Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ZVI6tzP-dyGC4K2SOCpEs706wKM.roa
File:                     ZVI6tzP-dyGC4K2SOCpEs706wKM.roa (raw, json)
Hash identifier:          sELa4PzLkDQ2G5q5R1QnyOJsCDTWu+e+mMcSi4DSwUA=
Subject key identifier:   65:52:3A:B7:33:FE:77:21:82:E0:AD:92:38:2A:44:B3:BD:3A:C0:A3
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1248
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ZVI6tzP-dyGC4K2SOCpEs706wKM.roa
Signing time:             Wed 29 Sep 2021 02:54:24 +0000
ROA not before:           Wed 29 Sep 2021 02:54:24 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24164
IP address blocks:        115.165.192.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4680 (0x1248)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:54:24 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=65523AB733FE772182E0AD92382A44B3BD3AC0A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:36:09:65:82:a3:d7:54:3f:31:74:96:1c:ca:
                    a4:1a:b9:e9:3d:53:28:d6:b8:73:ce:4b:e9:cf:f6:
                    3c:b7:ec:22:db:32:92:e0:3f:68:e2:68:77:dd:51:
                    7d:b5:7e:e5:56:07:69:a2:58:d1:5c:9f:24:05:7e:
                    1d:b5:b5:70:2c:16:4b:63:7b:6e:9f:7f:4c:a9:b1:
                    fa:a9:3f:6a:30:aa:8a:11:44:d3:2f:9e:00:13:e9:
                    ef:e3:dc:0a:3f:e4:68:6c:7a:dd:d9:7c:91:d1:19:
                    ec:84:6f:2d:e3:2d:7b:f6:cd:40:01:a0:58:6b:2e:
                    36:44:13:70:36:19:8e:95:6b:22:62:42:0c:17:7b:
                    8f:30:69:33:a4:35:a0:ec:00:87:74:bd:41:29:34:
                    78:c5:68:3c:92:fb:6e:63:91:3a:0d:13:e8:0e:17:
                    70:b2:19:73:66:51:b2:01:e6:ce:65:06:77:c8:e7:
                    47:47:9d:7d:09:63:88:1f:b3:01:a1:14:a2:fc:83:
                    43:47:e1:83:c4:1c:a2:5e:98:7a:00:f0:d3:49:d0:
                    83:6c:d8:d3:14:16:77:88:f1:86:c8:52:93:aa:0f:
                    ea:74:75:72:ca:a2:af:8b:ca:b7:12:b2:44:84:bb:
                    71:b1:ef:9e:72:b4:af:60:36:35:79:a3:7b:12:bd:
                    d2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:52:3A:B7:33:FE:77:21:82:E0:AD:92:38:2A:44:B3:BD:3A:C0:A3
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ZVI6tzP-dyGC4K2SOCpEs706wKM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.165.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:e5:82:31:63:39:af:b8:86:2b:82:3a:d1:74:39:ff:99:bb:
         32:8c:33:3d:5a:36:7e:5a:b0:f0:98:58:87:f3:2b:db:1b:21:
         fe:fd:18:a3:15:b1:41:9c:9c:a1:41:1d:7a:6f:c4:10:d8:d7:
         18:7b:eb:b3:89:11:73:8a:7e:b8:d1:4f:ce:b5:01:d2:73:52:
         0e:0a:39:aa:69:59:c2:e1:65:fb:53:21:de:5b:36:cd:04:ee:
         91:8f:4d:c0:ae:f8:e0:bf:13:ee:ff:e7:7d:f3:1a:3b:56:f5:
         d8:08:ea:7f:22:a7:ee:4f:b0:88:d4:d8:2a:88:da:b1:2a:b0:
         2f:50:ce:ed:bb:59:18:a5:f3:fb:fe:d1:98:0c:8b:e0:f6:57:
         d3:7b:73:f6:42:df:d9:a0:7c:9e:c5:9f:b4:96:50:b4:c8:be:
         53:da:42:5b:35:08:f0:0c:e5:04:70:72:87:56:94:4c:2e:a1:
         79:cf:a2:74:1d:82:8a:4f:43:93:ef:62:2f:b2:6c:df:22:f5:
         1e:d5:ab:47:66:fb:78:94:0d:19:91:41:3b:f1:6f:7d:e9:7e:
         84:72:9f:6e:ae:97:21:4d:8c:e2:7f:41:27:11:c8:86:aa:d7:
         57:9f:75:5a:ba:56:ea:8f:04:f1:09:df:ce:b1:e3:9c:40:e5:
         82:0e:3c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----