Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6CsO_P5WgDJW7RrFJrSIXbsBa20.roa
File:                     6CsO_P5WgDJW7RrFJrSIXbsBa20.roa (raw, json)
Hash identifier:          jx4+u36LY49V6xRISwy4wgEFRnkYLqY3tZge5nZMFgo=
Subject key identifier:   E8:2B:0E:FC:FE:56:80:32:56:ED:1A:C5:26:B4:88:5D:BB:01:6B:6D
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0B07
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6CsO_P5WgDJW7RrFJrSIXbsBa20.roa
Signing time:             Tue 29 Sep 2020 10:07:55 +0000
ROA not before:           Tue 29 Sep 2020 10:07:55 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        180.218.128.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2823 (0xb07)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:07:55 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=E82B0EFCFE56803256ED1AC526B4885DBB016B6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:df:71:73:70:9b:0d:83:3f:49:8a:15:aa:c3:
                    6c:75:01:b2:bd:3a:d3:d5:77:e1:d9:96:48:44:3c:
                    99:a3:b3:e1:bc:89:15:27:97:b9:d5:64:7c:a8:19:
                    9c:c1:05:db:4e:45:81:cb:bc:84:79:8d:20:24:f5:
                    55:39:01:b1:50:af:e5:2f:0b:8a:31:c6:d4:e0:99:
                    36:05:92:78:c2:5a:98:2d:13:fa:c4:e4:68:e5:dc:
                    31:f6:41:16:8f:60:ab:81:9a:3a:ed:55:27:35:54:
                    5e:af:f9:6c:2d:37:97:1c:61:84:d2:6b:c3:9b:4e:
                    f9:bf:39:35:c3:6f:f6:61:ac:3d:86:06:8c:b2:ad:
                    53:e2:6a:b7:0a:e1:b8:43:a0:13:5d:9e:50:4e:d0:
                    13:ef:1f:8d:a2:c1:08:ba:cf:b3:ae:18:75:95:c4:
                    75:e9:e1:aa:f5:d4:02:f1:2f:d9:a9:93:a5:d0:c3:
                    35:12:2d:1a:63:86:f0:7f:af:cc:e4:88:34:de:26:
                    f3:c0:af:3f:76:0e:57:fc:65:05:43:65:67:a9:d6:
                    ca:42:a7:fa:cb:20:07:f6:71:70:09:e0:70:5b:91:
                    ed:90:ae:3f:f6:c9:3b:96:46:8e:58:d7:97:08:70:
                    c9:96:a2:20:31:d5:3f:eb:f9:d8:51:08:e0:f2:1c:
                    73:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:2B:0E:FC:FE:56:80:32:56:ED:1A:C5:26:B4:88:5D:BB:01:6B:6D
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6CsO_P5WgDJW7RrFJrSIXbsBa20.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:31:ce:39:bd:f6:37:40:b8:9a:2f:a1:af:71:2d:45:58:6c:
         f2:0a:42:45:e7:8b:47:a1:27:fa:1e:5f:b8:21:f0:ff:e6:2a:
         1e:5a:3e:3f:c4:98:22:62:b5:db:d9:fb:46:ea:73:5d:86:e2:
         0b:86:13:39:4a:d6:f9:be:78:28:24:ee:33:de:33:e0:50:4f:
         b7:b7:78:37:12:c5:38:00:e9:e6:a6:d9:a8:e5:8f:59:ef:20:
         c4:7f:35:27:8a:89:28:7a:35:26:ca:ab:cb:96:60:c3:07:c8:
         66:4f:92:c5:15:82:d2:53:ea:8a:30:eb:1d:f8:35:5e:76:d1:
         9e:62:5e:b5:ab:38:a4:3a:4b:96:59:4f:d0:f7:0b:d4:b8:c6:
         c5:44:9d:7a:0d:71:5e:2c:50:f7:01:4e:4b:ea:29:cf:ce:c0:
         b5:e0:e9:e7:e1:67:3d:ca:1c:5c:82:dd:01:c1:9c:35:00:8d:
         9c:08:d7:6d:ee:b7:d9:d9:d7:9a:a5:ff:5e:c3:c2:5d:38:3b:
         13:3d:29:e0:0d:8b:cf:25:3f:15:af:88:f6:d5:86:b1:93:57:
         da:e8:0f:02:50:ed:92:d8:42:d7:0e:6b:ee:5d:a0:95:0c:25:
         a6:d6:7c:d2:6c:49:e3:92:72:33:19:d9:06:8b:b1:bb:d6:82:
         63:39:0b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----