b:c5:3b:00:d7:89:43:f3:7e:cf:79:2a:5f:22:07:
         61:4e:8e:eb:92:6f:95:9c:e5:f1:6c:cf:19:9c:60:35:63:ea:
         1c:0f:ec:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:49 2024 by rpki-client on console-ams.rpki-client.org