Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/BUJs6IiFEJ6_Ss9SsweKUg4M9l8.roa
File:                     BUJs6IiFEJ6_Ss9SsweKUg4M9l8.roa (raw, json)
Hash identifier:          3JP1DYu1uxn1GQwgrL//m4ZcVh55jpcNR4uShQt6nbk=
Subject key identifier:   05:42:6C:E8:88:85:10:9E:BF:4A:CF:52:B3:07:8A:52:0E:0C:F6:5F
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0B70
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/BUJs6IiFEJ6_Ss9SsweKUg4M9l8.roa
Signing time:             Tue 29 Sep 2020 10:08:25 +0000
ROA not before:           Tue 29 Sep 2020 10:08:25 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24165
IP address blocks:        115.165.248.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2928 (0xb70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:08:25 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=05426CE88885109EBF4ACF52B3078A520E0CF65F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:4c:a4:b0:c5:f2:dc:f0:cf:8e:aa:79:49:4c:
                    17:be:33:ab:99:01:01:a5:b6:63:0b:33:10:b6:83:
                    5b:51:8f:1e:af:41:8d:ec:e0:49:9e:1f:89:0e:e2:
                    6f:c8:ac:4c:1f:94:91:af:44:d3:be:ed:0c:bb:2a:
                    be:1c:e2:9d:a6:62:54:8a:a5:a6:ff:e2:e8:b6:c8:
                    b0:82:57:b3:a3:4f:ad:f9:4a:a8:ea:a1:ed:ec:9e:
                    7e:e9:87:dc:a3:ba:47:cf:52:c5:2d:f4:4e:f3:de:
                    b5:75:92:22:f2:f6:03:65:7c:2d:68:4a:ef:7a:73:
                    b9:a1:f5:dc:9b:a4:2e:fd:d8:66:75:12:ac:af:be:
                    6c:de:5f:15:0b:a0:83:00:38:f8:03:e8:dc:e9:d5:
                    d6:5c:c0:3d:41:6a:04:c7:b0:b2:01:36:b1:68:d8:
                    2f:b9:14:e4:37:3d:8c:da:ae:5d:80:4e:18:c6:47:
                    34:8b:79:5e:4c:8c:e0:29:25:b7:ad:8b:84:39:f4:
                    50:18:a2:fb:6e:36:3c:89:e9:29:f7:00:05:ea:8c:
                    bc:9b:44:8b:86:ba:54:22:2f:a6:89:ef:42:51:7d:
                    4c:71:d8:eb:ab:79:82:1b:10:97:86:bd:90:37:42:
                    ab:12:fa:e7:ad:8b:a9:12:be:c8:e7:bc:92:c6:d4:
                    53:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:42:6C:E8:88:85:10:9E:BF:4A:CF:52:B3:07:8A:52:0E:0C:F6:5F
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/BUJs6IiFEJ6_Ss9SsweKUg4M9l8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.165.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         88:20:19:38:1f:1e:8f:2a:28:4b:ea:cd:30:90:4b:5f:a9:a6:
         90:b1:73:87:3f:53:9b:9d:42:3e:9a:ba:23:c8:d6:48:e8:59:
         6d:5f:1d:70:dc:93:b7:f1:bf:1d:dc:1f:55:ce:13:11:03:d8:
         b9:7b:7f:b0:3e:95:ca:11:5d:4c:8d:1a:da:f9:45:de:c5:59:
         2e:dd:0c:78:5b:38:26:fd:48:6b:60:97:97:56:d3:70:7d:55:
         2f:13:3e:4f:9b:e2:5a:04:e3:81:14:28:b3:70:4e:d0:d9:cc:
         16:de:3f:f8:88:da:39:40:13:ea:14:b1:70:f4:d3:04:14:76:
         de:50:9f:45:86:c5:83:4b:0e:da:1b:82:8c:8d:d2:74:cd:5a:
         15:4d:ef:a7:2e:74:e8:02:66:85:5a:49:49:07:6b:60:c4:6f:
         e0:cb:f4:3d:1e:00:e8:9f:fc:31:74:53:d4:36:71:b5:0f:65:
         6c:5e:6a:26:a4:b9:a3:f0:aa:92:99:1f:8c:b4:83:fb:a8:22:
         b1:2b:93:fa:42:03:b6:da:ac:88:f6:58:81:db:bd:fb:0b:2e:
         bb:53:d5:da:4a:80:83:cf:00:d6:c5:02:b2:55:f1:76:07:e2:
         f7:c2:72:08:82:08:bb:12:0a:d1:51:62:9e:c7:ee:df:f3:80:
         5a:75:c8:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----