Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/BK51mI2tKlMACKQKpbW0Eq-nD4o.roa
File:                     BK51mI2tKlMACKQKpbW0Eq-nD4o.roa (raw, json)
Hash identifier:          o7iedK0a5LCBwgrdauV62JPhJ91lAjjVFFxNYUthBKs=
Subject key identifier:   04:AE:75:98:8D:AD:2A:53:00:08:A4:0A:A5:B5:B4:12:AF:A7:0F:8A
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1305
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/BK51mI2tKlMACKQKpbW0Eq-nD4o.roa
Signing time:             Wed 29 Sep 2021 02:55:16 +0000
ROA not before:           Wed 29 Sep 2021 02:55:16 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24164
IP address blocks:        180.218.186.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4869 (0x1305)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:55:16 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=04AE75988DAD2A530008A40AA5B5B412AFA70F8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:bb:ae:b7:c7:28:3c:c7:23:8b:bb:04:9f:16:
                    d1:6d:92:bd:c3:96:e4:c3:2c:70:7e:40:bf:6b:ca:
                    89:03:f0:9a:d4:2c:11:0f:b4:b5:b0:12:b9:49:5b:
                    4e:e5:e2:55:2a:29:41:5a:ac:1e:41:dc:2c:56:2a:
                    fc:6c:53:2f:bf:7d:8d:cc:70:f3:90:a9:d8:23:1b:
                    c7:d1:4b:7c:04:02:80:27:bc:16:5d:98:48:61:db:
                    f1:94:40:16:d5:2f:bd:9c:d6:c6:7e:88:51:c8:0c:
                    7a:a2:0f:1f:b5:f7:de:63:6e:e6:9c:b7:b6:e6:1e:
                    c3:0e:6a:aa:10:61:4e:3a:fa:e3:fb:13:df:27:81:
                    c4:85:a9:94:db:f6:27:92:10:50:37:8f:2c:9a:e5:
                    7f:d3:9d:31:59:40:a4:4b:4f:7e:6a:f9:f0:49:45:
                    4d:b1:4f:66:b9:a6:57:40:f3:64:48:7a:e4:8e:d3:
                    c4:df:23:73:56:71:27:84:5c:0d:66:e1:ea:61:f5:
                    ee:bd:92:6a:1d:7d:42:b3:cf:02:04:33:a8:dc:c7:
                    ba:34:89:cb:0f:e7:63:db:e4:69:64:73:2e:53:46:
                    3b:2b:be:a0:0c:d8:89:74:08:65:fd:6b:40:18:04:
                    26:c6:40:1a:00:f0:90:1e:df:14:40:5a:33:37:00:
                    0a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:AE:75:98:8D:AD:2A:53:00:08:A4:0A:A5:B5:B4:12:AF:A7:0F:8A
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/BK51mI2tKlMACKQKpbW0Eq-nD4o.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:61:13:03:4d:76:b3:93:a4:55:05:d9:c1:3d:4b:4a:6a:5a:
         ca:62:39:83:48:c9:50:ea:44:d0:69:79:e4:7c:02:9d:c3:4d:
         4d:36:c3:63:01:8b:4b:06:0c:a7:e6:ec:e3:5d:8e:14:ac:cb:
         91:72:42:aa:64:19:0f:71:17:a7:ad:38:62:0f:95:6f:a5:5f:
         1b:86:28:86:f6:ca:bc:67:85:88:ff:73:31:50:74:2b:56:63:
         67:53:b2:ec:c3:6b:c9:db:05:cd:31:dd:79:39:cf:05:f0:e0:
         b2:20:e4:be:68:85:ca:40:b7:86:82:a5:74:5d:e3:2f:ce:6a:
         1b:9d:1c:d2:82:1e:cf:6d:60:81:df:cb:67:56:28:74:63:d9:
         89:37:86:01:01:a9:d2:34:e5:ca:fb:b8:93:4a:01:c0:80:d2:
         e5:7c:c4:d6:bb:6c:53:7a:b7:61:36:26:7e:ad:67:1e:dc:36:
         64:bf:dd:ec:23:bb:49:7c:7f:a8:7d:ab:19:f1:05:55:3b:c6:
         4c:75:f9:85:78:41:26:bd:14:ae:cb:9e:67:90:44:e4:1b:91:
         68:b7:e5:d3:28:e4:27:c6:6e:a2:51:e6:25:a8:6e:28:4e:09:
         24:36:54:56:61:c4:8d:0c:44:6a:84:ee:dd:8b:71:e0:18:5e:
         6e:8a:05:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----