Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IGhPOiZbM-I3eRf8L20qrIW2mho.roa
File:                     IGhPOiZbM-I3eRf8L20qrIW2mho.roa (raw, json)
Hash identifier:          /6abEb6E9u3rKfnenezPg7k6ayP7lrP6S9scH9+1dV0=
Subject key identifier:   20:68:4F:3A:26:5B:33:E2:37:79:17:FC:2F:6D:2A:AC:85:B6:9A:1A
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0B98
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IGhPOiZbM-I3eRf8L20qrIW2mho.roa
Signing time:             Tue 29 Sep 2020 10:08:37 +0000
ROA not before:           Tue 29 Sep 2020 10:08:37 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24163
IP address blocks:        45.64.35.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2968 (0xb98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:08:37 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=20684F3A265B33E2377917FC2F6D2AAC85B69A1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1d:da:e4:5f:72:e9:b2:be:a8:b5:23:19:f9:
                    dd:7f:e1:11:51:99:31:2b:cd:48:27:9d:80:ee:25:
                    a7:cb:ea:95:69:11:ae:e5:26:08:93:e8:b0:42:f6:
                    85:c7:00:00:e5:35:a5:bb:f3:f7:90:e1:9d:2c:15:
                    9c:c8:28:5e:30:fb:14:8a:a4:0f:85:47:1b:0e:e5:
                    54:01:a4:31:27:ce:b4:29:b0:a2:21:fc:c9:96:03:
                    0f:de:07:27:17:30:b9:20:cb:7c:6c:a2:ff:92:84:
                    15:cc:fb:cb:9e:63:77:c9:8d:8e:1a:42:e2:cd:8a:
                    4a:14:5d:d5:b4:18:77:92:f2:53:e5:f7:07:57:bd:
                    08:a2:2f:a6:a1:12:95:95:53:05:5d:28:f9:ae:a1:
                    35:af:78:2a:38:40:e4:8e:58:57:09:eb:b4:fa:51:
                    a5:bb:d3:5f:df:f0:ba:dc:ba:5c:e1:4b:ac:58:f5:
                    4e:43:0f:dc:fd:4e:aa:0c:04:50:6c:29:91:6e:54:
                    32:80:ae:83:e1:65:25:c7:17:e3:5f:95:b9:3b:f8:
                    91:fe:8f:bd:8d:5d:99:ef:4e:dd:67:d5:21:c9:ca:
                    4a:aa:b3:dd:af:77:4e:a5:a0:53:e7:2a:5c:06:7b:
                    4a:14:be:e5:9d:84:84:2a:01:5c:e8:2d:47:6f:ee:
                    78:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:68:4F:3A:26:5B:33:E2:37:79:17:FC:2F:6D:2A:AC:85:B6:9A:1A
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IGhPOiZbM-I3eRf8L20qrIW2mho.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.64.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:da:73:78:33:c5:04:f2:e6:fb:77:e9:f1:6d:0b:a2:99:cb:
         1c:75:2a:dd:7c:47:52:bf:61:06:30:3e:1a:9e:5e:8c:43:a5:
         f5:4f:86:57:56:fc:a7:e0:ca:95:82:0e:26:ff:69:91:da:a1:
         0e:18:6b:80:21:34:35:49:06:b7:e8:d4:8e:21:47:ae:b4:44:
         b5:e3:10:79:47:00:a6:3d:0d:44:85:d4:d5:22:19:94:37:f5:
         0a:53:95:b3:0e:38:c6:a5:e2:fb:03:9e:6d:a8:18:90:5b:61:
         fa:29:5a:77:cf:3c:7e:d3:72:d4:f6:e4:f6:98:e9:85:eb:95:
         ee:32:d7:2b:b7:04:9c:ea:21:c6:88:df:61:ce:6f:8b:49:30:
         c5:e2:6e:9f:01:40:63:83:85:ad:5f:2f:22:58:f0:93:7d:83:
         38:4f:07:85:e9:f9:6c:a3:b4:45:0f:9a:fe:3c:ea:77:52:b2:
         30:52:fc:18:91:e2:6e:84:1a:22:bf:b6:e0:4d:5e:52:09:93:
         41:d8:a1:38:d6:a4:bc:8d:03:e3:85:e5:6a:05:16:ef:14:4e:
         2e:12:98:75:37:f1:e1:81:ab:4a:a9:9b:6b:fa:09:7e:1f:a9:
         e2:58:6b:b6:b2:ad:93:4e:7e:fe:4c:6c:d5:cf:4f:7d:c5:61:
         d4:b1:76:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----