Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/0dxWaws4DGjeOoxFItsEEh6tEMg.roa
File:                     0dxWaws4DGjeOoxFItsEEh6tEMg.roa (raw, json)
Hash identifier:          zLY4SjsOm05okoyByqp895i9Jj8B039wU2Ximfcy29w=
Subject key identifier:   D1:DC:56:6B:0B:38:0C:68:DE:3A:8C:45:22:DB:04:12:1E:AD:10:C8
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0F19
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/0dxWaws4DGjeOoxFItsEEh6tEMg.roa
Signing time:             Sun 07 Feb 2021 12:32:52 +0000
ROA not before:           Sun 07 Feb 2021 12:32:52 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        114.198.163.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3865 (0xf19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb  7 12:32:52 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=D1DC566B0B380C68DE3A8C4522DB04121EAD10C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:96:d1:70:36:83:cb:3a:63:40:e0:66:58:29:
                    65:4f:1c:22:0b:5d:81:1f:ee:6b:23:1d:19:81:fe:
                    4b:01:38:4a:72:31:71:6a:34:db:33:57:86:39:3c:
                    92:4f:55:8c:86:a5:f3:da:f9:bf:b1:45:df:0b:e4:
                    0a:38:68:86:a1:5f:f9:fc:77:87:ab:e0:1e:ca:90:
                    65:44:c3:8f:17:03:dc:35:1f:b6:d5:79:c8:cf:50:
                    01:2f:7e:b4:8e:63:64:30:19:73:9f:10:0c:a7:8d:
                    51:66:65:99:d7:f9:da:7d:21:0c:f3:e3:97:a8:fa:
                    56:b1:63:5c:69:92:4d:41:c6:ff:48:95:75:e7:e6:
                    93:14:4a:38:69:40:7d:cb:94:7e:32:e7:58:b3:3f:
                    63:30:e8:03:f4:f4:d7:e9:60:90:9d:48:d7:68:05:
                    a3:8b:bb:7b:0a:ce:17:61:0b:c6:7b:e3:e5:e1:d9:
                    4b:91:1d:ca:10:ee:1d:e2:5a:a6:e2:24:61:db:f4:
                    61:80:27:24:39:95:35:9e:1a:d9:47:6c:a1:d1:aa:
                    89:0f:70:24:bf:2e:f1:aa:45:17:e4:eb:fd:86:cf:
                    3c:3e:c3:13:bb:08:76:bf:32:b9:44:e2:6a:c2:a3:
                    d7:7a:35:d9:ec:d2:53:d7:bf:64:41:e9:d5:4a:cf:
                    6e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:DC:56:6B:0B:38:0C:68:DE:3A:8C:45:22:DB:04:12:1E:AD:10:C8
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/0dxWaws4DGjeOoxFItsEEh6tEMg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.198.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:89:2d:97:fc:4a:48:f4:ed:4f:53:64:e5:a9:9a:92:43:45:
         51:47:b8:3f:0e:53:4b:2d:74:7e:73:17:fa:3b:80:8d:7d:61:
         c7:de:9f:d9:9e:c3:0e:19:0f:5a:55:5f:b4:db:89:33:e5:39:
         66:eb:b4:ef:5f:22:04:e3:6e:38:df:80:69:2d:a3:ab:77:28:
         4a:32:78:14:b0:2d:f2:5b:e7:d1:c9:e1:92:4e:3a:de:09:f4:
         79:75:30:1f:21:51:8a:5e:e0:72:25:34:b8:7c:bb:9e:9f:8e:
         05:19:e0:9d:de:55:fd:7c:df:e8:be:97:3a:ee:9f:65:fd:d4:
         00:86:b9:a0:ee:a1:3c:76:4c:82:41:5a:2a:56:18:92:2f:77:
         db:ba:39:19:99:f2:43:dd:da:ed:d4:21:08:69:d5:63:2f:22:
         1d:f0:51:7f:b8:64:21:f2:ca:eb:e1:48:44:b1:a5:8c:56:9b:
         f0:cd:f3:b4:b7:57:16:50:c0:8b:64:02:3b:55:0b:3f:31:c5:
         36:6d:9f:33:2c:54:38:17:00:21:cb:1c:83:e4:fc:8a:08:ac:
         dd:86:04:f8:b5:9d:c5:fa:e8:7c:9c:14:79:b8:36:24:1f:0a:
         6e:65:89:9b:49:cc:0a:db:16:83:19:03:87:e0:28:e5:dd:20:
         45:9d:2d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----