Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/xERu07LjAYPt36WcAVVr0-JWtts.roa
File:                     xERu07LjAYPt36WcAVVr0-JWtts.roa (raw, json)
Hash identifier:          fnU6pG8Zb4+qRgn5I+WZa/PaeB2VX/M1ACrqCj2/m4I=
Subject key identifier:   C4:44:6E:D3:B2:E3:01:83:ED:DF:A5:9C:01:55:6B:D3:E2:56:B6:DB
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1985
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/xERu07LjAYPt36WcAVVr0-JWtts.roa
Signing time:             Sat 22 Oct 2022 06:06:38 +0000
ROA not before:           Sat 22 Oct 2022 06:06:38 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24164
IP address blocks:        124.6.8.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6533 (0x1985)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Oct 22 06:06:38 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=C4446ED3B2E30183EDDFA59C01556BD3E256B6DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:09:a0:ca:ea:54:c5:8a:4a:81:04:93:cd:27:
                    c0:f0:e9:b1:d3:50:6e:8b:10:a3:ae:78:d9:7b:9c:
                    1c:6d:a4:15:42:cf:e4:91:cc:4a:6e:be:8c:cf:0a:
                    b7:22:ac:37:6c:4d:10:69:fc:cb:e0:96:c2:c5:3b:
                    d5:1c:65:c1:15:fa:9b:f4:f7:ca:e8:cb:1a:29:36:
                    ff:33:6a:18:d2:7f:34:ad:16:91:a5:1a:84:c7:db:
                    51:af:64:16:39:fc:9d:5a:d5:58:c6:5b:90:73:cf:
                    10:5d:df:db:7c:bd:75:b9:e2:64:62:cb:54:d8:82:
                    1e:ae:7c:6d:e3:88:45:71:87:79:51:b6:41:1e:57:
                    a2:7f:52:1f:59:d8:9a:ea:fa:9d:77:3f:0c:38:3e:
                    75:f6:be:fb:58:24:11:66:c1:15:61:3f:2a:c3:bf:
                    f4:9b:2e:91:30:4d:43:85:36:62:f4:5c:c9:8a:e5:
                    82:ce:66:2d:88:9c:5c:b5:48:86:cc:53:7e:cf:37:
                    a5:e5:b4:c9:6c:18:71:ea:d4:11:b4:5f:05:c8:69:
                    70:41:b2:64:70:7d:34:eb:4a:e4:15:e5:89:1d:43:
                    9c:99:1f:8d:6f:fc:77:0d:f8:59:cf:95:5e:dd:f2:
                    3d:24:02:21:74:b0:f1:c5:be:01:e9:2c:98:27:4d:
                    15:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:44:6E:D3:B2:E3:01:83:ED:DF:A5:9C:01:55:6B:D3:E2:56:B6:DB
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/xERu07LjAYPt36WcAVVr0-JWtts.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.6.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:aa:75:b7:8a:30:db:10:3d:11:2f:32:12:52:59:09:a9:ed:
         76:36:32:3f:e6:d1:86:42:ab:06:62:d5:9f:63:fe:a9:82:9f:
         85:50:40:a4:07:d3:e5:72:0f:20:10:cd:92:95:de:b7:ac:d5:
         8e:f5:39:d5:1e:58:cd:07:f8:12:6d:9b:a2:04:b1:9b:14:d6:
         be:85:bc:7d:e6:5e:86:5d:52:04:a4:25:0f:d6:6f:8c:ab:bc:
         de:87:52:98:79:27:49:b6:98:b1:df:c0:47:c1:0e:32:d3:11:
         9a:1e:c0:e9:0f:28:97:d9:10:db:f2:d8:56:8e:1a:53:33:3b:
         d9:ea:5f:91:20:87:3d:49:67:28:91:62:b6:68:66:8b:14:c4:
         af:0d:a3:c3:56:9a:4a:76:fb:46:e9:0f:ad:05:45:fc:2f:55:
         9d:9d:ef:98:a0:40:bf:ad:7b:ae:f0:e7:58:0d:d7:30:3c:40:
         f3:bd:33:37:eb:d2:43:5b:39:c8:fb:03:1d:7f:ca:dc:60:d0:
         81:a0:35:39:91:10:40:95:28:d0:c6:c6:01:29:aa:e3:6d:0e:
         90:e9:c0:99:5b:f2:5a:cf:3e:dc:a7:92:34:ea:ea:89:14:6f:
         e2:70:b5:76:a2:9d:b2:42:da:3b:c4:bc:7e:93:f8:9b:cf:70:
         0f:ea:60:52
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGYUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjEwMjIw
NjA2MzhaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEM0NDQ2RUQzQjJFMzAx
ODNFRERGQTU5QzAxNTU2QkQzRTI1NkI2REIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCrCaDK6lTFikqBBJPNJ8Dw6bHTUG6LEKOueNl7nBxtpBVCz+SR
zEpuvozPCrcirDdsTRBp/MvglsLFO9UcZcEV+pv098royxopNv8zahjSfzStFpGl
GoTH21GvZBY5/J1a1VjGW5BzzxBd39t8vXW54mRiy1TYgh6ufG3jiEVxh3lRtkEe
V6J/Uh9Z2Jrq+p13Pww4PnX2vvtYJBFmwRVhPyrDv/SbLpEwTUOFNmL0XMmK5YLO
Zi2InFy1SIbMU37PN6XltMlsGHHq1BG0XwXIaXBBsmRwfTTrSuQV5YkdQ5yZH41v
/HcN+FnPlV7d8j0kAiF0sPHFvgHpLJgnTRWrAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUxERu07LjAYPt36WcAVVr0+JWttswHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3hFUnUwN0xqQVlQdDM2V2NB
VlZyMC1KV3R0cy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ8
BggwDQYJKoZIhvcNAQELBQADggEBAC6qdbeKMNsQPREvMhJSWQmp7XY2Mj/m0YZC
qwZi1Z9j/qmCn4VQQKQH0+VyDyAQzZKV3res1Y71OdUeWM0H+BJtm6IEsZsU1r6F
vH3mXoZdUgSkJQ/Wb4yrvN6HUph5J0m2mLHfwEfBDjLTEZoewOkPKJfZENvy2FaO
GlMzO9nqX5Eghz1JZyiRYrZoZosUxK8No8NWmkp2+0bpD60FRfwvVZ2d75igQL+t
e67w51gN1zA8QPO9Mzfr0kNbOcj7Ax1/ytxg0IGgNTmREECVKNDGxgEpquNtDpDp
wJlb8lrPPtynkjTq6okUb+JwtXainbJC2jvEvH6T+JvPcA/qYFI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org