Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/G3YpZ8f-FtlOnX2XmIVMLTbfUgc.roa
File:                     G3YpZ8f-FtlOnX2XmIVMLTbfUgc.roa (raw, json)
Hash identifier:          EbpgHMM1JPCLaVH6+FTjz6Ym0e6Rp0z1RXa1bcGgGzw=
Subject key identifier:   1B:76:29:67:C7:FE:16:D9:4E:9D:7D:97:98:85:4C:2D:36:DF:52:07
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0F31
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/G3YpZ8f-FtlOnX2XmIVMLTbfUgc.roa
Signing time:             Sun 07 Feb 2021 12:33:13 +0000
ROA not before:           Sun 07 Feb 2021 12:33:13 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24165
IP address blocks:        115.165.216.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3889 (0xf31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb  7 12:33:13 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=1B762967C7FE16D94E9D7D9798854C2D36DF5207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:21:51:d9:1c:8c:9b:b1:63:51:72:6e:da:b6:
                    aa:fe:79:3b:37:13:55:70:08:de:b5:b6:a3:34:98:
                    7c:0d:34:c1:58:6d:c0:af:47:ef:4c:5c:99:2c:96:
                    bf:1c:0d:4c:0b:14:ee:bc:a2:92:d9:42:72:cb:b2:
                    fa:18:81:24:73:45:b3:eb:62:ac:b1:0f:05:8b:7b:
                    3a:72:c3:54:b5:14:36:cf:37:03:f7:22:16:ae:76:
                    08:bb:7e:99:08:2e:ca:fb:47:3f:a7:51:2d:88:d5:
                    80:c3:e7:71:a9:01:97:5e:13:d9:ee:76:99:03:44:
                    2a:fa:25:b9:9d:ec:58:d4:11:fa:52:bc:af:fb:b6:
                    c8:71:61:7a:d1:07:5f:a3:d8:69:2a:32:a9:c4:45:
                    39:16:cf:78:7f:89:47:6a:88:37:9a:f2:91:c3:53:
                    9b:54:28:ca:35:1c:58:e0:5e:ab:fb:78:d7:5f:f2:
                    30:05:ff:99:68:ba:6f:fb:f3:5e:3d:3c:ed:13:aa:
                    4e:c8:e9:dd:b3:86:3d:55:24:b5:7a:49:c4:18:c4:
                    f7:02:60:96:f7:3f:dc:af:1c:8f:59:6b:d2:48:84:
                    86:80:91:26:93:fb:bf:cf:2f:72:5b:38:89:55:27:
                    3f:2c:7d:2c:2a:de:2f:76:71:3e:6b:15:0c:de:55:
                    4c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:76:29:67:C7:FE:16:D9:4E:9D:7D:97:98:85:4C:2D:36:DF:52:07
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/G3YpZ8f-FtlOnX2XmIVMLTbfUgc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.165.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         28:f1:ac:f1:1d:9e:ec:7d:93:b7:93:88:ba:d1:ba:9e:b2:e6:
         fd:71:ef:17:e9:a1:ad:4b:67:15:e2:33:0d:b6:d9:bf:a6:55:
         d2:08:1b:f8:94:80:67:92:f9:fe:b1:5d:2c:86:07:0f:8f:3f:
         c1:ed:94:7d:6b:fa:33:ab:85:af:55:28:a7:e2:94:2e:2f:1d:
         0c:d3:57:1e:71:2b:ce:1f:dd:35:5e:26:ee:26:e3:9a:23:d4:
         3d:9c:c3:1f:d7:71:f3:cb:87:5f:e2:24:92:d8:98:06:06:a4:
         ce:c6:2b:26:80:13:33:6d:27:20:bd:35:c7:e0:70:de:8e:97:
         cf:bf:0b:e6:b2:62:dc:48:1a:e9:51:7e:61:77:fb:05:4e:e7:
         46:15:bb:28:dc:7f:9c:40:cf:b3:a7:c9:bc:b4:d6:2b:af:7d:
         bb:89:dd:8b:dc:a1:e6:c1:67:70:47:02:73:f0:71:37:00:ef:
         e2:92:68:f2:a7:f1:46:8f:0f:a8:20:4a:c6:cd:fb:6e:84:7a:
         10:b3:34:bf:99:7d:b4:6d:d9:7f:74:10:ae:0b:e1:34:6e:ed:
         0e:81:95:7e:b2:47:b2:31:ce:7a:3e:65:b3:b6:27:b2:8e:0d:
         a4:56:7c:f9:3e:4c:8a:8e:8b:bd:e5:cf:d6:2e:a7:14:5e:88:
         8a:63:33:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----