Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/b54mA_wYpAPAojbDAWePPtubOV8.roa
File:                     b54mA_wYpAPAojbDAWePPtubOV8.roa (raw, json)
Hash identifier:          0YCjvvvDfA6NWpZr/we1p5mx7WAxd1eZkHB8Z/MEI6Y=
Subject key identifier:   6F:9E:26:03:FC:18:A4:03:C0:A2:36:C3:01:67:8F:3E:DB:9B:39:5F
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1347
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/b54mA_wYpAPAojbDAWePPtubOV8.roa
Signing time:             Wed 29 Sep 2021 02:55:35 +0000
ROA not before:           Wed 29 Sep 2021 02:55:35 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9924
IP address blocks:        119.77.188.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4935 (0x1347)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:55:35 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=6F9E2603FC18A403C0A236C301678F3EDB9B395F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:93:d6:e2:b2:df:52:f4:4a:d3:32:26:b7:ed:
                    8a:bf:86:d6:9d:91:0f:d1:33:e7:83:b1:ab:79:6a:
                    3c:63:fb:c7:61:58:32:4c:00:e2:d8:cc:30:96:d4:
                    6a:e6:20:b7:34:da:b2:2c:31:35:6c:fb:e1:bd:aa:
                    24:7f:46:06:c9:b8:ae:f0:42:eb:ec:14:7f:ee:53:
                    ae:71:f3:bb:72:81:c5:49:af:a9:73:1b:df:ed:a1:
                    da:7b:52:01:fe:61:c0:91:d7:62:5c:78:0e:8c:55:
                    d5:a5:b1:05:2d:5e:8b:e7:6b:d0:2c:cb:47:c3:8b:
                    ed:cb:d1:14:5d:15:eb:2e:42:30:32:f4:5a:97:f2:
                    71:f6:48:59:21:a8:d2:01:d3:af:02:9a:2b:18:8a:
                    f1:61:ce:a3:1b:44:17:07:81:59:7d:ac:48:43:d1:
                    49:48:60:6f:c4:8b:a7:41:1a:85:75:f6:ba:cf:f4:
                    7b:e1:58:95:1e:18:5c:3b:6a:24:58:c1:96:7f:8a:
                    2a:f2:a2:1a:f2:0e:5c:4b:b8:46:ef:2e:bf:ff:f3:
                    ea:9c:32:63:05:3b:e2:c8:e6:93:fc:a9:24:28:5f:
                    23:50:0f:83:ac:00:88:23:71:b5:68:36:28:9a:0c:
                    e1:84:4f:59:00:e9:b5:b8:ca:2e:73:ea:1c:51:29:
                    c9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:9E:26:03:FC:18:A4:03:C0:A2:36:C3:01:67:8F:3E:DB:9B:39:5F
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/b54mA_wYpAPAojbDAWePPtubOV8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.77.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:a2:04:18:bd:cf:2f:c8:6d:18:35:12:93:31:c7:90:42:c5:
         4a:28:e9:07:52:e7:be:dc:d1:81:1e:39:a9:d4:1b:c3:92:a5:
         2d:42:79:d1:b3:37:80:68:3e:31:e9:7c:b9:bb:17:07:da:3b:
         ce:fd:87:ff:94:ef:12:3e:4e:03:9e:76:2a:00:30:b9:c2:ae:
         83:75:ff:f9:ba:03:9d:e7:b1:9b:e3:39:b6:ee:aa:f0:43:46:
         88:63:b0:63:41:d0:6b:17:62:78:7a:a6:b9:87:f3:c0:38:ba:
         de:7b:a5:0b:6e:c6:c9:9c:eb:63:d1:d0:5e:4f:40:20:87:1d:
         60:57:a0:cb:9a:f8:d8:97:3b:a1:17:0a:e9:65:e5:16:b4:72:
         1d:63:92:f0:46:e1:d7:99:53:6a:db:e6:d2:16:79:bd:c1:9e:
         f0:7e:9c:66:8c:e1:53:fa:e9:22:2e:a7:3a:50:16:78:d1:f3:
         54:86:3f:90:cc:87:c6:ee:0b:3c:c3:91:07:6e:bd:ef:79:8e:
         34:23:ba:25:a1:6e:ba:6a:71:4e:fa:e9:ff:40:7a:a4:90:91:
         52:37:03:d8:21:0c:ff:ae:7f:95:73:94:37:54:06:e7:df:87:
         b3:4f:a2:e0:3d:14:e7:93:ad:da:8d:48:80:76:cc:af:2d:31:
         b3:ae:b7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----