Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Ndg_N3kvF8yYLOyEDiEufahhR6o.roa
File:                     Ndg_N3kvF8yYLOyEDiEufahhR6o.roa (raw, json)
Hash identifier:          fHHNPsHR6lQveCOqwMOhojCz0Zf4iQ5JMaUjwEKzI+g=
Subject key identifier:   35:D8:3F:37:79:2F:17:CC:98:2C:EC:84:0E:21:2E:7D:A8:61:47:AA
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1304
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Ndg_N3kvF8yYLOyEDiEufahhR6o.roa
Signing time:             Wed 29 Sep 2021 02:55:16 +0000
ROA not before:           Wed 29 Sep 2021 02:55:16 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24164
IP address blocks:        180.218.176.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4868 (0x1304)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:55:16 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=35D83F37792F17CC982CEC840E212E7DA86147AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ef:8a:ce:1e:2c:c1:82:df:05:ac:6c:40:be:
                    f1:86:82:6d:ce:eb:1c:92:29:5a:a7:5d:af:78:9e:
                    cc:44:91:cb:6a:8b:76:e9:6b:d7:80:aa:ff:ba:25:
                    0f:17:a6:7e:1f:37:e9:c8:49:10:6a:76:ef:69:a7:
                    7e:1b:9c:75:61:c9:a8:10:8f:9a:71:4f:0b:69:5a:
                    16:ca:6c:9f:e5:42:c8:a8:b6:89:6b:c3:f6:5f:3d:
                    69:cf:9d:67:fd:87:1f:75:75:64:a9:ee:bf:9b:9c:
                    98:8e:08:cc:97:b4:42:ca:83:54:53:1c:78:4e:92:
                    75:98:1c:89:2e:f6:88:12:28:59:bf:c1:a7:ff:bb:
                    04:83:57:bd:0a:a0:cd:3d:eb:6d:0e:1f:d4:99:61:
                    33:f7:b0:87:24:89:51:9c:7a:7a:a1:f3:8c:d8:77:
                    16:01:f3:d3:ec:f1:40:7a:b4:d2:5b:19:93:29:37:
                    00:82:9a:63:33:73:95:37:5e:ea:99:a2:11:07:45:
                    27:b2:51:7f:7d:55:4d:2b:3b:27:09:da:17:c6:a0:
                    6d:0f:9e:9a:81:ea:68:83:4c:55:18:1d:ab:41:5c:
                    57:f0:de:3a:6e:de:23:f3:3b:45:9e:33:ca:b4:90:
                    01:bd:7e:3d:ee:8b:29:e5:3f:ca:bf:db:a3:2b:26:
                    b3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:D8:3F:37:79:2F:17:CC:98:2C:EC:84:0E:21:2E:7D:A8:61:47:AA
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Ndg_N3kvF8yYLOyEDiEufahhR6o.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:14:a1:1e:8a:f0:37:59:27:80:64:84:cc:20:dd:a9:e8:3c:
         66:38:fe:bd:35:2b:85:86:3d:b5:0c:8e:f6:d9:6b:72:be:ba:
         f9:b4:e6:a9:00:01:e6:0c:ac:9a:04:85:62:3d:4c:c6:3a:ee:
         99:15:fd:e8:b0:87:aa:27:9c:98:03:6e:96:25:fc:98:55:b6:
         23:0e:10:a5:ec:3c:35:c1:4b:0a:41:af:2b:21:18:41:ae:87:
         40:f4:d2:9a:b4:01:a3:84:77:e8:ca:17:92:0f:88:ce:90:fe:
         5c:2c:2e:64:cf:c7:db:58:76:6a:98:d5:0d:dc:23:dc:5b:7e:
         e9:c6:4c:1d:bc:d2:7e:81:e6:a5:f6:84:19:67:b4:28:f2:6a:
         ad:d5:6d:28:24:2e:34:4a:db:e6:3c:c4:76:6f:8f:54:05:c0:
         df:74:7a:62:49:cf:d0:3f:94:a8:cc:c9:4a:9b:b2:e7:59:01:
         26:0c:09:a7:08:42:42:84:e7:97:2d:86:5c:c3:72:cb:37:44:
         34:02:96:71:1a:de:cc:4c:d2:e4:d2:ec:b2:71:8a:96:82:11:
         3c:37:91:c6:1c:6f:16:d6:e7:74:a1:e6:a9:a1:74:9e:6c:02:
         0a:dc:80:dc:1a:c0:cf:a1:be:c9:87:df:8c:bb:bd:d0:06:65:
         76:03:da:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----