Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/rS_SR6iEe3eF10hu3aEbyHURVdM.roa
File:                     rS_SR6iEe3eF10hu3aEbyHURVdM.roa (raw, json)
Hash identifier:          73fDhXTIXA3rtbOHooWrkvEBCKocu7N736t0v16fT/s=
Subject key identifier:   AD:2F:D2:47:A8:84:7B:77:85:D7:48:6E:DD:A1:1B:C8:75:11:55:D3
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/rS_SR6iEe3eF10hu3aEbyHURVdM.roa
Signing time:             Thu 15 Sep 2022 02:36:45 +0000
ROA not before:           Thu 15 Sep 2022 02:36:45 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24163
IP address blocks:        180.218.246.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5374 (0x14fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 15 02:36:45 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=AD2FD247A8847B7785D7486EDDA11BC8751155D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:40:b7:b2:39:81:6d:38:07:46:b1:b9:ad:08:
                    bd:86:81:b5:90:c3:de:69:59:8d:f4:c4:10:4f:08:
                    76:b5:de:32:56:d8:de:db:69:45:96:67:bd:85:77:
                    03:2e:4f:ee:b6:d2:60:99:a5:3a:c4:de:b8:4a:be:
                    d9:b7:03:a1:e6:b6:d1:ad:dc:f0:23:e7:66:53:1c:
                    04:88:26:a5:34:56:74:20:14:27:b8:b7:66:6c:47:
                    56:46:ab:36:64:e5:7d:2a:8a:aa:74:6f:c4:cd:a5:
                    91:21:6e:63:59:8c:a0:5b:bc:a5:89:17:c2:b3:a9:
                    ea:22:b7:aa:a5:d0:59:2a:68:04:72:bd:f5:70:48:
                    cc:34:dd:5f:4c:10:b0:10:9f:c4:28:54:8a:93:e1:
                    90:5a:f4:3b:e6:b2:b6:c6:d0:cd:53:38:40:f2:b2:
                    af:fe:be:66:3b:dd:a4:11:8f:91:a6:45:5c:e3:32:
                    e4:5d:ec:43:27:20:40:13:75:ed:cb:bb:c4:4f:c9:
                    31:f3:ff:98:e4:8b:66:dd:86:57:fa:b3:43:64:ee:
                    66:5b:fc:84:bc:54:94:da:f5:fc:65:3b:2f:2e:cd:
                    9a:c9:52:cb:97:ef:54:5e:17:a9:c1:2f:6e:a1:3d:
                    16:f4:d0:a1:99:b5:df:54:2e:b1:c5:68:29:7d:ad:
                    f7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:2F:D2:47:A8:84:7B:77:85:D7:48:6E:DD:A1:1B:C8:75:11:55:D3
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/rS_SR6iEe3eF10hu3aEbyHURVdM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:65:ad:db:90:a8:9f:11:d5:f8:81:76:90:f3:6e:4c:83:d5:
         4c:59:62:b3:83:32:3d:2f:3f:3f:07:84:35:33:e1:fe:5c:8a:
         b0:2c:fc:e7:ef:a7:3f:a9:29:75:ea:3e:94:2e:55:b7:60:bd:
         b9:1a:28:f1:59:df:6f:86:52:5d:64:32:a6:3c:92:41:f4:97:
         b6:5b:98:a7:4a:c8:e9:f5:fd:0e:1c:39:ed:7d:2b:e1:4e:5c:
         28:d8:56:72:74:fd:0e:ae:9a:9e:19:ee:d7:ff:0b:6f:25:38:
         41:3e:ce:92:a0:0c:f9:10:c2:51:b8:a2:25:11:08:33:fd:18:
         bc:62:58:f9:84:72:56:3f:02:a6:fb:49:0d:b3:9b:89:ff:b8:
         de:d9:f9:bb:e3:22:7e:0c:7e:3a:5c:d9:d8:0a:6f:81:16:09:
         e9:0c:ca:d1:51:5c:90:16:52:06:f9:ac:ae:16:f5:83:13:1b:
         fd:8e:21:89:91:83:75:d3:51:da:61:24:3f:1a:ea:59:ff:e0:
         ab:dc:df:c9:95:78:f7:33:09:e6:8f:8c:86:dd:45:81:b2:7c:
         03:f0:f4:06:88:d4:c8:3f:61:cd:be:c8:e0:dc:52:a1:56:9b:
         51:eb:1e:86:6e:27:a3:7f:c5:b3:04:c1:17:d8:5a:17:94:e1:
         56:76:85:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org