Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/GblpgvTG2brHk1XSfUdu3X9DB9s.roa
File:                     GblpgvTG2brHk1XSfUdu3X9DB9s.roa (raw, json)
Hash identifier:          /n9tlfFCYNHoMTYcwX+VyjVy+Px+Pg4mRwJtQavPkfk=
Subject key identifier:   19:B9:69:82:F4:C6:D9:BA:C7:93:55:D2:7D:47:6E:DD:7F:43:07:DB
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0D44
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/GblpgvTG2brHk1XSfUdu3X9DB9s.roa
Signing time:             Thu 14 Jan 2021 07:32:32 +0000
ROA not before:           Thu 14 Jan 2021 07:32:32 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24163
IP address blocks:        180.218.245.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3396 (0xd44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Jan 14 07:32:32 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=19B96982F4C6D9BAC79355D27D476EDD7F4307DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:d4:b7:44:00:73:51:e6:fa:a1:4d:15:7b:ea:
                    d1:85:ce:e3:b6:88:f2:f7:59:08:62:87:26:46:a0:
                    43:8a:5d:fb:ab:6e:c4:55:51:2f:b6:fa:ab:83:71:
                    68:fd:b9:c2:d9:c9:26:d1:de:ca:51:ae:7e:67:ed:
                    c9:b3:5c:93:ea:a7:11:eb:be:58:72:2c:b6:20:f1:
                    2a:b5:f3:75:4c:3a:c8:1b:4d:81:1e:8e:a0:0d:d5:
                    f4:45:b2:e0:d4:d5:19:b0:31:32:bc:cd:6d:ef:85:
                    12:69:fd:ca:0c:d8:55:c3:81:85:b3:bf:60:a5:ec:
                    07:45:2b:f7:45:c0:78:87:65:0d:95:2f:5b:d8:0a:
                    e0:df:ba:fa:2a:94:89:1c:a5:15:e1:f4:ce:7a:d9:
                    81:88:a1:2b:80:e7:94:0d:ca:bd:c5:69:73:db:7b:
                    15:e3:86:a6:41:eb:5c:2c:9a:6f:a1:06:50:dc:86:
                    11:af:fd:7c:64:6f:5f:fd:7f:b3:f9:84:e7:56:e2:
                    60:af:2c:e4:4f:60:8b:de:1c:da:87:ad:47:d0:ae:
                    e8:cc:41:10:47:b2:a4:b7:94:86:87:b1:1a:e3:ed:
                    e9:60:ce:4e:91:2e:db:cb:80:43:b0:6c:99:0f:8c:
                    9a:37:6f:ef:3f:38:f9:31:6f:7a:c3:13:f8:0f:1b:
                    6c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:B9:69:82:F4:C6:D9:BA:C7:93:55:D2:7D:47:6E:DD:7F:43:07:DB
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/GblpgvTG2brHk1XSfUdu3X9DB9s.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:8a:28:0e:a4:fb:77:00:c9:28:7b:7d:5b:bb:3a:66:87:74:
         20:fc:d7:bc:4e:38:dd:ed:51:78:2c:da:5b:eb:ca:27:fe:03:
         9b:41:12:23:2c:50:77:88:80:43:91:e0:56:a1:92:0d:d0:88:
         c2:d7:d8:8b:0a:8b:b1:8f:69:cd:bf:57:5a:c3:d9:1c:45:40:
         e0:76:29:69:ee:10:11:2c:a6:5a:29:97:b1:1c:9d:15:d7:c3:
         3f:d3:82:27:92:42:9c:a3:0a:68:e0:4f:e8:37:8e:35:de:fe:
         ec:3f:c0:6c:d9:0e:8b:89:27:6d:7c:a9:8b:41:4c:20:3a:e5:
         8a:76:1d:37:7c:06:1c:fc:c9:7e:db:48:e7:7c:53:e5:37:49:
         91:4e:87:81:dd:a8:3c:bc:c7:28:4e:22:0f:2c:dc:1a:f2:29:
         46:71:b9:1a:da:68:86:14:1d:b7:83:25:05:8d:2b:e7:ca:47:
         da:0b:46:e9:c5:7a:9b:93:55:0b:cf:5b:e0:6c:2d:58:e1:94:
         ba:12:e3:60:4c:71:6e:fc:2c:8d:5e:eb:47:52:3e:bd:01:2b:
         6b:98:83:61:4d:8d:9f:27:44:6e:b1:b3:da:2c:f9:13:c2:d3:
         93:97:d7:e3:a9:a2:8e:2a:7e:7c:71:76:a4:2a:b2:9a:70:0c:
         42:d6:a8:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----