Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PcL8iUbgBS2p2GiL7WTzKKgJcto.roa
File:                     PcL8iUbgBS2p2GiL7WTzKKgJcto.roa (raw, json)
Hash identifier:          md8c3+ghNDYUAFJl9v2zyJxFKPtp8O3hWT5Wz5mCuhw=
Subject key identifier:   3D:C2:FC:89:46:E0:05:2D:A9:D8:68:8B:ED:64:F3:28:A8:09:72:DA
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       12C7
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PcL8iUbgBS2p2GiL7WTzKKgJcto.roa
Signing time:             Wed 29 Sep 2021 02:54:58 +0000
ROA not before:           Wed 29 Sep 2021 02:54:58 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24163
IP address blocks:        61.56.160.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4807 (0x12c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:54:58 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=3DC2FC8946E0052DA9D8688BED64F328A80972DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:15:0a:6d:a7:69:62:21:12:74:d4:c0:66:96:
                    88:85:d2:1c:ab:4e:c3:7c:8b:6e:05:b8:f6:ec:1b:
                    1f:b0:e6:72:94:db:0c:9f:d9:9b:86:59:ab:ac:4c:
                    f5:ce:57:7d:9e:89:39:74:61:ac:38:5d:7c:f6:10:
                    3a:fc:85:e4:3c:44:ec:3a:59:86:0f:4c:bd:ca:a6:
                    a2:3a:d6:0d:26:95:54:46:25:06:a9:27:83:73:d4:
                    f1:b1:de:ca:1c:8d:89:ca:7d:b8:f0:f6:cf:9a:3d:
                    27:07:b9:2c:0d:6b:3c:c7:21:70:37:20:34:7f:50:
                    91:ff:b9:d2:96:87:43:20:99:84:ee:fd:32:38:75:
                    37:74:09:e6:57:f0:74:b3:ee:71:b3:50:13:63:a7:
                    c0:86:86:3c:d7:f5:7b:e6:94:27:8c:5d:8f:cd:71:
                    cb:b1:48:91:a9:bd:e4:57:da:b3:40:ff:2c:4a:90:
                    d9:cc:c9:ca:0d:d2:52:c3:c0:22:41:61:d1:29:b8:
                    9a:dc:bb:6f:99:2e:a0:28:63:9f:57:41:45:98:30:
                    75:bc:ff:70:fb:7d:d2:db:2e:6a:0f:28:2d:23:2a:
                    91:9d:41:61:7a:15:04:e7:72:7d:64:24:b3:ba:d4:
                    f7:16:90:fb:bc:02:70:ab:94:80:bc:f6:26:62:ef:
                    6a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:C2:FC:89:46:E0:05:2D:A9:D8:68:8B:ED:64:F3:28:A8:09:72:DA
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PcL8iUbgBS2p2GiL7WTzKKgJcto.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.56.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:ce:86:e8:ad:92:76:9a:d8:b3:f9:77:c4:ef:54:22:66:58:
         5c:99:bd:e9:c2:9d:32:af:1f:55:5c:37:f7:5b:61:56:3d:57:
         f5:f5:cd:1e:fb:94:a5:c3:8a:a4:d1:92:02:dc:f6:a4:8b:32:
         38:6c:bb:c1:57:59:88:57:3b:19:22:ed:57:af:cf:71:cb:d1:
         1c:fa:57:cf:63:b8:16:0d:01:13:10:a3:eb:92:d5:19:68:ba:
         ab:07:b9:21:78:78:70:af:62:b7:ca:54:d0:4b:61:80:b0:3a:
         25:18:9f:97:6a:5a:1a:b1:62:52:c7:eb:42:b0:a3:d5:7b:32:
         29:99:8c:a6:14:98:f9:d0:6f:5f:e5:48:03:fe:8d:79:4e:6d:
         d3:fb:06:91:06:50:19:00:ca:55:43:7b:d0:38:49:92:5d:51:
         be:7d:69:fe:bc:35:11:a2:67:2e:f6:da:3f:7b:ec:cd:f8:9d:
         1f:0f:ad:5d:ee:f9:7f:d1:be:31:f1:55:eb:1f:3e:12:f5:be:
         ce:7e:4b:48:d8:4c:55:90:d7:48:1e:7a:43:8f:3d:a0:4f:6f:
         27:8e:5e:0f:a1:b8:98:86:fe:e0:d1:67:00:3e:a2:20:35:df:
         7f:a6:4a:1b:f2:03:1b:54:0f:b3:8a:45:b7:88:e2:5a:5c:21:
         31:4b:a7:5f
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICEscwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTA5Mjkw
MjU0NThaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDNEQzJGQzg5NDZFMDA1
MkRBOUQ4Njg4QkVENjRGMzI4QTgwOTcyREEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCwFQptp2liIRJ01MBmloiF0hyrTsN8i24FuPbsGx+w5nKU2wyf
2ZuGWausTPXOV32eiTl0Yaw4XXz2EDr8heQ8ROw6WYYPTL3KpqI61g0mlVRGJQap
J4Nz1PGx3socjYnKfbjw9s+aPScHuSwNazzHIXA3IDR/UJH/udKWh0MgmYTu/TI4
dTd0CeZX8HSz7nGzUBNjp8CGhjzX9XvmlCeMXY/NccuxSJGpveRX2rNA/yxKkNnM
ycoN0lLDwCJBYdEpuJrcu2+ZLqAoY59XQUWYMHW8/3D7fdLbLmoPKC0jKpGdQWF6
FQTncn1kJLO61PcWkPu8AnCrlIC89iZi72ohAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUPcL8iUbgBS2p2GiL7WTzKKgJctowHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1BjTDhpVWJnQlMycDJHaUw3
V1R6S0tnSmN0by5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAI9
OKAwDQYJKoZIhvcNAQELBQADggEBABLOhuitknaa2LP5d8TvVCJmWFyZvenCnTKv
H1VcN/dbYVY9V/X1zR77lKXDiqTRkgLc9qSLMjhsu8FXWYhXOxki7Vevz3HL0Rz6
V89juBYNARMQo+uS1RlouqsHuSF4eHCvYrfKVNBLYYCwOiUYn5dqWhqxYlLH60Kw
o9V7MimZjKYUmPnQb1/lSAP+jXlObdP7BpEGUBkAylVDe9A4SZJdUb59af68NRGi
Zy722j977M34nR8PrV3u+X/RvjHxVesfPhL1vs5+S0jYTFWQ10geekOPPaBPbyeO
Xg+huJiG/uDRZwA+oiA133+mShvyAxtUD7OKRbeI4lpcITFLp18=
-----END CERTIFICATE-----