Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/MWpgkEsZ7svqP5h-Xaeh_rRW6A8.roa
File:                     MWpgkEsZ7svqP5h-Xaeh_rRW6A8.roa (raw, json)
Hash identifier:          qNZWUsYIibULGsAGnDgFHZ3b4p3olElO8zkd2lH66Mw=
Subject key identifier:   31:6A:60:90:4B:19:EE:CB:EA:3F:98:7E:5D:A7:A1:FE:B4:56:E8:0F
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0BCD
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/MWpgkEsZ7svqP5h-Xaeh_rRW6A8.roa
Signing time:             Tue 29 Sep 2020 10:08:50 +0000
ROA not before:           Tue 29 Sep 2020 10:08:50 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24165
IP address blocks:        122.254.0.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3021 (0xbcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:08:50 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=316A60904B19EECBEA3F987E5DA7A1FEB456E80F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:b3:74:43:04:5b:ae:b8:7c:c1:8a:95:3e:8b:
                    5e:bb:4f:e1:5d:cf:90:3b:ed:e4:1c:c0:34:12:5a:
                    bf:d4:b0:a5:21:db:3f:da:72:f4:f8:78:3e:77:05:
                    d1:61:fb:50:bf:aa:e8:6c:71:58:6f:e1:78:ff:3b:
                    f2:a3:29:7e:a4:24:e9:61:a1:70:30:88:ea:33:25:
                    db:55:13:f4:94:b9:83:75:23:68:8f:77:38:5a:d0:
                    a0:74:78:17:a9:db:01:38:d5:2a:73:47:a4:54:61:
                    a9:2b:d6:20:ed:4c:83:df:c0:42:56:d3:72:ab:41:
                    d4:c9:c5:64:05:21:b6:81:e4:f4:ef:35:96:9c:0a:
                    aa:ec:e9:f4:35:ea:9f:f2:75:54:d7:27:0f:95:6e:
                    5d:d6:7a:65:77:1b:b3:0f:26:09:e7:19:18:0a:45:
                    1d:d1:db:d2:4f:f7:9c:03:44:bc:7c:af:f1:37:6f:
                    5b:ab:12:fc:0b:3c:dc:1f:b2:77:ae:cc:19:c3:a3:
                    09:2e:c5:a5:b5:92:f7:01:88:52:bc:a7:9f:f6:1b:
                    60:a5:19:4c:3f:e8:2d:25:15:2a:ad:d9:ed:82:3b:
                    ef:48:91:fa:cc:dd:a8:f6:a1:03:1b:71:76:ec:e4:
                    a2:2e:35:a1:8b:21:49:66:f0:f7:b5:f3:5a:27:df:
                    80:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:6A:60:90:4B:19:EE:CB:EA:3F:98:7E:5D:A7:A1:FE:B4:56:E8:0F
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/MWpgkEsZ7svqP5h-Xaeh_rRW6A8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.254.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         40:e7:0e:bb:6e:49:2d:bf:55:1c:0a:29:5d:35:7f:ff:20:bc:
         e4:c0:83:26:49:29:41:b9:62:0b:3b:ef:f2:ab:d5:fa:34:20:
         29:8a:20:a5:14:f7:11:c4:fd:b2:13:af:10:9b:82:60:ab:88:
         52:5c:11:e5:98:55:07:0c:74:da:e7:7d:0b:42:58:4a:d4:fe:
         37:74:71:13:3a:35:2b:24:08:5f:a4:31:c6:9d:1c:c9:67:43:
         96:98:d0:bf:ec:7b:39:fd:cf:ce:7b:53:fa:3b:8f:77:20:a0:
         0c:37:fe:1a:0b:ef:ba:18:60:7b:af:27:c5:01:01:ed:07:67:
         26:77:90:b2:cb:bf:c1:c2:be:93:1b:ea:fc:35:1e:51:2e:55:
         91:69:91:b0:b0:b5:ad:40:86:e2:5a:c5:73:64:4b:fa:30:92:
         05:8b:23:9b:ec:5c:d5:1d:78:ed:53:6e:46:7d:65:93:48:12:
         94:25:d9:d2:2b:c1:c7:c0:58:2d:37:e7:a5:a0:40:07:ca:2e:
         e0:41:99:02:73:ff:b1:15:31:ed:de:8f:9c:bb:43:83:2c:18:
         1f:87:43:10:95:36:8b:2f:b9:c5:5a:05:4b:8a:48:68:c7:77:
         77:0b:87:db:63:d3:29:2a:fb:b8:bf:37:88:78:e8:4c:00:e2:
         f5:12:17:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----