Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FVxCbiW1o_xZjn4otA8JxVBSurs.roa
File:                     FVxCbiW1o_xZjn4otA8JxVBSurs.roa (raw, json)
Hash identifier:          YcljjyJVUxhcZkZTNgISnu3YdgPJQqcCXRjg5UfJr3U=
Subject key identifier:   15:5C:42:6E:25:B5:A3:FC:59:8E:7E:28:B4:0F:09:C5:50:52:BA:BB
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0BA0
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FVxCbiW1o_xZjn4otA8JxVBSurs.roa
Signing time:             Tue 29 Sep 2020 10:08:38 +0000
ROA not before:           Tue 29 Sep 2020 10:08:38 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        45.64.32.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2976 (0xba0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:08:38 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=155C426E25B5A3FC598E7E28B40F09C55052BABB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:55:0e:8d:fb:e8:f7:54:2f:b2:a2:67:fd:a8:
                    3b:da:5f:48:fd:d2:c4:e6:07:01:31:7b:77:f1:61:
                    86:b5:2a:71:1d:0e:22:48:8a:6a:a0:36:be:bd:77:
                    e3:ec:64:1b:0c:29:6d:63:ab:dd:a7:5e:39:78:4a:
                    88:95:65:f2:e6:97:7e:a4:8d:b4:8a:08:64:72:50:
                    68:30:1c:29:a2:a3:b5:cc:b6:f2:59:35:4a:59:0a:
                    80:8b:c4:c0:66:e6:a6:72:49:91:67:3e:18:45:e5:
                    ce:2d:ae:5d:ac:6f:0e:05:5d:12:bb:a1:49:5e:f3:
                    1a:6b:1b:ae:8b:b3:1e:ca:3e:28:64:8c:df:e8:6f:
                    4f:f4:55:4c:a4:bc:27:f1:a3:2c:38:c9:ba:b5:ee:
                    12:4b:f3:04:9d:0d:e3:40:6a:e0:f3:f6:36:ee:dd:
                    a5:a9:2d:6a:e8:43:b6:8b:e6:ff:3b:39:e7:8e:3b:
                    da:0f:1f:1f:41:c4:58:b2:f5:ce:df:d6:a9:44:ce:
                    3c:88:72:40:91:33:14:e0:d7:66:66:84:5f:99:03:
                    8d:83:19:de:16:bd:10:08:a9:ea:f2:a4:1c:b8:77:
                    7e:99:38:04:94:72:d3:db:df:69:e7:38:43:dd:fd:
                    02:de:40:1e:3e:cc:37:99:3b:e8:f8:a3:2f:6d:f3:
                    41:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:5C:42:6E:25:B5:A3:FC:59:8E:7E:28:B4:0F:09:C5:50:52:BA:BB
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FVxCbiW1o_xZjn4otA8JxVBSurs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.64.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:17:bf:be:fa:7a:c4:2b:4e:54:90:37:35:46:f2:8d:04:4a:
         2d:a3:41:5d:f2:a4:c0:eb:23:b2:f0:23:b3:34:cf:f2:9c:77:
         c9:f4:ab:75:02:57:82:93:cd:9a:31:b6:b7:d7:55:23:85:d5:
         fa:86:47:33:3e:58:ec:37:02:27:78:bc:ae:2f:ac:ec:b3:8d:
         16:f6:93:14:2a:2b:95:d3:bb:ce:03:a7:71:b7:50:83:d6:89:
         9a:be:72:2d:0a:f2:ce:ae:16:9c:c5:f5:b8:fa:6c:1c:f8:66:
         6d:95:ea:3b:34:51:8d:5c:a9:16:87:1f:18:a9:7c:5c:9f:36:
         54:f9:d8:95:d1:b5:1b:d2:3a:3e:25:8f:e4:98:a7:5d:8b:82:
         67:90:4e:9d:65:90:91:ad:47:70:8e:b1:b5:67:28:12:e0:28:
         99:08:8d:10:28:16:71:03:c3:98:71:da:2f:3a:1b:27:60:f2:
         b3:43:1a:22:25:c9:2e:95:96:fe:03:0e:4e:fa:ac:37:88:18:
         2d:bd:77:82:83:d6:b5:fe:18:90:9c:63:7e:34:1b:11:90:2c:
         9c:a7:7a:18:58:e1:03:8f:23:09:fe:6d:04:2f:16:ff:16:d4:
         48:21:1c:b1:e2:8e:7a:ec:d3:2e:3c:d9:ec:1b:10:26:56:a0:
         77:0c:49:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----