Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_3oAy7wLYFMKvXs7aJaT1SFa58g.roa
File:                     _3oAy7wLYFMKvXs7aJaT1SFa58g.roa (raw, json)
Hash identifier:          wS0OnB9DxYvhdbXlUF1iKGb7VXcZF4OAAbGRUOzXYSY=
Subject key identifier:   FF:7A:00:CB:BC:0B:60:53:0A:BD:7B:3B:68:96:93:D5:21:5A:E7:C8
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1254
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_3oAy7wLYFMKvXs7aJaT1SFa58g.roa
Signing time:             Wed 29 Sep 2021 02:54:28 +0000
ROA not before:           Wed 29 Sep 2021 02:54:28 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24164
IP address blocks:        119.77.248.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4692 (0x1254)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:54:28 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=FF7A00CBBC0B60530ABD7B3B689693D5215AE7C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e8:77:d1:9b:f8:4e:63:07:cc:04:a0:59:18:
                    84:63:f7:39:8c:1c:57:7e:ed:d9:93:fa:53:b9:d9:
                    05:8b:95:40:2a:8f:02:18:37:22:52:ec:42:b4:4c:
                    e9:f8:ee:ec:76:df:8d:26:d9:32:e0:7b:7c:8c:06:
                    f4:02:fa:a3:49:e3:1a:49:8c:05:57:d0:1c:03:ea:
                    1a:f2:5c:01:0e:52:0b:1d:13:d9:53:84:a9:49:b2:
                    5e:51:7c:e4:2f:48:6c:2c:a2:0f:af:b3:39:bc:61:
                    28:76:5a:df:a1:0c:0b:b9:fc:75:cc:9f:45:92:4a:
                    4d:01:de:e7:57:b1:06:4f:fd:11:f7:0a:4e:a9:75:
                    96:b5:56:12:ab:9b:69:52:6c:92:97:41:ac:96:8a:
                    d8:da:ea:6b:e4:0b:42:16:8f:a5:db:6a:3b:e3:85:
                    1c:c2:31:22:cc:32:98:97:c5:28:dc:9b:e6:cc:ef:
                    57:89:b5:ec:87:2e:cf:ac:2f:a9:83:7c:9d:64:25:
                    c8:61:0a:69:2f:c8:75:e7:42:cc:b6:9e:50:53:ad:
                    8c:8d:6d:ef:8c:5d:7f:ad:24:e0:67:67:2f:4c:6d:
                    82:3f:31:28:33:3c:ee:81:f2:3a:bd:6c:23:1e:2f:
                    ae:36:de:0c:a9:1c:06:0e:55:69:d3:c0:c6:a1:a6:
                    4a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:7A:00:CB:BC:0B:60:53:0A:BD:7B:3B:68:96:93:D5:21:5A:E7:C8
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_3oAy7wLYFMKvXs7aJaT1SFa58g.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.77.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:20:15:24:cc:b3:34:ee:96:83:7a:cd:7b:70:f7:1f:f8:4b:
         dc:b7:ba:b6:da:17:f0:e3:de:bf:70:d5:f4:ff:ee:26:95:83:
         f6:8b:1d:71:27:53:5d:9a:28:6d:f3:f9:a9:37:e6:d4:48:02:
         2c:03:2f:e6:29:50:2e:1b:c7:cf:a6:df:24:ae:27:72:0a:87:
         00:ae:f8:b2:37:f1:3b:25:08:8f:dc:b6:f9:cc:6b:66:c8:bf:
         75:53:ec:3e:02:db:2b:8d:88:fc:a8:95:ce:d8:33:4f:a7:dd:
         e7:25:35:09:68:93:f0:da:40:76:26:31:da:2e:47:31:5d:b4:
         8d:34:1d:f8:08:6e:b3:f4:16:b2:4f:98:6f:96:81:74:c7:52:
         c7:f4:d5:34:ca:ce:47:bd:b9:c5:26:48:4f:33:6c:80:a1:ee:
         4d:e7:da:96:9c:64:c3:d7:41:38:e8:29:5d:34:3d:67:e6:31:
         bf:9c:f6:68:16:24:a6:39:91:1d:4d:6e:cf:b2:16:7a:fe:8e:
         ca:69:24:a9:5c:29:3c:05:0a:9c:f9:15:a4:c8:ff:37:a4:e2:
         86:44:10:eb:ed:1a:e4:e9:fc:b2:88:32:fb:c9:71:d9:20:a4:
         77:ed:00:13:37:38:0c:60:9b:a6:26:69:27:23:55:ad:88:7b:
         ff:92:79:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----