Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/boAzdLQh1g-DyDjH63CarXOzwow.roa
File:                     boAzdLQh1g-DyDjH63CarXOzwow.roa (raw, json)
Hash identifier:          4vNCBYSoMqjVhyfAMhi0OK1E9lj08PmgDcMVu+ivxGw=
Subject key identifier:   6E:80:33:74:B4:21:D6:0F:83:C8:38:C7:EB:70:9A:AD:73:B3:C2:8C
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0F11
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/boAzdLQh1g-DyDjH63CarXOzwow.roa
Signing time:             Sun 07 Feb 2021 12:32:45 +0000
ROA not before:           Sun 07 Feb 2021 12:32:45 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        61.60.216.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3857 (0xf11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb  7 12:32:45 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=6E803374B421D60F83C838C7EB709AAD73B3C28C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:21:21:b4:88:12:4b:ea:aa:68:ca:0f:4b:f2:
                    9d:77:8c:5c:f1:36:03:ab:86:13:77:ab:37:84:82:
                    01:93:11:03:16:36:1e:bd:30:e3:06:fb:21:a3:76:
                    75:40:50:ec:59:2a:47:4e:2e:e8:64:5e:cb:a4:31:
                    ca:40:8b:37:af:2b:d4:55:66:12:51:43:53:91:c7:
                    3d:7d:ba:89:fb:8b:be:0f:4c:08:0a:21:76:08:72:
                    ac:1a:5d:15:16:c9:71:99:42:19:0b:2b:37:d0:60:
                    a5:8c:ee:6a:0e:fd:1d:0b:7e:35:10:4a:ba:1e:ea:
                    b3:da:ff:79:44:b6:0a:49:f9:f3:60:8b:7b:b5:75:
                    57:7c:63:2c:dc:52:4d:27:ca:9b:4b:8f:d8:8e:e2:
                    a4:a1:64:ab:20:81:59:f0:59:31:10:e3:87:ff:e8:
                    a7:1c:58:ad:a3:ac:41:ab:3e:ff:ad:f8:d7:69:dd:
                    9e:6a:e5:ee:be:de:7b:ac:d3:04:a8:75:a5:2d:b4:
                    a5:4e:95:e2:2a:b2:92:8e:be:fb:61:b8:f2:47:a6:
                    82:9f:23:f8:91:19:16:28:07:ab:ae:dd:29:fa:0c:
                    30:cb:2b:ef:cd:4d:86:32:91:b3:ad:74:e5:ff:68:
                    1d:5c:31:3d:7d:83:84:9f:b3:dc:7c:32:6c:c9:72:
                    26:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:80:33:74:B4:21:D6:0F:83:C8:38:C7:EB:70:9A:AD:73:B3:C2:8C
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/boAzdLQh1g-DyDjH63CarXOzwow.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.60.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3b:5d:12:b9:20:5e:6c:e4:24:74:22:bc:7b:f6:3b:42:fd:77:
         81:ac:f9:fb:88:c0:f9:c2:99:43:96:41:ec:1b:b1:77:07:36:
         a4:80:2f:69:62:56:65:85:f2:90:59:2b:32:ee:8a:0d:29:b9:
         3e:ef:31:75:d0:91:65:67:47:07:26:a7:f5:32:05:78:ff:bf:
         16:f0:20:ab:03:b9:76:19:ec:d8:c3:5c:51:e8:fe:6d:cd:2e:
         f3:5e:ee:6e:e7:aa:9a:03:0a:d8:d2:2a:9d:8d:48:bd:a6:22:
         70:7d:a0:a4:03:91:39:4d:45:24:47:c5:bc:cf:a9:de:4d:c6:
         53:d8:3a:88:43:03:d6:41:f5:41:92:a5:4b:cf:4e:cc:89:8b:
         d7:e4:c1:c7:21:b3:c2:95:be:55:1c:d3:c7:f0:cb:90:a6:bd:
         75:09:72:66:c8:28:35:93:27:1f:1e:46:58:48:06:95:a2:76:
         77:f0:c3:7e:2b:3a:95:23:ee:eb:3e:2b:84:f5:26:6d:7a:35:
         11:90:6a:f4:a5:bb:b8:b6:e6:1c:28:0f:f5:3d:af:67:c0:19:
         ce:86:47:6d:cb:7b:b0:2c:f4:a1:78:66:2c:40:ec:ad:ca:ed:
         14:bc:d4:7d:2a:73:5e:ba:87:11:63:33:6f:e5:c9:d5:01:29:
         4d:c0:19:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----