Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PvhSrvxZK9WtZDwkMineEns8vLE.roa
File:                     PvhSrvxZK9WtZDwkMineEns8vLE.roa (raw, json)
Hash identifier:          WSqUIIQKbE91uRq+cP1OtfTJ6wfkoPMHNEcPyc7gai8=
Subject key identifier:   3E:F8:52:AE:FC:59:2B:D5:AD:64:3C:24:32:29:DE:12:7B:3C:BC:B1
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       125F
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PvhSrvxZK9WtZDwkMineEns8vLE.roa
Signing time:             Wed 29 Sep 2021 02:54:30 +0000
ROA not before:           Wed 29 Sep 2021 02:54:30 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24163
IP address blocks:        122.100.92.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4703 (0x125f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:54:30 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=3EF852AEFC592BD5AD643C243229DE127B3CBCB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0b:e4:0f:64:2d:cf:a0:0f:94:2e:75:66:02:
                    28:2f:38:fb:74:9a:85:70:c0:19:e3:01:9d:58:85:
                    f6:d3:ed:0f:db:31:34:03:22:c7:e8:61:2a:2b:a2:
                    f4:0c:9f:0d:32:fa:7c:c4:d8:71:01:50:95:77:ef:
                    eb:b1:e2:dc:5a:84:1f:d5:19:49:a6:f2:e9:9c:13:
                    bf:5d:06:ed:ad:33:b1:58:3f:a6:d2:b7:d7:c9:48:
                    7e:6b:14:52:0b:49:96:af:60:f1:59:a7:c2:97:02:
                    34:f1:ba:a1:5b:36:08:05:e7:8e:54:b6:3c:fa:05:
                    eb:99:f3:9c:f2:dd:a6:6a:93:59:ac:7c:f6:af:89:
                    2b:cf:44:d8:4c:bd:35:41:da:d6:84:ef:3c:45:f3:
                    32:20:6f:5c:d4:65:2a:7a:1f:4a:27:a6:17:fb:f9:
                    a4:94:c1:e8:1b:b5:bc:a2:a9:ec:a2:50:ae:f1:f4:
                    36:a0:d3:a6:21:0b:ce:bd:97:5d:c6:95:a6:84:28:
                    5c:1f:6d:04:5a:a0:67:00:01:b9:a1:16:82:ad:7f:
                    2f:0c:40:a3:84:4d:7d:b2:24:dc:3f:af:d3:a5:32:
                    75:03:17:d1:51:36:ae:7c:e3:af:2f:04:ea:0a:b4:
                    21:94:6c:5b:e2:af:23:44:4b:45:43:ab:26:cf:76:
                    8c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:F8:52:AE:FC:59:2B:D5:AD:64:3C:24:32:29:DE:12:7B:3C:BC:B1
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PvhSrvxZK9WtZDwkMineEns8vLE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.100.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         01:79:b3:65:5d:9b:d6:d3:7d:d9:4e:56:9a:a9:c3:f1:19:94:
         a4:59:d0:c4:84:2b:c4:15:9b:0c:bc:94:d0:c9:4a:7a:1c:b1:
         7d:55:6b:d1:fa:e3:75:71:99:76:12:43:04:cb:e3:70:49:b0:
         8c:4f:f0:fc:3c:11:f7:6b:a1:29:ee:19:21:0e:3c:e6:04:7d:
         9e:a9:b0:0c:fe:94:de:b3:ba:f2:f5:7c:97:29:80:e9:3d:1a:
         38:0e:13:57:fa:d2:53:2a:73:52:7f:84:b4:4a:b4:1c:9d:bd:
         b8:74:7b:40:51:5e:bd:44:9e:63:0f:fb:4a:e0:f1:8c:d3:89:
         cb:26:39:96:31:67:26:4e:5e:15:b3:4a:7b:6f:0b:aa:bc:45:
         15:e4:a9:7d:61:39:75:7e:d8:6d:ff:0f:9b:f3:8b:d5:74:3c:
         55:fb:01:d4:39:39:80:de:d9:3b:bd:02:b9:8c:dd:68:fd:21:
         ec:c2:70:59:bf:2f:eb:5f:77:08:78:9f:ac:43:a4:25:e9:b6:
         d7:63:66:6e:74:d5:12:9f:66:a6:c7:1a:ab:94:82:b6:44:5a:
         00:26:b7:41:f4:a1:52:48:b5:39:91:cd:bc:f8:d6:0a:47:60:
         70:8b:3e:c5:aa:13:c6:66:7a:11:38:fc:08:ff:bd:9a:1f:47:
         18:8b:d4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----