Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/EMZIFPPnTGI26RRmF0WDe2_qsRE.roa
File:                     EMZIFPPnTGI26RRmF0WDe2_qsRE.roa (raw, json)
Hash identifier:          gDSjSxSSnfpQ2oTWwk0+tu1NjTMiAKH2oPyifZNuw0Q=
Subject key identifier:   10:C6:48:14:F3:E7:4C:62:36:E9:14:66:17:45:83:7B:6F:EA:B1:11
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0BC6
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/EMZIFPPnTGI26RRmF0WDe2_qsRE.roa
Signing time:             Tue 29 Sep 2020 10:08:49 +0000
ROA not before:           Tue 29 Sep 2020 10:08:49 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        119.77.246.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3014 (0xbc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:08:49 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=10C64814F3E74C6236E914661745837B6FEAB111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:d7:99:dc:c1:56:e0:2a:b9:b2:9b:51:2c:a4:
                    6c:a0:7a:64:11:e9:25:bd:64:96:a4:ee:c3:2e:c3:
                    4b:d1:12:6b:0b:69:40:2c:48:5d:2b:ce:1b:4e:50:
                    2e:23:f5:d7:e3:48:1d:44:58:01:19:82:22:b4:ba:
                    15:40:58:d5:62:fb:a7:e5:54:40:ba:e1:c4:9e:60:
                    78:e5:1c:c5:7e:33:6f:8a:0d:0c:1b:25:18:78:43:
                    95:f9:cc:44:72:d4:14:ed:18:38:5e:d9:29:12:48:
                    a5:70:45:ae:e0:a9:61:fc:3a:9d:b0:02:f6:9b:3b:
                    91:d8:a3:22:57:a4:f1:77:58:fc:f7:fe:9f:4c:5e:
                    84:1b:db:9a:a7:7b:19:85:f5:4f:fc:e7:8f:87:28:
                    8e:d0:4c:84:bf:99:bd:26:44:7e:b0:ba:10:b4:24:
                    a9:ee:3f:86:5e:52:43:49:a7:ce:7c:7f:b0:8a:86:
                    f8:01:1a:e0:11:45:1f:0b:31:b4:c9:19:bb:e3:5c:
                    f5:9f:6e:ed:24:e6:26:c9:03:21:03:d2:29:72:b6:
                    d7:68:85:69:61:19:03:1b:ab:53:2a:fa:16:3b:57:
                    b2:20:57:d4:35:17:e6:a9:a4:a0:a4:b0:32:7e:30:
                    6a:06:4f:87:fb:aa:18:ca:6d:f7:cb:83:4c:23:80:
                    91:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:C6:48:14:F3:E7:4C:62:36:E9:14:66:17:45:83:7B:6F:EA:B1:11
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/EMZIFPPnTGI26RRmF0WDe2_qsRE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.77.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:90:22:a4:33:01:9d:78:ce:da:12:79:ca:4a:8f:06:51:dd:
         e2:87:4a:5c:58:f1:c1:78:59:82:61:a6:5e:28:a5:e1:d5:7a:
         82:8b:7e:90:54:3d:31:69:0a:7d:24:42:ef:82:c6:65:6a:b0:
         79:1d:42:9c:33:62:7d:84:05:95:b1:b5:92:c7:a6:cc:fc:30:
         03:c5:75:60:7e:e8:f2:04:99:a7:07:d1:85:f8:b7:43:75:8e:
         1b:e7:0c:e7:72:dd:fe:d9:db:26:64:d8:00:be:9d:b5:25:09:
         98:51:bd:fc:07:ea:4d:6d:6e:01:4a:bf:a0:b9:81:1e:59:57:
         53:18:8c:82:d7:d3:eb:e7:a9:39:98:0f:23:e8:7b:58:24:7a:
         df:c8:56:38:73:d3:d9:a6:fd:b1:f7:d4:52:1e:1d:cd:6d:21:
         58:70:6f:ab:7c:f2:f9:5f:23:eb:c4:fc:21:45:26:f0:62:24:
         44:8b:ad:2f:aa:87:12:b5:52:41:48:1f:33:e4:aa:e6:39:21:
         ca:0a:47:8f:6e:b3:bf:73:93:9a:53:41:5b:a0:c1:17:b8:02:
         7b:9c:12:cd:cf:4e:6c:20:f0:b4:a6:49:41:b9:23:e1:ce:ff:
         e4:44:ac:81:7f:5a:4f:84:3a:bd:12:6e:85:6d:c4:58:af:31:
         f1:b6:ed:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----