Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/jFzecqNo37V8i46jtEfQa0xe1UQ.roa
File:                     jFzecqNo37V8i46jtEfQa0xe1UQ.roa (raw, json)
Hash identifier:          IvteVUwsAF+yX5/wKwHFvANfiSk8MN9vkayQTfVhVB8=
Subject key identifier:   8C:5C:DE:72:A3:68:DF:B5:7C:8B:8E:A3:B4:47:D0:6B:4C:5E:D5:44
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0D6F
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/jFzecqNo37V8i46jtEfQa0xe1UQ.roa
Signing time:             Thu 14 Jan 2021 07:52:46 +0000
ROA not before:           Thu 14 Jan 2021 07:52:46 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24163
IP address blocks:        61.61.236.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3439 (0xd6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Jan 14 07:52:46 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=8C5CDE72A368DFB57C8B8EA3B447D06B4C5ED544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:6b:ed:6f:70:ff:0d:5f:94:53:1c:82:b7:51:
                    98:5b:4e:46:f4:79:de:3e:4f:64:57:f2:e8:07:f3:
                    43:35:4e:ce:c5:d8:ca:45:ad:16:a4:88:72:a7:69:
                    69:1c:05:11:ce:fd:a1:e7:83:67:9d:77:b8:a1:4b:
                    15:02:b0:53:ea:7b:11:5b:82:a4:d3:4b:11:c4:d9:
                    b6:28:3c:33:0e:3b:aa:85:d5:cf:3d:3c:d0:09:25:
                    c9:8a:a2:33:b9:54:cd:2e:7d:c5:41:ee:fd:a9:81:
                    19:d5:26:59:7c:86:d7:65:83:1f:e9:19:21:8b:16:
                    c7:3c:99:4f:9a:db:8a:0c:b2:fa:4a:e4:2a:4b:34:
                    f0:99:c6:b4:79:40:28:7d:62:ba:ba:71:3d:2b:d4:
                    5b:d3:10:d7:ce:13:bd:01:31:85:4d:62:e1:0e:00:
                    24:c4:52:e3:d1:8d:08:d1:49:f9:29:e9:6b:e7:e9:
                    9b:20:32:26:36:da:c1:29:5f:cd:48:b3:9a:b3:ca:
                    81:64:83:07:34:cf:36:43:c1:0e:7e:99:ef:2d:19:
                    d7:43:4f:02:0d:7c:01:6d:82:93:7f:ff:4f:ab:82:
                    80:3b:bb:41:75:a5:de:93:d7:18:18:0b:ce:27:5d:
                    64:76:5e:62:98:c9:81:f4:9c:51:ea:f7:a6:b7:9a:
                    1c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:5C:DE:72:A3:68:DF:B5:7C:8B:8E:A3:B4:47:D0:6B:4C:5E:D5:44
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/jFzecqNo37V8i46jtEfQa0xe1UQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.61.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:2f:e3:f3:ae:34:8e:ae:d9:0e:8e:7d:ff:68:b9:2c:29:dc:
         e4:69:8f:99:a1:e3:78:36:e8:f0:0a:22:b2:05:90:0d:ac:3a:
         70:d0:b7:9b:3c:63:31:f5:29:40:c5:cc:91:4b:c4:bb:b5:97:
         a4:63:a2:32:24:05:38:6d:e2:99:6a:8c:3b:15:17:ec:4c:14:
         71:6b:94:d6:f2:40:db:4b:20:02:c4:ae:46:c5:86:c1:7a:53:
         b1:24:d0:17:fd:43:5f:63:5a:e4:d4:c1:15:15:88:d5:5e:19:
         31:7f:a8:5c:8f:b0:9b:b0:84:61:79:a4:da:8f:4c:3d:4b:c2:
         65:07:fe:9b:83:5d:53:38:0e:9a:28:81:19:8b:01:33:c7:1c:
         86:5f:b8:80:e5:ac:63:f9:40:e2:86:61:84:ea:1b:04:a6:5c:
         2c:66:cb:d7:d0:f7:52:be:6a:a6:8c:55:c0:c5:6c:4b:bc:2c:
         12:85:60:cf:a7:b5:72:61:19:94:9d:68:3e:6e:51:c5:67:f8:
         9d:e0:83:ea:4e:cb:af:fa:ac:d9:05:8d:61:8c:fc:e0:0e:95:
         49:da:5a:df:61:05:9e:65:ee:ae:d4:c5:ad:53:46:83:d9:0e:
         ea:f4:3e:83:06:33:9a:6e:3d:d5:dd:9d:c4:0d:e1:a4:65:f6:
         2a:69:29:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----