Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IZF0AEyLsRuQzucHns4LgG54ukk.roa
File:                     IZF0AEyLsRuQzucHns4LgG54ukk.roa (raw, json)
Hash identifier:          M3XHigpwF3OScO+zvxddr+mvfrOeistQKMl9fg5VTWw=
Subject key identifier:   21:91:74:00:4C:8B:B1:1B:90:CE:E7:07:9E:CE:0B:80:6E:78:BA:49
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0BD1
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IZF0AEyLsRuQzucHns4LgG54ukk.roa
Signing time:             Tue 29 Sep 2020 10:08:52 +0000
ROA not before:           Tue 29 Sep 2020 10:08:52 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     4662
IP address blocks:        211.76.32.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3025 (0xbd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:08:52 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=219174004C8BB11B90CEE7079ECE0B806E78BA49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:fc:42:b5:33:9c:08:28:0f:c2:b3:87:e3:75:
                    30:a2:77:f3:e9:3c:62:a6:23:9f:22:17:da:26:6b:
                    1a:92:eb:d3:f7:62:d8:03:3b:78:3f:39:e3:c1:eb:
                    37:06:c8:f1:f1:ee:3f:0f:35:bd:0c:50:5e:52:4c:
                    2e:c9:3f:fe:c0:e4:d4:88:35:9f:70:16:b0:3f:6d:
                    42:ea:7f:9a:52:79:bd:bf:e9:b7:c0:0c:23:6a:86:
                    7f:39:b3:a3:0e:40:c0:20:d6:4c:db:a7:c6:71:e0:
                    4a:16:89:65:fa:df:1d:04:5c:e3:4a:b6:5b:8a:b0:
                    1a:19:f4:11:2c:2a:da:ca:2a:bb:c3:5f:9f:1e:95:
                    a5:0c:59:7e:5c:cc:64:2d:f5:46:d1:7b:63:db:76:
                    07:f5:bc:29:df:cf:04:c7:b3:35:08:67:55:68:4f:
                    5c:e2:8f:99:15:18:86:ed:20:7d:99:12:fc:77:c6:
                    ed:2a:5a:eb:96:4f:48:3f:01:46:1d:94:5c:ba:32:
                    d8:49:a2:c6:e1:76:e4:08:58:89:25:ff:61:ed:99:
                    0d:25:db:f8:90:16:91:15:f5:1f:99:4a:eb:d9:36:
                    d0:42:59:82:5b:56:92:8e:26:97:19:12:91:69:e9:
                    89:4c:81:3b:e0:c7:ee:a9:a5:db:08:ea:89:91:49:
                    48:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:91:74:00:4C:8B:B1:1B:90:CE:E7:07:9E:CE:0B:80:6E:78:BA:49
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IZF0AEyLsRuQzucHns4LgG54ukk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         00:61:27:6f:48:d0:f1:41:d1:91:df:1a:c6:7e:68:c5:67:27:
         95:a1:6d:8d:d1:b1:ef:ad:f0:b4:c8:fc:4b:3a:69:f0:5d:ae:
         9f:5f:ea:eb:9c:65:5f:34:82:e2:c1:28:3f:b7:05:32:0c:07:
         2d:3e:f1:e8:2c:de:ec:36:c1:06:a0:b9:ab:14:71:8a:88:0f:
         32:07:4d:30:a3:5d:b5:6a:f1:d0:db:88:a8:e8:a5:2f:b5:ac:
         62:2c:af:04:fc:3a:89:14:b4:3f:02:54:49:bf:5f:26:2b:af:
         f2:7a:f2:91:7b:bc:3e:2b:15:92:3e:21:6f:2f:c6:b5:94:ac:
         87:9c:ad:cf:fe:a7:b1:35:ae:07:3d:8a:6e:46:68:e3:68:ae:
         1b:f7:e6:31:c4:f2:f7:04:97:d3:c1:0f:3b:01:fb:a1:6a:56:
         96:3f:59:94:a7:7e:1b:96:c6:e7:15:b1:2a:b1:de:3c:82:a5:
         26:ab:ad:e1:9e:c8:e8:7a:be:db:fa:d4:22:5c:ea:ab:3b:76:
         23:89:c2:db:93:4e:67:c5:c3:bd:61:b9:82:1c:92:45:37:bb:
         47:94:b5:47:65:8a:5a:3f:00:07:79:48:89:d3:e6:c7:c6:20:
         94:a5:5a:ae:c2:33:0f:4c:a7:ba:0a:c7:3b:12:61:49:97:49:
         38:1a:ee:4a
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICC9EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMDA5Mjkx
MDA4NTJaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDIxOTE3NDAwNEM4QkIx
MUI5MENFRTcwNzlFQ0UwQjgwNkU3OEJBNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDL/EK1M5wIKA/Cs4fjdTCid/PpPGKmI58iF9omaxqS69P3YtgD
O3g/OePB6zcGyPHx7j8PNb0MUF5STC7JP/7A5NSINZ9wFrA/bULqf5pSeb2/6bfA
DCNqhn85s6MOQMAg1kzbp8Zx4EoWiWX63x0EXONKtluKsBoZ9BEsKtrKKrvDX58e
laUMWX5czGQt9UbRe2Pbdgf1vCnfzwTHszUIZ1VoT1zij5kVGIbtIH2ZEvx3xu0q
WuuWT0g/AUYdlFy6MthJosbhduQIWIkl/2HtmQ0l2/iQFpEV9R+ZSuvZNtBCWYJb
VpKOJpcZEpFp6YlMgTvgx+6ppdsI6omRSUinAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUIZF0AEyLsRuQzucHns4LgG54ukkwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0laRjBBRXlMc1J1UXp1Y0hu
czRMZ0c1NHVray5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXT
TCAwDQYJKoZIhvcNAQELBQADggEBAABhJ29I0PFB0ZHfGsZ+aMVnJ5WhbY3Rse+t
8LTI/Es6afBdrp9f6uucZV80guLBKD+3BTIMBy0+8egs3uw2wQaguasUcYqIDzIH
TTCjXbVq8dDbiKjopS+1rGIsrwT8OokUtD8CVEm/XyYrr/J68pF7vD4rFZI+IW8v
xrWUrIecrc/+p7E1rgc9im5GaONorhv35jHE8vcEl9PBDzsB+6FqVpY/WZSnfhuW
xucVsSqx3jyCpSarreGeyOh6vtv61CJc6qs7diOJwtuTTmfFw71huYIckkU3u0eU
tUdlilo/AAd5SInT5sfGIJSlWq7CMw9Mp7oKxzsSYUmXSTga7ko=
-----END CERTIFICATE-----