Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/HRPPlqd5mIXbUBbVzz9VIP1CMmM.roa
File:                     HRPPlqd5mIXbUBbVzz9VIP1CMmM.roa (raw, json)
Hash identifier:          y0+MP2z8Rc/fLFhDiuZ/h/MKNWwfRYtY9SSks/yyM8U=
Subject key identifier:   1D:13:CF:96:A7:79:98:85:DB:50:16:D5:CF:3F:55:20:FD:42:32:63
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0AAD
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/HRPPlqd5mIXbUBbVzz9VIP1CMmM.roa
Signing time:             Tue 29 Sep 2020 10:07:29 +0000
ROA not before:           Tue 29 Sep 2020 10:07:29 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        211.76.62.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2733 (0xaad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:07:29 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=1D13CF96A7799885DB5016D5CF3F5520FD423263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a2:29:4a:85:8e:37:e8:f0:f1:5d:17:b4:30:
                    96:36:99:c4:21:bf:69:50:e9:85:df:bb:cd:07:1c:
                    5e:b1:90:34:ac:31:53:34:b7:64:50:8a:df:51:ca:
                    38:15:2d:8c:aa:aa:ea:44:26:17:ce:37:15:e6:0c:
                    d6:33:ba:7a:5f:c0:2a:62:bb:fd:50:c6:6c:66:9e:
                    e7:fd:9e:de:bc:5b:2f:58:9c:e5:92:ef:a0:5c:83:
                    fe:20:d8:93:0c:a2:20:4f:98:d6:a4:7c:0c:85:f1:
                    d4:7e:33:14:58:21:69:77:86:3c:9a:67:8b:7f:1d:
                    78:eb:de:92:8c:56:ae:2b:f2:9d:4d:75:2c:ee:3b:
                    ae:86:45:23:f9:a5:16:2b:02:01:b9:d3:97:04:4e:
                    3f:3a:e4:94:2c:ce:bd:38:99:ba:c8:e2:4b:f8:55:
                    14:59:a1:bd:ec:0a:de:ad:9c:ad:d6:f3:db:06:92:
                    58:88:69:d9:99:94:81:7a:a1:2e:50:ad:91:e5:ce:
                    6e:aa:ec:e2:c7:91:57:34:35:21:34:c8:17:53:d6:
                    78:c3:d3:e0:d5:ec:04:91:80:52:41:98:5b:fe:17:
                    8b:ce:73:85:28:dd:69:50:66:c0:9e:78:82:66:4c:
                    25:61:7e:40:2f:f5:e6:dc:64:a6:b8:c6:30:7e:14:
                    da:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:13:CF:96:A7:79:98:85:DB:50:16:D5:CF:3F:55:20:FD:42:32:63
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/HRPPlqd5mIXbUBbVzz9VIP1CMmM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:c5:ef:fe:d4:39:76:ea:7f:b2:a1:d3:0f:0c:27:8e:4b:2a:
         03:89:cb:17:37:d0:c1:71:50:b2:fc:00:ae:d5:d8:49:1b:d3:
         ed:ba:ea:3a:7f:ef:70:43:b2:37:76:b5:c2:8d:da:0e:47:6f:
         25:fa:52:b0:4d:1c:44:b3:d6:bc:e7:4d:ad:18:f4:4c:59:3f:
         2a:b6:d4:f2:f0:c0:36:a5:04:18:4e:78:fe:08:72:c5:08:81:
         41:82:00:b7:8c:54:45:ba:5a:da:f3:08:6d:b2:ca:9e:3a:78:
         79:42:42:5f:9c:af:64:0d:4e:d4:f6:9f:3a:a7:de:35:73:55:
         d2:a2:ac:0b:a7:08:c4:00:51:db:95:b5:b1:1c:9f:25:9b:a5:
         49:0c:77:e0:5b:89:53:f0:5f:04:44:fa:81:d7:12:4e:07:38:
         1c:7e:7d:5d:c4:a7:fa:03:4b:dd:20:8b:9e:cf:b4:7c:73:2c:
         7f:ec:cd:6c:2d:b3:00:5c:a9:dd:0c:55:d8:dc:d2:61:e0:23:
         59:76:7c:0e:f5:fd:a5:15:38:a0:04:eb:33:ba:8c:36:45:b8:
         f6:c6:93:10:0e:6f:03:8a:20:2e:aa:c1:75:d4:e5:60:6d:d4:
         38:55:14:02:d6:e5:57:6a:c2:5e:a3:bf:e6:38:86:7d:d7:e1:
         4a:5f:46:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----