Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/JEC4cTdWDJ-EguG9BGpDgzdoCs8.roa
File:                     JEC4cTdWDJ-EguG9BGpDgzdoCs8.roa (raw, json)
Hash identifier:          QiuSiFYxogFZBQGPBVKrtqfu4CW/OMVITH6Kg5mkJgU=
Subject key identifier:   24:40:B8:71:37:56:0C:9F:84:82:E1:BD:04:6A:43:83:37:68:0A:CF
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       135A
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/JEC4cTdWDJ-EguG9BGpDgzdoCs8.roa
Signing time:             Wed 29 Sep 2021 02:55:40 +0000
ROA not before:           Wed 29 Sep 2021 02:55:40 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24163
IP address blocks:        180.218.245.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4954 (0x135a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:55:40 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=2440B87137560C9F8482E1BD046A438337680ACF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:25:1f:fc:b1:dc:dc:a2:4d:f4:c7:4f:2d:13:
                    a2:68:ca:10:94:ae:1a:46:24:40:23:36:dc:a7:1b:
                    fc:3b:cb:58:b9:cc:78:b8:bd:e4:89:d2:49:e3:01:
                    3d:cc:b5:e4:34:2d:9c:ea:de:f4:c6:2a:d4:24:8a:
                    08:b3:19:9a:db:59:71:eb:a7:a8:fe:14:d1:9f:0f:
                    84:91:b9:d5:82:42:a9:78:0f:af:d3:9f:80:2b:df:
                    40:19:39:cd:b7:22:47:90:4c:89:96:21:9c:b6:c8:
                    ae:69:a2:38:bf:ab:c8:ed:59:0e:4f:81:ec:77:97:
                    12:56:3f:be:1a:98:56:7c:ef:3b:2d:d7:2a:96:97:
                    af:d3:fb:56:05:3c:a3:14:1f:aa:b9:04:39:6a:f7:
                    29:79:d4:34:95:b0:0d:81:b9:3a:33:fd:ae:f1:0f:
                    1d:c2:09:7f:24:6f:1c:c4:2d:2c:4d:60:e9:7e:56:
                    2b:45:11:f4:31:4d:87:42:41:6e:8d:7a:e0:22:21:
                    a6:94:27:6d:76:a4:7d:14:1c:e4:54:d6:4b:33:d0:
                    45:00:9e:e1:e3:fb:ab:14:77:c7:4a:93:1b:eb:86:
                    a7:8f:74:1d:76:e0:87:a9:7d:3a:04:e8:f9:02:2b:
                    ec:6a:9c:18:6f:53:68:20:d8:a6:99:a4:13:85:79:
                    37:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:40:B8:71:37:56:0C:9F:84:82:E1:BD:04:6A:43:83:37:68:0A:CF
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/JEC4cTdWDJ-EguG9BGpDgzdoCs8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:ac:86:96:63:73:bc:3e:01:a1:f6:fa:ac:c8:06:52:93:a1:
         b2:f6:39:da:6b:52:f8:07:08:93:86:33:2f:16:bd:de:b7:78:
         74:a4:7e:ce:02:f0:ea:31:da:2a:92:4c:7a:f0:00:fd:12:85:
         d7:d0:7d:9d:89:6b:b4:ba:21:48:2a:c4:e9:6d:74:f3:d1:fb:
         27:97:a5:76:d1:f6:59:18:03:94:db:dd:ed:8c:1f:1a:f7:08:
         5e:45:3d:78:bd:94:8b:9a:33:f7:a7:f6:bc:c2:bf:98:23:97:
         b6:b9:46:ff:77:a6:9b:36:42:3c:67:eb:a5:2e:33:90:0a:34:
         86:2c:f8:c6:bb:49:e6:c5:0b:f6:76:f2:6c:a9:07:99:11:0e:
         a4:86:c5:4d:64:c2:12:b6:09:71:05:c0:b1:02:bd:a1:42:fd:
         fd:0a:8a:e0:e9:a8:7c:8b:3f:d7:43:7d:03:cd:30:01:99:c6:
         86:dd:ef:d4:88:93:06:34:0b:0e:11:2f:e0:f1:8a:3b:01:e8:
         be:b1:0a:79:5a:70:5c:81:4e:e9:1f:6e:c5:76:42:ea:db:ef:
         ce:8c:7d:22:8f:59:29:96:ec:6b:d7:22:2d:4d:9f:6b:41:9c:
         46:ef:c8:86:28:7b:58:5d:d4:ef:b8:86:0b:06:6e:18:d3:40:
         3a:15:19:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----