Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gtNTX5G2mtMQyVsS7VeAEPGsmvs.roa
File:                     gtNTX5G2mtMQyVsS7VeAEPGsmvs.roa (raw, json)
Hash identifier:          2+du2uTNvRqpLBEN4LuGpuZdwF03mn5RHAIHBnX37xM=
Subject key identifier:   82:D3:53:5F:91:B6:9A:D3:10:C9:5B:12:ED:57:80:10:F1:AC:9A:FB
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       105F
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gtNTX5G2mtMQyVsS7VeAEPGsmvs.roa
Signing time:             Sun 07 Feb 2021 12:44:27 +0000
ROA not before:           Sun 07 Feb 2021 12:44:27 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        180.218.168.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4191 (0x105f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb  7 12:44:27 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=82D3535F91B69AD310C95B12ED578010F1AC9AFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:03:a1:35:05:98:23:84:8e:e3:60:51:51:65:
                    a9:8c:4c:62:c8:44:59:ec:b6:67:10:3a:5c:75:10:
                    ee:b2:f1:56:37:02:fb:f5:a7:69:47:b8:e9:50:36:
                    01:50:b4:84:d1:a9:8e:f1:73:fb:59:bd:e7:5a:db:
                    fd:7c:03:8b:a5:05:54:7b:08:11:2b:70:02:f6:5f:
                    4e:4f:85:0c:97:f2:f1:6d:c3:8d:9e:ee:3c:f7:c2:
                    b7:dd:b7:eb:24:4e:25:d5:2f:6c:2b:0a:f9:3e:3e:
                    66:03:12:c7:7b:65:ac:32:de:ba:f3:4d:cb:be:06:
                    23:e1:35:2e:fa:ac:81:49:6f:25:78:e9:d9:be:53:
                    dc:05:b7:cc:6a:44:e2:c7:83:df:c5:21:9b:7d:15:
                    81:32:a8:93:90:45:23:25:c3:c4:99:53:6c:1b:b7:
                    00:47:94:eb:48:62:90:d6:a2:16:06:ba:cc:f1:9c:
                    f5:71:fe:c3:2b:16:0d:9e:3e:6f:19:78:9b:ba:10:
                    be:b1:c0:fd:61:59:82:7c:7d:6c:81:f5:5c:14:20:
                    e4:5e:14:df:97:9e:d8:4b:a0:d4:d5:47:a4:33:d5:
                    c8:0e:74:e2:7c:dc:3b:ef:c3:8a:55:3a:ff:67:42:
                    36:cd:7a:07:13:d3:13:63:ba:46:b0:8c:1f:c3:8a:
                    f3:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:D3:53:5F:91:B6:9A:D3:10:C9:5B:12:ED:57:80:10:F1:AC:9A:FB
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gtNTX5G2mtMQyVsS7VeAEPGsmvs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:be:2b:f6:90:98:72:6f:33:08:3a:3c:0e:b6:00:71:cb:08:
         37:43:c8:12:ad:0b:e7:c6:d6:00:75:d9:ec:f9:fa:96:30:0f:
         49:4b:09:f7:61:d1:8c:ef:8b:bd:20:66:1f:55:9a:a8:36:b7:
         7d:cc:c7:33:37:c0:35:66:f6:d3:37:f6:cc:ae:46:36:35:14:
         18:3d:5f:cd:3d:a0:45:53:7f:e9:32:3a:93:b3:44:fb:3c:3a:
         9f:11:36:be:de:5e:ea:83:34:6a:8e:f9:68:48:57:46:a3:fb:
         c3:96:ea:78:24:36:c2:9f:fb:3b:bf:4c:27:8a:87:07:c5:b1:
         b9:a1:ca:1d:95:b0:cc:c4:e1:b9:48:0a:30:23:26:f2:67:d9:
         03:c7:a5:30:a6:6e:6c:2d:19:18:cb:a5:37:d3:d2:d2:37:7b:
         f4:da:81:24:75:46:85:cd:54:75:95:9f:f1:36:7d:98:fb:c5:
         14:88:b3:ae:8f:81:93:10:02:df:b1:cc:04:e0:3d:cb:4f:bd:
         d5:83:ae:24:0d:77:61:e9:15:63:08:da:d5:6c:1a:2d:5e:fa:
         1b:7f:fd:21:54:e4:e4:f4:a7:02:30:45:16:07:bc:b9:e6:97:
         0f:65:2c:c0:c7:5f:27:3e:aa:39:4f:f6:1f:d9:ad:73:46:ab:
         15:f7:2d:ce
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICEF8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTAyMDcx
MjQ0MjdaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDgyRDM1MzVGOTFCNjlB
RDMxMEM5NUIxMkVENTc4MDEwRjFBQzlBRkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDoA6E1BZgjhI7jYFFRZamMTGLIRFnstmcQOlx1EO6y8VY3Avv1
p2lHuOlQNgFQtITRqY7xc/tZveda2/18A4ulBVR7CBErcAL2X05PhQyX8vFtw42e
7jz3wrfdt+skTiXVL2wrCvk+PmYDEsd7Zawy3rrzTcu+BiPhNS76rIFJbyV46dm+
U9wFt8xqROLHg9/FIZt9FYEyqJOQRSMlw8SZU2wbtwBHlOtIYpDWohYGuszxnPVx
/sMrFg2ePm8ZeJu6EL6xwP1hWYJ8fWyB9VwUIOReFN+XnthLoNTVR6Qz1cgOdOJ8
3Dvvw4pVOv9nQjbNegcT0xNjukawjB/DivPNAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUgtNTX5G2mtMQyVsS7VeAEPGsmvswHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2d0TlRYNUcybXRNUXlWc1M3
VmVBRVBHc212cy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0
2qgwDQYJKoZIhvcNAQELBQADggEBAH++K/aQmHJvMwg6PA62AHHLCDdDyBKtC+fG
1gB12ez5+pYwD0lLCfdh0Yzvi70gZh9Vmqg2t33MxzM3wDVm9tM39syuRjY1FBg9
X809oEVTf+kyOpOzRPs8Op8RNr7eXuqDNGqO+WhIV0aj+8OW6ngkNsKf+zu/TCeK
hwfFsbmhyh2VsMzE4blICjAjJvJn2QPHpTCmbmwtGRjLpTfT0tI3e/TagSR1RoXN
VHWVn/E2fZj7xRSIs66PgZMQAt+xzATgPctPvdWDriQNd2HpFWMI2tVsGi1e+ht/
/SFU5OT0pwIwRRYHvLnmlw9lLMDHXyc+qjlP9h/ZrXNGqxX3Lc4=
-----END CERTIFICATE-----