Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ViwbIXlO3cuUEmtl0XlYBCsqZDQ.roa
File:                     ViwbIXlO3cuUEmtl0XlYBCsqZDQ.roa (raw, json)
Hash identifier:          MuxglJcnS5e9Jl7izX4T08l2vUw2cxF946togYeygsY=
Subject key identifier:   56:2C:1B:21:79:4E:DD:CB:94:12:6B:65:D1:79:58:04:2B:2A:64:34
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0B7B
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ViwbIXlO3cuUEmtl0XlYBCsqZDQ.roa
Signing time:             Tue 29 Sep 2020 10:08:28 +0000
ROA not before:           Tue 29 Sep 2020 10:08:28 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24163
IP address blocks:        122.100.72.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2939 (0xb7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:08:28 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=562C1B21794EDDCB94126B65D17958042B2A6434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a6:81:00:0f:7c:64:49:49:ee:2d:81:03:f6:
                    90:b3:f2:8b:1c:82:12:9c:49:2b:4d:95:2c:5c:2e:
                    3b:40:28:02:88:bb:44:09:84:03:31:09:6f:41:39:
                    20:cf:55:37:37:28:83:c4:e6:c5:6b:74:30:fe:a1:
                    3b:7d:e0:df:73:ae:f3:fd:8c:c2:f7:4d:ef:8c:d1:
                    93:05:3a:93:4a:3b:d9:fc:9a:d9:e5:42:3e:f3:ce:
                    09:de:45:c4:2b:14:7e:bc:fb:4a:12:d0:e1:df:77:
                    ed:63:9d:b0:59:77:ec:bd:9b:35:de:be:58:b9:d8:
                    6c:e2:a4:35:58:ef:fa:8c:82:ca:fb:1d:f0:2f:e4:
                    ad:0c:01:2a:cb:3e:a9:16:0e:82:42:35:8d:dc:a0:
                    e4:bf:34:64:94:3e:90:85:d6:a2:96:b2:37:23:87:
                    8a:24:dc:55:f8:fb:bd:50:0b:3a:be:70:87:78:9c:
                    41:a1:c3:9a:65:43:44:1e:01:b6:33:88:89:45:3d:
                    1d:4d:ed:8a:55:24:2d:93:86:fa:48:5f:a6:91:d5:
                    8d:d0:cd:79:6d:0a:09:82:75:e4:5e:64:ed:a3:b0:
                    e1:82:27:b1:28:29:82:9f:21:65:b3:62:99:8c:67:
                    ac:18:23:d2:e5:30:97:11:66:44:0e:82:ca:5d:59:
                    12:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:2C:1B:21:79:4E:DD:CB:94:12:6B:65:D1:79:58:04:2B:2A:64:34
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ViwbIXlO3cuUEmtl0XlYBCsqZDQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.100.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:df:1e:c1:aa:6b:c1:f6:59:ec:19:63:6a:e1:3a:af:69:5a:
         2b:16:af:d8:37:72:d4:27:88:bb:97:2e:e1:cc:cf:b2:92:61:
         02:9a:fb:0e:4a:02:30:96:5e:87:77:4b:a7:a7:09:6e:15:e0:
         43:c8:f9:e0:9a:8b:89:93:95:9e:45:aa:eb:33:71:04:49:80:
         33:d4:e5:92:b8:fb:a7:da:b0:22:d2:0e:27:1f:21:29:fd:57:
         d4:18:30:c4:ab:b9:67:ac:cf:74:d6:80:67:93:0c:1a:a7:cd:
         35:bf:4a:ea:cb:91:f6:47:e5:be:d6:84:53:df:c2:7a:39:0e:
         9e:76:ed:5a:b1:ba:02:e2:70:15:89:29:9a:1e:7a:bb:a7:3c:
         2f:81:37:e1:65:cf:28:bc:61:67:fb:72:2e:31:b2:5d:57:f4:
         33:1d:ed:d2:dd:e1:86:f3:f9:b5:97:a8:21:e5:17:8b:d8:10:
         4d:56:c3:df:2f:cf:d3:0d:a9:7c:58:1d:76:a0:9e:1d:e2:9f:
         11:54:2e:07:06:77:90:ec:e3:5c:3f:96:bb:22:a7:c7:19:5f:
         e2:2c:81:18:7f:5b:0f:a8:98:3b:b9:3b:a2:bd:73:56:95:e4:
         92:12:45:90:06:43:60:08:90:f9:36:ae:cb:6a:1c:32:67:06:
         1f:ce:52:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----