Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/BM7ApP-XceXTUhmGxJ4DH-NO4es.roa
File:                     BM7ApP-XceXTUhmGxJ4DH-NO4es.roa (raw, json)
Hash identifier:          aZ3YoOix8FFM8/mL5MqCkm7VWgwmkqhB+bV9LQL938Y=
Subject key identifier:   04:CE:C0:A4:FF:97:71:E5:D3:52:19:86:C4:9E:03:1F:E3:4E:E1:EB
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       133F
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/BM7ApP-XceXTUhmGxJ4DH-NO4es.roa
Signing time:             Wed 29 Sep 2021 02:55:31 +0000
ROA not before:           Wed 29 Sep 2021 02:55:31 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9924
IP address blocks:        114.198.160.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4927 (0x133f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:55:31 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=04CEC0A4FF9771E5D3521986C49E031FE34EE1EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:45:3f:c8:2a:df:c4:32:4f:cf:6d:6b:4c:e1:
                    15:e0:4a:4f:19:9d:68:63:22:f6:13:dd:1f:5b:43:
                    a2:52:d9:3f:49:e3:04:a6:35:21:27:a7:2d:30:32:
                    d6:9d:8c:e8:39:df:6f:6f:d8:8e:6f:dd:79:28:e5:
                    25:df:be:89:b4:33:ad:b9:a6:9a:3d:db:3e:29:4b:
                    51:f9:23:69:15:56:42:30:42:23:64:02:2e:97:52:
                    85:45:0d:ea:11:37:5e:82:58:7a:cf:a8:f5:d1:28:
                    6c:e0:54:d9:17:b6:8d:85:76:52:79:0f:55:03:ca:
                    39:4e:b4:84:ad:aa:61:72:5a:d3:6d:99:61:04:3f:
                    c8:1e:60:67:ed:24:7c:c1:26:2d:42:43:76:ed:a9:
                    36:48:bc:b5:46:33:88:48:c8:7e:82:b9:90:b5:29:
                    d7:6f:f6:85:32:ca:21:90:37:8f:6a:ad:b9:ef:c5:
                    1e:79:88:b9:cb:ed:40:ee:85:c6:2c:8c:2e:26:15:
                    83:80:cc:51:95:aa:6e:34:f1:1f:ed:0c:26:21:99:
                    41:8b:72:6e:fc:25:48:6c:a7:23:c4:1c:16:11:1a:
                    6c:84:b3:5a:bd:98:55:d9:02:96:ec:48:f8:48:ec:
                    46:2a:d5:4f:7f:85:74:10:7c:e8:2e:f0:7e:26:8f:
                    68:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:CE:C0:A4:FF:97:71:E5:D3:52:19:86:C4:9E:03:1F:E3:4E:E1:EB
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/BM7ApP-XceXTUhmGxJ4DH-NO4es.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.198.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         88:68:0f:d2:de:06:81:87:84:07:28:da:3f:88:77:7e:d7:f9:
         b8:9d:31:e7:9f:14:52:c9:cb:87:bb:fa:29:22:d2:20:21:13:
         0d:1f:34:f0:68:eb:96:37:d8:2c:ac:7d:05:d6:22:00:33:5b:
         9e:a9:cf:be:fe:9b:dc:89:94:90:93:3b:54:4c:af:dd:59:b9:
         1e:f3:6f:24:de:78:b3:af:51:24:d4:47:ce:75:ce:fc:7e:8a:
         b9:e6:64:51:a7:d7:1a:27:a2:2e:e4:87:72:d4:7f:85:8d:ce:
         35:29:fc:77:64:0a:6a:48:87:fe:37:05:2c:59:14:e1:19:7b:
         44:7d:d6:18:8a:6c:d9:02:94:c8:26:ef:bc:03:41:8e:05:76:
         aa:6a:95:ab:09:f5:6d:50:1d:ca:04:67:57:12:17:90:54:80:
         9d:88:33:78:f5:b1:e9:eb:3a:5c:49:f0:5d:94:c8:03:7b:51:
         43:ab:56:cf:03:69:d6:e0:ed:5a:05:ca:82:a7:36:80:03:d4:
         b0:17:a4:97:43:12:32:da:01:61:3f:80:d7:53:5e:d0:d5:44:
         f2:23:04:c0:83:7e:d4:7d:75:68:1d:8b:49:41:78:e2:b2:2a:
         5a:ef:c5:d6:7a:95:05:3b:52:28:90:e3:1e:8f:e3:7d:aa:10:
         6d:e8:3b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----