Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qVR3ZegbcXV-7cXOJ53HGNkJ41Q.roa
File:                     qVR3ZegbcXV-7cXOJ53HGNkJ41Q.roa (raw, json)
Hash identifier:          DVexCurmc/mGFHtv21A8S4pe5vx2Gh/YrpNJeKpuEGs=
Subject key identifier:   A9:54:77:65:E8:1B:71:75:7E:ED:C5:CE:27:9D:C7:18:D9:09:E3:54
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0B38
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qVR3ZegbcXV-7cXOJ53HGNkJ41Q.roa
Signing time:             Tue 29 Sep 2020 10:08:09 +0000
ROA not before:           Tue 29 Sep 2020 10:08:09 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        124.6.8.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2872 (0xb38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:08:09 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=A9547765E81B71757EEDC5CE279DC718D909E354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:43:c9:40:7b:ef:07:1d:cd:01:47:fa:b1:71:
                    02:a6:6a:e5:4c:19:a0:5c:6c:2e:28:7d:56:fd:07:
                    f7:16:11:8e:ce:ba:16:4e:77:bb:ab:a7:be:ae:9e:
                    93:d3:ff:f8:a9:dc:e9:97:6f:43:29:b0:c4:0a:fe:
                    bb:a8:5f:ae:38:a9:2d:f3:0f:a4:6c:57:b0:af:b3:
                    cc:24:68:8a:81:5a:db:7f:84:f1:10:f7:1e:4d:77:
                    0f:fc:38:a2:e4:e1:b2:f9:f8:97:de:15:72:9d:10:
                    dc:47:cb:b0:f7:e4:e9:16:11:31:7f:1e:e8:4a:fb:
                    c6:ec:9b:a4:5b:b5:a1:97:d3:3c:4f:34:2d:b8:0c:
                    12:37:be:6e:b3:cd:1c:b9:fa:26:13:2d:fd:7a:7f:
                    bd:67:17:01:47:3b:d8:01:e8:e0:f6:c1:83:32:db:
                    2e:12:17:05:55:89:19:aa:d4:4a:51:5c:98:df:27:
                    0b:2f:d6:6d:cf:7b:80:78:2b:31:d2:7a:f6:04:95:
                    90:25:26:e3:dd:41:07:b2:d6:4b:c3:b0:b7:6a:29:
                    73:8c:ac:80:b9:a2:65:98:88:87:49:39:b6:07:88:
                    af:e7:b5:b3:ee:9b:57:e3:dc:6b:ba:6c:9d:8a:4e:
                    b9:39:20:f9:a3:31:cc:b3:0a:66:fd:00:c6:e7:92:
                    ba:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:54:77:65:E8:1B:71:75:7E:ED:C5:CE:27:9D:C7:18:D9:09:E3:54
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qVR3ZegbcXV-7cXOJ53HGNkJ41Q.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.6.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:fe:9a:6f:64:d8:69:33:22:65:50:11:a8:95:10:de:05:a1:
         0b:be:74:44:a3:2f:4e:c5:63:a7:02:9e:80:79:8c:a7:d8:95:
         ab:f1:29:f6:45:16:39:45:7e:70:25:ae:90:5a:bb:76:e1:49:
         a4:ee:a1:60:06:26:2c:d3:90:55:cc:8c:73:52:e4:27:18:29:
         19:41:ba:93:41:bf:3a:67:0c:66:29:8a:78:3a:2c:c6:50:77:
         c4:c0:47:d8:67:30:66:4c:56:f2:88:c8:47:4d:90:30:8a:0c:
         39:ed:55:cd:a0:13:0d:07:ef:8c:0e:8a:93:be:d6:a5:ae:56:
         7c:92:60:c0:48:4f:6f:13:57:6b:2e:e2:a1:56:7b:41:18:61:
         32:0c:55:91:b6:e6:99:06:60:d6:40:d3:a5:20:fc:1d:0f:f5:
         d6:6b:10:22:a3:c8:3d:73:4f:d4:33:50:6b:5a:4c:f4:26:99:
         a3:99:8a:1a:b7:96:3c:92:b7:be:d5:0a:89:4a:3f:3c:6c:61:
         c3:bc:0f:ee:af:c9:f0:39:52:15:b8:61:10:93:c7:68:87:99:
         0f:05:00:7e:00:4d:ed:01:7c:86:6c:bd:2b:8f:03:1a:62:8e:
         b0:a4:3e:21:97:bc:76:89:17:ba:71:5c:aa:cb:b3:d9:43:1b:
         e3:58:34:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----