Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Z4xFsAC0V2RjiejYyZeELfYWocA.roa
File:                     Z4xFsAC0V2RjiejYyZeELfYWocA.roa (raw, json)
Hash identifier:          V/RJLptVJeVwQ9LiIza1Z8hZKaIm8eEc1db3hYsslaI=
Subject key identifier:   67:8C:45:B0:00:B4:57:64:63:89:E8:D8:C9:97:84:2D:F6:16:A1:C0
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1335
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Z4xFsAC0V2RjiejYyZeELfYWocA.roa
Signing time:             Wed 29 Sep 2021 02:55:28 +0000
ROA not before:           Wed 29 Sep 2021 02:55:28 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     4662
IP address blocks:        61.61.208.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4917 (0x1335)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:55:28 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=678C45B000B457646389E8D8C997842DF616A1C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:89:b2:4d:e7:4f:74:73:6f:87:1a:09:ef:c9:
                    f3:58:9d:de:ae:5d:ec:7a:56:7a:8b:4b:dc:9b:97:
                    3f:5a:56:60:7e:a3:1a:d2:8f:f3:c6:81:61:db:e1:
                    e4:ed:44:bb:1e:e7:48:d5:f9:f9:5c:9a:90:61:32:
                    55:44:85:a4:a6:78:64:7f:4a:8a:e2:f8:10:fa:d5:
                    11:a0:e1:f5:cd:5b:61:b4:c2:ce:3d:91:df:84:52:
                    75:8b:60:cf:b0:5c:5d:2b:c9:8a:d7:97:0a:ae:8e:
                    88:c4:dc:a2:60:bc:40:d6:02:07:f5:4f:5d:43:19:
                    95:74:e4:2c:83:9c:ff:a6:14:46:a0:1f:00:21:34:
                    b1:09:5f:86:e4:f0:cc:62:cc:2e:65:60:2e:bc:2b:
                    6f:82:8e:0f:bf:7a:30:0e:ea:f4:e1:ba:51:d7:b3:
                    ae:d7:39:1d:24:44:7e:bc:3d:7d:8a:af:e8:85:1e:
                    51:ea:f1:d5:b6:72:82:5a:52:bb:62:00:13:d1:58:
                    b9:38:38:53:64:ca:09:5d:10:17:ec:8a:74:d5:14:
                    3b:01:20:97:47:21:f4:c8:f2:aa:b6:db:79:5c:c7:
                    40:b2:f0:0c:72:92:7d:16:5f:c2:cf:3d:d8:1c:5f:
                    ba:d9:e6:86:46:a5:fb:2f:73:c0:09:d0:62:66:ed:
                    92:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:8C:45:B0:00:B4:57:64:63:89:E8:D8:C9:97:84:2D:F6:16:A1:C0
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Z4xFsAC0V2RjiejYyZeELfYWocA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.61.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         67:06:61:1b:e8:5c:74:75:7b:66:a9:cf:53:6a:3b:14:20:fc:
         18:88:1a:a3:d2:74:4b:36:c7:4e:8e:df:cd:96:29:c5:d4:52:
         04:a4:0e:ef:87:7e:fd:f0:f9:f1:1c:2a:6b:8d:6e:fd:14:22:
         f4:cc:0a:0c:5d:a0:53:fb:49:2d:35:5e:b8:7c:12:56:4c:bb:
         bf:50:fd:98:22:51:59:c9:8a:b9:e9:1c:45:ba:30:c6:6f:ed:
         51:54:9a:cf:0a:07:48:62:2c:c1:b5:32:8b:51:3f:9d:ca:e4:
         3a:0c:1b:f3:03:e5:13:c5:f5:5d:8d:26:76:68:3e:eb:d1:6b:
         3d:3b:98:ac:16:ec:ef:63:ee:63:1d:bc:3b:b5:ef:df:fd:da:
         44:59:24:28:17:f7:7f:78:d2:ee:7a:e8:35:40:a2:fe:a2:db:
         5b:28:2e:29:a9:a2:c2:0b:4f:5b:bd:9e:32:1b:3a:7f:7a:70:
         77:7f:44:c0:f3:a3:93:6e:87:70:7b:b4:64:06:78:0d:b4:8e:
         c6:8c:f5:99:2d:18:0c:d2:4a:59:3e:3e:db:9b:b9:2e:44:fd:
         a5:31:9f:25:aa:a7:45:b3:6f:02:47:c5:a8:e4:99:c1:ca:33:
         ca:cc:89:c0:55:d5:22:c4:f5:c7:dc:50:62:20:d1:88:63:48:
         f5:7f:4e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----