Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/GeWlLV8al5MkscXekFz-gH7iYww.roa
File:                     GeWlLV8al5MkscXekFz-gH7iYww.roa (raw, json)
Hash identifier:          ol+0HMYTQy4nEpafmROMqK0pDG7sT/ShlcKlnR/QyrQ=
Subject key identifier:   19:E5:A5:2D:5F:1A:97:93:24:B1:C5:DE:90:5C:FE:80:7E:E2:63:0C
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       110F
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/GeWlLV8al5MkscXekFz-gH7iYww.roa
Signing time:             Sun 07 Feb 2021 13:03:22 +0000
ROA not before:           Sun 07 Feb 2021 13:03:22 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        124.6.8.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4367 (0x110f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb  7 13:03:22 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=19E5A52D5F1A979324B1C5DE905CFE807EE2630C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:f4:bc:da:21:95:36:ed:c8:96:4a:77:79:3d:
                    e4:a0:00:b8:00:8c:e3:70:31:5e:67:56:c5:91:02:
                    5d:7c:54:9f:c3:8a:37:31:52:c5:a1:4a:2a:84:bf:
                    e0:30:ba:52:4f:94:7a:70:87:3b:d5:8a:34:4d:12:
                    5d:3b:94:d1:c4:26:7c:7c:f3:49:f5:d1:bf:23:c9:
                    35:f9:e1:6f:4b:7a:e4:7c:82:59:5d:ec:45:64:b5:
                    3b:d5:40:fe:de:e3:36:83:88:9e:3c:a8:74:30:83:
                    20:51:b4:c0:5c:39:34:38:21:d3:6a:cd:99:30:b3:
                    f6:6e:b1:92:28:21:12:85:c7:4c:46:f0:02:e5:8c:
                    e2:8d:58:68:4d:58:40:e2:86:f4:2a:a7:b9:61:c2:
                    96:a2:59:ae:00:d1:4e:86:8a:b3:fc:c2:30:30:4f:
                    2f:57:c0:05:81:2d:cf:13:74:11:bc:1b:50:e5:37:
                    d9:92:d0:0f:f1:dc:a1:4a:d2:5d:02:55:43:80:ca:
                    62:83:01:6d:c6:63:d4:ab:9c:ff:41:b8:06:b0:8e:
                    99:b2:78:54:29:05:0c:82:ec:27:a1:70:a5:a4:b4:
                    c6:8c:d7:32:4c:46:f0:2d:c9:3a:91:de:21:6a:18:
                    a9:7c:1d:6a:3a:ed:46:34:85:b9:b0:fb:bb:b4:85:
                    c0:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:E5:A5:2D:5F:1A:97:93:24:B1:C5:DE:90:5C:FE:80:7E:E2:63:0C
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/GeWlLV8al5MkscXekFz-gH7iYww.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.6.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:c3:52:31:f6:ce:2b:14:a4:47:ca:43:71:66:1a:1a:cc:e4:
         8e:31:db:c1:12:12:07:be:9b:04:3b:33:27:42:e1:90:13:b7:
         ea:b2:79:d2:a8:40:ce:16:81:92:ba:a8:bb:63:41:8e:67:2b:
         74:48:55:fe:76:f4:06:6c:61:8b:1e:bb:64:ea:86:d7:63:ec:
         f0:de:ac:a1:f1:de:07:29:e5:d5:49:b5:5b:34:f9:35:30:fb:
         42:fd:a7:2e:06:f8:87:16:6c:13:cd:dd:74:e0:67:b2:6c:83:
         ef:6a:54:79:a4:60:79:bf:93:88:89:46:49:a5:8d:19:2f:1f:
         29:bf:bf:92:9f:e4:a4:8e:01:25:5e:9f:41:44:fb:db:0c:6e:
         2e:d9:33:1a:36:f2:04:17:ea:2a:de:37:9f:54:08:08:1a:d8:
         ac:8e:38:f2:a9:13:d5:ff:37:90:3b:00:5a:89:3d:0b:73:9c:
         32:42:de:85:48:05:7c:73:a1:e9:03:7e:a5:14:a0:72:d9:08:
         eb:34:eb:90:44:77:0a:ae:bb:95:bb:32:59:74:76:af:e9:8d:
         0b:8e:7e:20:64:9b:10:6f:32:d8:12:42:ce:ef:26:b7:6a:21:
         86:4b:87:d0:ae:fe:37:a4:30:86:45:6a:0d:0b:f9:1c:94:1c:
         d2:c6:d5:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----