Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/MlwoqJ0sIKn8N1OK3q5JLH6VV-g.roa
File:                     MlwoqJ0sIKn8N1OK3q5JLH6VV-g.roa (raw, json)
Hash identifier:          P0TAoRasugySTip69oYd3UJwNtG3JTfAyudqJLL5aCM=
Subject key identifier:   32:5C:28:A8:9D:2C:20:A9:FC:37:53:8A:DE:AE:49:2C:7E:95:57:E8
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0B7F
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/MlwoqJ0sIKn8N1OK3q5JLH6VV-g.roa
Signing time:             Tue 29 Sep 2020 10:08:30 +0000
ROA not before:           Tue 29 Sep 2020 10:08:30 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24163
IP address blocks:        119.77.254.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2943 (0xb7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:08:30 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=325C28A89D2C20A9FC37538ADEAE492C7E9557E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:3a:25:de:3b:fb:8b:00:7a:4a:a1:ce:3f:83:
                    6b:e0:15:91:0a:ca:6c:dc:1b:8d:4b:ac:36:dd:de:
                    a0:25:3f:99:fa:ba:6b:05:ed:2f:48:04:04:5a:e1:
                    cf:db:6a:da:23:db:c4:60:a2:a4:f4:06:d2:79:f2:
                    b6:12:c0:d9:b1:0b:d3:51:48:d9:37:6d:cc:a2:77:
                    a7:97:22:6f:44:2a:c2:13:9a:38:b1:ff:46:9b:19:
                    9d:0a:d6:8e:09:b2:66:71:c2:6e:ee:a9:32:e6:5b:
                    0d:e4:e7:15:3c:bc:89:c9:4c:ac:b0:7b:e7:cc:4a:
                    a7:33:df:f8:f6:4c:d7:35:8f:8a:94:01:6d:0e:81:
                    75:bd:10:18:77:69:b5:9b:44:6f:96:6c:54:27:98:
                    f0:03:40:eb:b0:90:c8:d3:12:c4:87:bc:fd:51:6e:
                    13:9d:de:94:ff:26:64:c6:a5:34:ea:b8:04:ff:ad:
                    12:3e:87:57:2b:02:24:c7:19:b2:cc:fe:a0:65:c4:
                    ca:b1:44:0e:3a:e2:a3:30:08:e2:4b:86:20:e6:67:
                    f2:4b:6d:31:81:0b:72:91:9a:a0:d3:74:2f:78:92:
                    88:0f:ea:df:38:9d:64:0a:9e:b4:1d:ca:78:cc:bd:
                    07:d9:51:a2:37:ad:26:d7:8f:cf:ec:be:df:1c:b8:
                    51:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:5C:28:A8:9D:2C:20:A9:FC:37:53:8A:DE:AE:49:2C:7E:95:57:E8
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/MlwoqJ0sIKn8N1OK3q5JLH6VV-g.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.77.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:64:d3:5b:82:0f:10:d3:4d:3d:8f:6d:21:10:91:24:c3:b6:
         15:c8:0d:a3:7c:f7:d4:62:cc:54:02:32:0f:83:24:4a:b5:4a:
         4f:43:96:c8:61:b2:06:62:fc:ec:14:e5:a1:51:35:78:49:d8:
         e6:8f:1c:ba:fe:4a:61:2c:14:5a:71:6b:c2:8e:d0:71:29:fe:
         b7:bf:7f:a1:8f:b9:46:b6:56:d1:85:6a:98:23:72:f1:fb:69:
         c9:3a:35:13:81:fd:0b:7a:83:f8:78:55:25:5e:af:ba:3c:f1:
         e8:94:b2:15:69:f9:3a:4d:a1:2e:c4:af:35:7a:9f:e2:b2:91:
         bd:78:fc:58:c9:23:6d:c9:28:a7:8a:67:84:f6:51:ff:d6:0b:
         cf:d8:20:bc:72:14:79:d1:6e:ac:e4:aa:c8:bc:99:d4:0d:cc:
         26:d8:6f:47:87:01:5a:a1:9b:55:f9:0f:68:05:c6:98:49:8d:
         0f:f7:6d:2d:45:1f:84:76:b7:47:a3:bc:87:4f:f6:6b:04:32:
         b8:65:06:66:bc:67:82:7b:dc:95:94:01:ba:90:3b:6f:e6:e9:
         40:8c:ee:06:79:67:8a:16:5f:f9:52:be:7b:83:b3:57:76:22:
         c0:71:62:07:0a:92:f2:0b:3e:2f:d2:1c:c8:55:4a:57:e3:bd:
         7d:f2:f5:2d
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICC38wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMDA5Mjkx
MDA4MzBaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDMyNUMyOEE4OUQyQzIw
QTlGQzM3NTM4QURFQUU0OTJDN0U5NTU3RTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDSOiXeO/uLAHpKoc4/g2vgFZEKymzcG41LrDbd3qAlP5n6umsF
7S9IBARa4c/batoj28RgoqT0BtJ58rYSwNmxC9NRSNk3bcyid6eXIm9EKsITmjix
/0abGZ0K1o4JsmZxwm7uqTLmWw3k5xU8vInJTKywe+fMSqcz3/j2TNc1j4qUAW0O
gXW9EBh3abWbRG+WbFQnmPADQOuwkMjTEsSHvP1RbhOd3pT/JmTGpTTquAT/rRI+
h1crAiTHGbLM/qBlxMqxRA464qMwCOJLhiDmZ/JLbTGBC3KRmqDTdC94kogP6t84
nWQKnrQdynjMvQfZUaI3rSbXj8/svt8cuFGxAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUMlwoqJ0sIKn8N1OK3q5JLH6VV+gwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL01sd29xSjBzSUtuOE4xT0sz
cTVKTEg2VlYtZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB3
Tf4wDQYJKoZIhvcNAQELBQADggEBAAhk01uCDxDTTT2PbSEQkSTDthXIDaN899Ri
zFQCMg+DJEq1Sk9DlshhsgZi/OwU5aFRNXhJ2OaPHLr+SmEsFFpxa8KO0HEp/re/
f6GPuUa2VtGFapgjcvH7ack6NROB/Qt6g/h4VSVer7o88eiUshVp+TpNoS7ErzV6
n+Kykb14/FjJI23JKKeKZ4T2Uf/WC8/YILxyFHnRbqzkqsi8mdQNzCbYb0eHAVqh
m1X5D2gFxphJjQ/3bS1FH4R2t0ejvIdP9msEMrhlBma8Z4J73JWUAbqQO2/m6UCM
7gZ5Z4oWX/lSvnuDs1d2IsBxYgcKkvILPi/SHMhVSlfjvX3y9S0=
-----END CERTIFICATE-----