Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/SVH_mOeIbLtY3ScOQ56LNEq4eEE.roa
File:                     SVH_mOeIbLtY3ScOQ56LNEq4eEE.roa (raw, json)
Hash identifier:          /sykLwy6C7TfarmN64hp/dWA47l/Pp59ei/wjPCS90Q=
Subject key identifier:   49:51:FF:98:E7:88:6C:BB:58:DD:27:0E:43:9E:8B:34:4A:B8:78:41
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       12ED
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/SVH_mOeIbLtY3ScOQ56LNEq4eEE.roa
Signing time:             Wed 29 Sep 2021 02:55:09 +0000
ROA not before:           Wed 29 Sep 2021 02:55:09 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24164
IP address blocks:        180.218.148.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4845 (0x12ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:55:09 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=4951FF98E7886CBB58DD270E439E8B344AB87841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:bb:20:86:67:7b:0f:ae:77:6c:a3:17:cd:73:
                    14:91:1a:b8:5e:d5:f0:49:59:dc:eb:5a:ce:0e:db:
                    f6:95:39:c4:18:c4:cc:57:1d:41:85:79:e4:37:ab:
                    b9:af:f4:da:0e:46:23:c7:72:fe:c0:16:29:5b:88:
                    99:0f:68:08:92:84:94:bd:22:d8:a1:e1:c9:7d:d6:
                    b3:85:dd:3c:ef:a5:31:dd:e5:7e:f2:91:6b:71:da:
                    30:86:8d:48:f6:03:68:53:74:f6:b6:8a:ac:11:bd:
                    a2:e3:de:be:91:00:e1:94:cf:13:86:eb:ed:94:a3:
                    95:ec:0d:37:87:78:1c:9e:9c:7e:79:3f:bf:ef:05:
                    a4:a3:eb:5f:0d:b6:df:36:93:3e:27:e9:f2:64:c6:
                    42:46:44:7c:66:3c:5b:35:a9:5d:de:e4:c7:cb:7f:
                    b3:5a:d8:67:3f:c9:ea:34:54:04:10:04:e3:3d:b4:
                    d9:e8:28:9e:ba:d5:87:81:5d:d8:cd:d7:a7:29:ec:
                    56:d7:d0:4f:0d:a6:e8:1b:84:17:e5:af:83:1f:3c:
                    02:e3:3f:8d:2e:b4:8b:71:e5:9a:fa:d0:32:80:47:
                    8f:43:0a:8f:a5:3b:26:a4:5f:f0:93:c5:e4:5a:b4:
                    b2:08:90:1e:41:1f:1e:ec:fc:40:a1:af:54:5d:ee:
                    6e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:51:FF:98:E7:88:6C:BB:58:DD:27:0E:43:9E:8B:34:4A:B8:78:41
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/SVH_mOeIbLtY3ScOQ56LNEq4eEE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:45:94:bb:1e:a6:fa:3b:f6:61:22:a7:44:f8:b2:b7:e7:04:
         f5:a1:94:18:40:1d:66:93:78:2a:c0:8b:7c:53:67:f0:f5:81:
         8b:5d:c4:e5:02:e6:98:49:62:ea:e5:b9:5b:51:fe:83:9b:24:
         b8:32:03:3a:31:1e:82:b7:15:27:17:13:2d:18:e4:d0:23:71:
         c2:cd:42:98:51:ae:1e:f5:33:e1:d7:c0:8f:f2:eb:a4:25:dc:
         87:1d:9f:04:d1:23:67:0a:e3:4e:8b:3b:9b:56:7d:fb:bb:b3:
         aa:5f:50:7a:17:1f:7c:90:8e:0b:89:98:8f:fd:35:e7:c8:88:
         f1:39:e8:f0:bf:38:2f:1d:1b:5d:d2:09:aa:7f:ca:45:8d:9c:
         31:b2:d5:2b:66:3e:04:e7:e2:23:44:f6:f1:ab:90:12:39:74:
         04:f4:a2:0d:7f:37:ac:ce:3e:d2:3e:08:fb:74:91:6f:22:f6:
         40:c6:0e:9b:df:9f:67:0d:3c:5e:99:ac:10:d6:4d:7f:53:07:
         ee:56:2f:9f:94:65:d3:b8:c4:d3:23:24:01:f0:9e:8f:b6:d2:
         58:e1:ce:74:dc:e9:9c:8e:d6:84:35:b6:25:16:0c:c1:c2:0e:
         a8:3c:27:5c:dd:bc:65:db:b7:a6:22:fb:64:40:08:a3:ff:fc:
         3f:36:f9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----