Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Ii5t3vA2ba-lNC9qniuRPDIxvqo.roa
File:                     Ii5t3vA2ba-lNC9qniuRPDIxvqo.roa (raw, json)
Hash identifier:          O5++c94pRk4aQr8S2RcCNAZn8Zd6fOZzf8QultrNcaY=
Subject key identifier:   22:2E:6D:DE:F0:36:6D:AF:A5:34:2F:6A:9E:2B:91:3C:32:31:BE:AA
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1283
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Ii5t3vA2ba-lNC9qniuRPDIxvqo.roa
Signing time:             Wed 29 Sep 2021 02:54:40 +0000
ROA not before:           Wed 29 Sep 2021 02:54:40 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24164
IP address blocks:        211.76.79.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4739 (0x1283)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:54:40 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=222E6DDEF0366DAFA5342F6A9E2B913C3231BEAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3f:b0:6a:6a:64:a0:1d:23:9e:80:f3:b0:4d:
                    d8:3a:30:55:2b:d6:35:da:af:97:16:73:15:f7:a5:
                    10:8b:9b:ca:c6:f7:e5:66:44:bd:33:49:0e:ce:8a:
                    8d:e1:fb:52:e7:22:39:77:27:92:90:17:40:ee:d2:
                    f4:95:37:e0:23:49:b2:f8:8e:af:95:e8:f1:34:99:
                    6f:cf:0b:21:23:95:39:69:73:cf:82:2d:08:20:6c:
                    74:f7:df:4b:b9:52:a5:51:6a:81:87:bc:8c:3c:52:
                    71:6c:bb:50:81:7b:8e:75:e2:ca:af:e8:3e:b3:7a:
                    53:ad:f8:d5:eb:8f:7f:52:89:58:e8:3a:35:0a:61:
                    0a:8d:7a:35:60:2a:97:b0:b0:81:4f:d2:1e:11:e7:
                    fb:8e:02:b4:f4:1a:0c:19:7e:81:80:c3:68:97:f6:
                    46:d0:54:89:46:a4:b2:30:46:6d:93:3e:29:57:a9:
                    06:3e:92:2c:94:81:d8:4e:88:00:01:41:68:cb:fc:
                    72:78:6e:86:9a:87:bc:2a:13:ac:a1:8e:7f:03:af:
                    ba:11:11:80:18:7b:e5:29:bb:ee:c8:91:de:79:75:
                    a3:db:ef:38:d9:bc:31:bd:89:1c:e9:0f:11:f7:3e:
                    a3:5d:ae:a8:5b:18:6c:44:e5:44:e9:80:c5:c7:32:
                    5c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:2E:6D:DE:F0:36:6D:AF:A5:34:2F:6A:9E:2B:91:3C:32:31:BE:AA
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Ii5t3vA2ba-lNC9qniuRPDIxvqo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:3e:82:1a:0f:12:26:a1:f1:4b:44:41:f1:9f:6f:98:e8:0b:
         b4:d1:62:be:c9:3d:3c:f2:e2:f7:0d:1a:32:ee:fe:79:69:6c:
         85:c9:9f:e5:86:fd:de:10:76:29:26:5e:59:e5:c5:c7:ab:39:
         20:aa:e5:ba:c8:f2:1f:95:61:67:4d:ea:0a:69:87:2b:96:54:
         9f:67:68:f3:62:3f:f8:c0:d2:26:9b:32:ca:46:c7:de:16:c8:
         be:95:64:8f:65:4f:0b:bd:8b:91:f6:27:a3:03:5d:d9:5d:4c:
         96:e7:a1:5f:ae:62:9d:94:11:17:46:68:31:6d:c1:47:0d:b0:
         fb:a6:9b:8d:f1:b9:cc:da:ec:fc:a7:30:60:67:c6:46:d9:41:
         05:e5:19:10:f4:b3:61:2f:2b:9c:6a:6a:5d:f5:94:86:6f:89:
         26:0a:66:36:31:4b:16:13:cd:35:f7:66:c0:55:2d:fd:44:85:
         a6:30:d8:6c:63:5f:93:88:5e:92:5a:86:68:ac:71:fb:c2:97:
         9e:55:56:25:89:b9:3f:34:bc:d8:fa:eb:61:04:c5:43:1b:61:
         8e:c4:94:e9:38:b9:fd:0d:e2:d6:0c:35:9d:99:4b:00:1a:ef:
         91:bd:8e:b9:69:d2:15:d8:29:60:21:b9:0c:e4:c9:d9:29:89:
         63:37:9e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----