Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_vm9DBLtv6LHJZrau1CkEVyCsto.roa
File:                     _vm9DBLtv6LHJZrau1CkEVyCsto.roa (raw, json)
Hash identifier:          VyLn93FMb/ohduvrWi4z70XSKctYv/IS2TqFuPbOVqo=
Subject key identifier:   FE:F9:BD:0C:12:ED:BF:A2:C7:25:9A:DA:BB:50:A4:11:5C:82:B2:DA
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0AF2
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_vm9DBLtv6LHJZrau1CkEVyCsto.roa
Signing time:             Tue 29 Sep 2020 10:07:49 +0000
ROA not before:           Tue 29 Sep 2020 10:07:49 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24163
IP address blocks:        61.58.108.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2802 (0xaf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:07:49 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=FEF9BD0C12EDBFA2C7259ADABB50A4115C82B2DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d1:a5:47:ab:1d:d1:61:47:9e:7e:d1:b8:36:
                    6e:d2:6f:0d:31:c4:67:da:4b:8d:c0:54:a7:b3:17:
                    2a:98:3e:d6:68:c4:cd:c0:e4:73:80:2b:7f:c5:fe:
                    8f:15:05:d9:4c:0f:c3:50:84:b8:03:6b:75:be:86:
                    19:6a:8d:bd:86:bc:00:be:0c:ba:11:b0:b0:a5:6d:
                    4f:fc:0f:f5:09:51:7f:db:89:22:f6:64:87:d4:f3:
                    d6:72:e6:cd:cc:b5:9e:84:56:54:3c:ad:34:58:bc:
                    15:3c:48:c8:f4:2f:d4:d8:47:90:24:a0:e2:b1:3a:
                    87:ef:00:3b:1a:30:6a:6d:7d:8d:53:0a:01:8b:a3:
                    fd:d4:97:30:6b:d7:00:99:13:10:f9:dd:fd:b7:b1:
                    f8:dc:9a:10:cb:78:1a:69:48:e6:36:1e:6b:1c:c5:
                    82:62:a5:46:a6:96:8e:5d:8b:0b:9c:5a:9e:5e:8d:
                    47:3b:22:d4:79:7a:94:8c:6f:d7:ae:50:a4:9d:1f:
                    e2:f9:75:08:cc:68:05:6d:29:20:71:74:f1:2a:db:
                    14:ae:26:b1:dc:49:34:9f:00:af:6b:26:99:08:31:
                    0c:62:02:64:bc:ff:c6:cc:0f:dd:c9:b8:8c:bc:ca:
                    df:df:59:77:19:93:5d:d1:7f:da:2b:b3:29:a2:7c:
                    dd:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:F9:BD:0C:12:ED:BF:A2:C7:25:9A:DA:BB:50:A4:11:5C:82:B2:DA
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_vm9DBLtv6LHJZrau1CkEVyCsto.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.58.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:b8:d1:74:b1:94:85:34:02:b6:05:4f:25:60:cd:5c:5b:98:
         75:fa:94:29:da:f7:1c:d6:a1:f1:d1:3b:ba:c3:06:be:b8:f5:
         18:ac:78:12:a6:58:a3:03:60:d5:a5:40:c0:3b:80:84:1d:b1:
         b6:88:2b:0f:3e:73:3d:60:94:16:2a:ef:56:d1:00:31:77:1a:
         a8:e3:ae:89:5b:64:5e:78:02:6c:e5:3b:90:2b:f2:00:2f:4d:
         20:00:59:ef:9d:a5:83:84:47:c9:38:e3:0c:b8:3d:54:6b:81:
         14:26:2c:23:a3:a9:eb:83:90:ef:72:eb:a8:22:15:ea:49:88:
         e6:aa:ac:bc:ed:18:30:f1:a2:1e:1d:fa:c7:a2:ac:1c:74:5e:
         4d:c5:21:10:b2:ff:69:1a:b1:b3:ae:d4:4e:59:cc:7c:e6:7c:
         1c:9c:41:43:77:6b:be:e3:83:64:53:57:3e:74:0f:dd:f1:25:
         57:34:82:69:7d:4d:4f:a7:99:9a:17:ba:ea:fa:04:67:4d:fa:
         77:09:2b:64:4e:3a:fe:02:48:55:c1:b9:89:c0:bc:f6:cf:05:
         d2:ea:ab:e8:c1:a7:bd:7c:fd:12:f3:94:df:42:12:9f:f6:ea:
         e5:b8:65:78:c2:be:50:9d:59:34:46:0e:f0:c8:91:88:6f:64:
         cd:b3:b9:eb
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICCvIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMDA5Mjkx
MDA3NDlaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEZFRjlCRDBDMTJFREJG
QTJDNzI1OUFEQUJCNTBBNDExNUM4MkIyREEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDX0aVHqx3RYUeeftG4Nm7Sbw0xxGfaS43AVKezFyqYPtZoxM3A
5HOAK3/F/o8VBdlMD8NQhLgDa3W+hhlqjb2GvAC+DLoRsLClbU/8D/UJUX/biSL2
ZIfU89Zy5s3MtZ6EVlQ8rTRYvBU8SMj0L9TYR5AkoOKxOofvADsaMGptfY1TCgGL
o/3UlzBr1wCZExD53f23sfjcmhDLeBppSOY2HmscxYJipUamlo5diwucWp5ejUc7
ItR5epSMb9euUKSdH+L5dQjMaAVtKSBxdPEq2xSuJrHcSTSfAK9rJpkIMQxiAmS8
/8bMD93JuIy8yt/fWXcZk13Rf9orsymifN2/AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU/vm9DBLtv6LHJZrau1CkEVyCstowHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL192bTlEQkx0djZMSEpacmF1
MUNrRVZ5Q3N0by5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAI9
OmwwDQYJKoZIhvcNAQELBQADggEBADu40XSxlIU0ArYFTyVgzVxbmHX6lCna9xzW
ofHRO7rDBr649RiseBKmWKMDYNWlQMA7gIQdsbaIKw8+cz1glBYq71bRADF3Gqjj
rolbZF54AmzlO5Ar8gAvTSAAWe+dpYOER8k44wy4PVRrgRQmLCOjqeuDkO9y66gi
FepJiOaqrLztGDDxoh4d+seirBx0Xk3FIRCy/2kasbOu1E5ZzHzmfBycQUN3a77j
g2RTVz50D93xJVc0gml9TU+nmZoXuur6BGdN+ncJK2ROOv4CSFXBuYnAvPbPBdLq
q+jBp718/RLzlN9CEp/26uW4ZXjCvlCdWTRGDvDIkYhvZM2zues=
-----END CERTIFICATE-----