Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/2wtMFaxrTi4gwt1A5FovFc7iuk4.roa
File:                     2wtMFaxrTi4gwt1A5FovFc7iuk4.roa (raw, json)
Hash identifier:          4m58bCnb1qVPMf6Z3rWKslULWJWBy8rxIbQrSbE5tmY=
Subject key identifier:   DB:0B:4C:15:AC:6B:4E:2E:20:C2:DD:40:E4:5A:2F:15:CE:E2:BA:4E
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1242
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/2wtMFaxrTi4gwt1A5FovFc7iuk4.roa
Signing time:             Wed 29 Sep 2021 02:54:22 +0000
ROA not before:           Wed 29 Sep 2021 02:54:22 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24164
IP address blocks:        119.77.194.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4674 (0x1242)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:54:22 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=DB0B4C15AC6B4E2E20C2DD40E45A2F15CEE2BA4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9d:94:b5:c2:52:30:45:52:02:26:f7:0e:87:
                    f4:5a:e3:82:b3:4d:c8:29:23:9e:7b:75:c0:ed:d2:
                    a8:11:0a:49:6a:50:5a:86:55:c2:a8:a0:cb:35:92:
                    c1:dc:ad:41:bc:d2:ba:53:37:12:5a:fa:9d:84:9b:
                    39:7c:7f:1c:f1:86:7b:7e:32:c5:78:5b:34:a4:21:
                    57:46:b3:d9:ca:9a:fb:d4:09:01:0d:43:1b:64:ca:
                    49:f5:b2:e3:65:d3:f3:24:e4:97:05:de:46:2f:ff:
                    76:b2:22:40:30:df:50:96:dd:16:1f:d6:39:d9:92:
                    61:8e:cd:4e:bd:cf:95:18:62:34:2a:08:db:5e:f2:
                    5d:f2:b4:48:12:41:f8:5d:75:4c:68:6c:a7:b4:d2:
                    e4:d4:f9:5c:16:47:f6:64:01:d1:a0:90:e5:c2:b6:
                    a4:ce:1b:a5:98:b7:a3:f4:45:52:90:84:aa:ea:59:
                    99:4e:eb:e5:b2:fd:7a:e8:d4:39:b1:4f:2b:f8:6d:
                    ab:74:4b:c8:af:aa:11:b1:66:8c:d9:dd:75:16:d4:
                    a6:4c:90:95:3d:87:73:da:8c:34:be:f4:c6:ef:10:
                    0d:08:9a:ab:03:f5:7a:9a:e3:37:36:4c:88:74:4b:
                    26:c1:e7:d7:cc:ea:fa:2e:38:03:64:fe:dc:17:e9:
                    aa:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:0B:4C:15:AC:6B:4E:2E:20:C2:DD:40:E4:5A:2F:15:CE:E2:BA:4E
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/2wtMFaxrTi4gwt1A5FovFc7iuk4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.77.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:a3:fa:d0:8e:9f:42:9a:be:7c:89:ea:9b:3e:99:04:9b:e8:
         f3:49:af:79:5c:72:7a:07:79:4b:b6:88:b1:18:81:49:48:04:
         da:5a:92:65:ff:cd:fd:4b:f2:fe:63:57:91:61:40:97:50:1e:
         9f:21:c8:12:8f:aa:80:24:d4:61:1c:6b:75:74:c3:b5:f6:1f:
         2c:51:ab:da:37:36:39:a5:b0:96:80:75:a2:43:73:5a:6f:f7:
         1f:31:76:96:6e:df:99:23:83:41:3f:74:29:0e:1b:0e:36:e9:
         48:42:a5:d8:27:28:1a:39:02:57:b3:01:00:19:a8:72:46:87:
         b8:b4:da:88:33:8d:57:0c:a8:d8:bf:fc:fd:ad:44:25:a9:8a:
         b0:da:b2:5f:9f:58:a0:da:87:e1:f1:13:05:61:98:54:26:81:
         a7:c8:40:0b:c3:7d:15:b5:b1:4f:69:03:1e:9e:a4:a6:aa:46:
         2c:80:03:a8:f4:f5:9a:6d:ee:b4:cb:f5:df:a4:e1:65:ab:22:
         e5:d3:6d:9c:ab:bb:31:cb:70:83:ee:39:41:4b:fc:27:13:ab:
         c4:f0:fb:83:b2:ef:2f:07:ef:d0:36:a3:61:dc:48:aa:97:7b:
         d8:8b:a1:63:22:56:af:d5:98:6c:55:1a:4b:89:d8:f5:da:39:
         dd:32:23:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----