Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/9UFXo3y56331toaO31zC499pw58.roa
File:                     9UFXo3y56331toaO31zC499pw58.roa (raw, json)
Hash identifier:          bQBFni/+QuGhgt9vg1aSDwSUagUjaYxyN6p6Vorwgig=
Subject key identifier:   F5:41:57:A3:7C:B9:EB:7D:F5:B6:86:8E:DF:5C:C2:E3:DF:69:C3:9F
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/9UFXo3y56331toaO31zC499pw58.roa
Signing time:             Thu 15 Sep 2022 02:36:20 +0000
ROA not before:           Thu 15 Sep 2022 02:36:20 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24165
IP address blocks:        115.165.220.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5374 (0x14fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 15 02:36:20 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=F54157A37CB9EB7DF5B6868EDF5CC2E3DF69C39F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5b:05:ab:60:cd:a4:54:12:5f:19:dc:68:43:
                    77:87:6a:ae:1b:6d:e5:8a:49:94:73:36:1a:39:5c:
                    5a:55:9e:1b:b1:16:a9:bf:e3:92:13:3b:2d:9b:bb:
                    a3:b5:56:ca:75:76:d2:3a:bc:67:50:9a:25:9c:dd:
                    61:54:69:f6:0a:e6:68:21:40:a3:49:5b:08:b0:95:
                    85:6f:c8:fb:d0:3a:99:61:55:63:5c:25:cd:ca:28:
                    0c:95:c1:75:17:3c:72:70:01:20:9c:c8:ba:43:c6:
                    8c:ee:b5:e6:51:2b:85:34:7b:08:4c:7c:00:b5:27:
                    37:6b:a5:00:4c:64:5a:80:e7:53:48:fa:91:df:81:
                    f9:49:3e:47:0a:b0:ad:b2:15:59:a9:96:67:f3:a1:
                    ec:5e:4e:4c:6c:97:2d:07:db:e9:5b:05:b1:b1:47:
                    20:c8:94:02:cf:c7:a3:a3:2e:26:52:b1:da:0c:e0:
                    03:45:33:dd:65:ab:3c:df:8a:f9:42:ef:05:25:1b:
                    bb:07:2e:46:34:6f:9e:25:90:3c:93:e9:01:65:c9:
                    00:3a:1b:99:d5:32:93:62:94:71:7d:9d:8f:79:8d:
                    0a:47:da:8e:86:32:96:ae:80:31:1d:36:8d:dc:2d:
                    59:e2:63:1c:53:b8:84:80:b6:73:4f:a5:99:30:7d:
                    04:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:41:57:A3:7C:B9:EB:7D:F5:B6:86:8E:DF:5C:C2:E3:DF:69:C3:9F
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/9UFXo3y56331toaO31zC499pw58.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.165.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:42:53:82:48:58:9a:9a:a5:22:07:97:4a:02:67:2e:9d:d0:
         5a:ac:76:75:cd:b4:7e:60:9d:37:80:7c:9e:58:ad:cb:75:03:
         26:63:84:e5:ff:32:e4:64:4d:c6:a5:c0:a5:9f:e2:23:6b:52:
         28:df:f7:93:fa:cd:7a:d5:3a:9b:51:a3:48:4c:79:f9:0f:5c:
         a5:c6:fb:f0:b0:f1:ad:41:6c:1c:08:bf:16:f0:48:5d:95:34:
         bd:a6:25:44:eb:25:13:34:69:bd:94:75:00:0f:4f:d7:8d:2d:
         06:0e:9f:76:62:6b:7c:6d:af:79:97:01:68:a3:9f:1f:07:16:
         ca:b6:7b:85:3f:55:4e:69:b6:70:49:be:09:6c:30:30:7b:83:
         f8:82:f7:cf:d6:1f:b7:1b:7e:ea:08:d9:28:b1:72:a9:b6:26:
         3f:f4:cd:e5:b3:47:d3:31:49:07:62:92:8f:d4:c0:3c:25:0e:
         9c:1b:62:d9:5d:f9:99:20:0f:b6:01:a9:fc:ac:18:88:c8:9a:
         c1:70:51:eb:82:13:97:cc:f0:31:24:4b:c0:81:56:e9:a7:e9:
         fd:df:fa:6f:d0:20:73:f3:bc:9b:b8:27:42:b6:10:c6:29:46:
         7d:4f:03:9c:0b:09:6b:a6:c4:cf:ca:03:6c:96:fe:33:9a:e9:
         7a:e7:f1:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----