Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Mz_XxF61pPhjL2NqK6DvF5Z94JM.roa
File:                     Mz_XxF61pPhjL2NqK6DvF5Z94JM.roa (raw, json)
Hash identifier:          yotnSIrMj2sWMbie4rYjjgU9Zh84bB/k5HbijrDn6TU=
Subject key identifier:   33:3F:D7:C4:5E:B5:A4:F8:63:2F:63:6A:2B:A0:EF:17:96:7D:E0:93
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0B77
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Mz_XxF61pPhjL2NqK6DvF5Z94JM.roa
Signing time:             Tue 29 Sep 2020 10:08:27 +0000
ROA not before:           Tue 29 Sep 2020 10:08:27 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24165
IP address blocks:        180.218.88.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2935 (0xb77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:08:27 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=333FD7C45EB5A4F8632F636A2BA0EF17967DE093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:04:42:84:92:a4:d5:64:4d:ad:9d:0d:bc:ed:
                    0a:cf:2a:87:3b:da:ec:e4:06:62:99:59:5c:5f:bd:
                    e2:6f:8b:3d:9c:7b:e9:1c:83:38:ef:cb:ab:59:5b:
                    c9:b9:ea:0b:26:c3:77:dc:bc:d8:36:dd:2b:65:80:
                    a2:d5:1f:97:f5:84:c8:14:a0:ca:26:ea:bf:4b:50:
                    c7:80:bc:95:7c:ce:12:c1:7b:06:05:59:2c:c9:5f:
                    1e:35:aa:54:02:ae:ce:62:be:b2:f8:c6:b3:09:aa:
                    70:e1:39:69:17:95:e7:23:e1:4a:3d:57:f1:5e:d3:
                    09:d2:6c:df:12:7d:2f:a3:55:a2:a0:13:ac:55:da:
                    45:31:42:06:26:73:ef:24:34:62:9d:f9:dd:10:44:
                    fb:44:ed:c1:33:d8:f8:6d:03:c3:af:f3:6a:08:03:
                    20:6d:dd:f8:a6:0d:0f:44:b7:ea:e5:ba:a8:56:01:
                    dd:d0:bf:a0:2c:b2:c6:35:28:09:06:7e:0f:c5:f7:
                    ee:93:9e:6f:3c:ff:1c:70:20:5a:17:02:8b:4d:46:
                    dd:57:57:e9:a5:32:22:d3:8a:8a:d8:32:44:70:cd:
                    9b:1b:54:53:a7:20:b4:6e:33:fb:ab:db:77:bc:8c:
                    c2:99:d5:e9:5e:41:f9:49:5d:84:5b:b5:aa:fa:43:
                    e8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:3F:D7:C4:5E:B5:A4:F8:63:2F:63:6A:2B:A0:EF:17:96:7D:E0:93
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Mz_XxF61pPhjL2NqK6DvF5Z94JM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         93:14:5c:c8:b9:1b:fc:38:81:07:70:78:aa:d9:7b:e9:60:6e:
         53:6e:46:92:08:40:68:cc:14:48:4c:b4:b4:60:b6:dd:c9:84:
         83:83:a7:d0:ba:5b:76:e5:5a:c7:c0:74:1d:50:a3:95:1e:cd:
         df:55:1c:8b:f1:bb:d5:4a:04:fa:7f:2d:10:7f:8f:1f:9f:5f:
         58:45:33:ad:b2:30:83:a7:d7:8a:90:d5:8f:20:66:65:28:0f:
         fd:af:d7:65:bd:aa:f0:c6:52:a3:a2:76:9f:4e:c9:b6:16:88:
         a2:a8:df:5f:1a:ca:22:09:b6:a0:01:07:87:59:a3:b9:a2:c9:
         19:00:4d:04:8a:13:56:76:7e:4a:63:8a:66:50:62:6a:19:22:
         25:e3:a6:8d:a0:35:e2:65:a1:a8:36:55:96:9b:b1:7f:be:95:
         92:b5:ed:a5:e4:09:55:2c:3d:be:9a:c1:bc:db:ba:c0:54:cf:
         58:b6:87:5f:80:c0:9d:a7:c8:a6:49:f8:4a:f3:92:6d:6c:dc:
         bf:36:f3:12:1d:21:8b:fe:9b:22:dc:e6:8a:2d:66:36:8c:3d:
         2c:4e:f8:ef:2e:85:d5:3c:8f:3a:a5:fc:47:b8:1e:a0:86:fa:
         5c:96:94:72:ef:38:b4:50:57:e5:6a:cc:b4:54:dc:b1:01:36:
         5d:8f:99:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----