Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/my4DpgZ-pyTxl4IGlnzENrZ0BMw.roa
File:                     my4DpgZ-pyTxl4IGlnzENrZ0BMw.roa (raw, json)
Hash identifier:          nA8YPQibLfdyxpGpuxVLJv9YEzzshBosG4gkHZckZDE=
Subject key identifier:   9B:2E:03:A6:06:7E:A7:24:F1:97:82:06:96:7C:C4:36:B6:74:04:CC
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/my4DpgZ-pyTxl4IGlnzENrZ0BMw.roa
Signing time:             Thu 15 Sep 2022 02:35:48 +0000
ROA not before:           Thu 15 Sep 2022 02:35:48 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24164
IP address blocks:        180.218.92.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5374 (0x14fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 15 02:35:48 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=9B2E03A6067EA724F1978206967CC436B67404CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:fc:da:97:c1:68:e5:66:09:23:fe:db:86:98:
                    37:1b:f7:c7:5b:c9:b7:79:34:46:e6:1c:79:d2:00:
                    6b:bc:d3:d2:ec:50:ad:47:d4:b6:d3:e6:ce:e9:b8:
                    29:10:bf:ae:9c:d0:11:bd:ca:17:c8:11:aa:e2:de:
                    d3:0e:33:b3:d1:36:60:6e:9d:ac:ad:ee:44:99:e1:
                    e0:49:d6:64:ee:93:5f:f3:70:47:ba:81:0d:2a:4d:
                    14:ff:c2:1c:ce:29:b9:5c:93:6f:e1:1c:7f:87:21:
                    d5:bb:2f:57:b8:e7:e3:0b:5d:d2:74:c2:2e:46:bb:
                    10:33:21:22:d2:8c:4f:c9:4e:10:5d:74:c7:62:b4:
                    64:bc:73:8a:eb:68:39:3d:09:69:d8:c3:1e:fe:70:
                    1e:c3:b9:1a:dc:87:b3:93:ad:f8:06:ab:d0:b2:a5:
                    8b:b7:9c:ca:ec:73:e1:51:9e:ad:12:69:5f:92:d0:
                    96:b7:16:30:70:a3:0b:8a:99:df:d9:7d:be:a0:04:
                    fb:99:d9:9a:22:49:20:11:06:95:08:f6:1f:5d:3d:
                    ac:24:86:e2:4e:70:67:46:f9:0f:8d:f3:0b:26:5b:
                    09:38:ce:dd:ba:cb:36:41:f5:11:76:29:1e:13:c7:
                    e1:84:1c:0d:d5:0c:8a:a3:ad:82:f7:7f:24:da:60:
                    8d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:2E:03:A6:06:7E:A7:24:F1:97:82:06:96:7C:C4:36:B6:74:04:CC
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/my4DpgZ-pyTxl4IGlnzENrZ0BMw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:61:56:09:16:7e:2b:ed:cf:ea:b8:2a:a4:b7:33:92:7f:6b:
         4b:49:58:52:38:c7:07:f1:91:66:c3:4d:4f:82:94:d3:76:4b:
         99:b6:ce:b5:68:92:26:b0:de:06:7e:0b:1b:34:69:88:d2:8d:
         dc:8b:c1:b7:1a:ca:b4:f7:94:9f:6b:ce:58:c3:81:cf:38:34:
         58:62:dd:98:f2:d0:82:2c:18:50:b4:cc:32:cb:9e:15:ad:31:
         08:ad:60:98:c5:f8:38:e7:e9:af:30:8f:48:ff:69:b6:2c:d7:
         6b:b0:96:26:9b:fe:c5:57:cf:15:2d:ab:76:ec:85:f3:b0:af:
         fd:64:a4:01:4a:67:3e:3f:59:e3:e1:14:03:e7:9a:41:b7:c9:
         ed:fc:94:11:4c:91:e5:72:ce:0b:e3:63:51:06:2c:5c:a7:02:
         2c:c1:f5:5a:76:eb:aa:be:06:37:5c:6f:39:b5:5f:02:35:2d:
         cb:c9:c8:a3:94:fd:8f:0d:f6:3c:8b:67:41:cf:c9:57:69:6d:
         ac:43:7d:70:5a:78:36:f5:89:e2:99:35:cc:55:f9:f3:59:b4:
         a6:3e:21:e9:e1:d2:eb:4a:14:11:08:2d:f3:2d:aa:0c:c4:60:
         8e:3e:80:b7:80:aa:e5:74:83:3c:a3:6f:5e:86:0e:c5:14:a9:
         cf:f1:76:55
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFP4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjA5MTUw
MjM1NDhaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDlCMkUwM0E2MDY3RUE3
MjRGMTk3ODIwNjk2N0NDNDM2QjY3NDA0Q0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD6/NqXwWjlZgkj/tuGmDcb98dbybd5NEbmHHnSAGu809LsUK1H
1LbT5s7puCkQv66c0BG9yhfIEari3tMOM7PRNmBunayt7kSZ4eBJ1mTuk1/zcEe6
gQ0qTRT/whzOKblck2/hHH+HIdW7L1e45+MLXdJ0wi5GuxAzISLSjE/JThBddMdi
tGS8c4rraDk9CWnYwx7+cB7DuRrch7OTrfgGq9CypYu3nMrsc+FRnq0SaV+S0Ja3
FjBwowuKmd/Zfb6gBPuZ2ZoiSSARBpUI9h9dPawkhuJOcGdG+Q+N8wsmWwk4zt26
yzZB9RF2KR4Tx+GEHA3VDIqjrYL3fyTaYI2PAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUmy4DpgZ+pyTxl4IGlnzENrZ0BMwwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL215NERwZ1otcHlUeGw0SUds
bnpFTnJaMEJNdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0
2lwwDQYJKoZIhvcNAQELBQADggEBAI5hVgkWfivtz+q4KqS3M5J/a0tJWFI4xwfx
kWbDTU+ClNN2S5m2zrVokiaw3gZ+Cxs0aYjSjdyLwbcayrT3lJ9rzljDgc84NFhi
3Zjy0IIsGFC0zDLLnhWtMQitYJjF+Djn6a8wj0j/abYs12uwliab/sVXzxUtq3bs
hfOwr/1kpAFKZz4/WePhFAPnmkG3ye38lBFMkeVyzgvjY1EGLFynAizB9Vp266q+
Bjdcbzm1XwI1LcvJyKOU/Y8N9jyLZ0HPyVdpbaxDfXBaeDb1ieKZNcxV+fNZtKY+
Ienh0utKFBEILfMtqgzEYI4+gLeAquV0gzyjb16GDsUUqc/xdlU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:05 2024 by rpki-client on console-fra.rpki-client.org