Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/s7bQAmV06DzS4IzKpgcbQAvdc3o.roa
File:                     s7bQAmV06DzS4IzKpgcbQAvdc3o.roa (raw, json)
Hash identifier:          I5GI1TaUa73zP8IseImD1nOyLqR+WZ26XWyxpn8lvpE=
Subject key identifier:   B3:B6:D0:02:65:74:E8:3C:D2:E0:8C:CA:A6:07:1B:40:0B:DD:73:7A
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0BCE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/s7bQAmV06DzS4IzKpgcbQAvdc3o.roa
Signing time:             Tue 29 Sep 2020 10:08:51 +0000
ROA not before:           Tue 29 Sep 2020 10:08:51 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24165
IP address blocks:        122.254.16.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3022 (0xbce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:08:51 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=B3B6D0026574E83CD2E08CCAA6071B400BDD737A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:17:0d:9f:f4:5d:da:cb:60:8f:be:95:11:38:
                    95:bf:80:fa:fb:59:a0:19:9c:1b:68:2e:b8:90:41:
                    e3:7b:52:04:87:bd:7f:0e:e5:d4:29:09:c1:c6:6e:
                    c0:e1:f3:54:0f:7f:73:de:82:ad:12:96:bf:fe:54:
                    e6:0e:90:0f:76:b3:f6:5c:6b:6a:a8:dc:c7:c0:63:
                    4a:d6:8c:e9:6c:a4:fa:33:2e:d2:89:5c:9e:1a:8a:
                    6d:18:87:69:bc:59:78:d8:e2:26:8e:97:97:55:0e:
                    e1:aa:08:bc:9b:b1:dd:7b:a6:a0:1d:54:d1:48:2d:
                    17:66:01:52:6d:f4:91:7a:6c:d2:4b:ed:b2:ab:73:
                    b1:0b:3a:6b:08:49:e5:94:d3:82:83:41:1c:c2:b9:
                    50:88:b6:6c:96:40:2e:25:55:cd:77:28:f7:db:05:
                    b6:35:0e:04:70:d6:83:0a:8c:d4:b1:5c:fb:c1:34:
                    fc:74:7c:ac:ae:50:a2:ab:18:2c:89:f5:00:fd:bd:
                    f7:07:50:80:07:bf:84:46:4b:cd:17:41:de:e3:7c:
                    7e:8a:09:b3:28:53:33:53:b2:8c:96:8d:25:34:ed:
                    d5:24:ee:82:46:1a:7b:7a:c2:7b:49:d1:36:8b:a0:
                    c3:6d:2c:95:f1:20:5a:bc:10:63:70:93:b5:43:d7:
                    ed:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:B6:D0:02:65:74:E8:3C:D2:E0:8C:CA:A6:07:1B:40:0B:DD:73:7A
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/s7bQAmV06DzS4IzKpgcbQAvdc3o.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.254.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8e:3c:1d:87:38:e7:21:be:10:8d:06:2b:dd:8b:76:11:ff:27:
         f2:86:27:b2:eb:d3:c2:40:07:f7:3f:0c:dc:76:bd:ea:84:b1:
         8a:77:89:18:d1:ad:da:9a:84:51:49:b3:f3:46:8c:3c:69:96:
         d6:e2:e6:54:08:0c:65:df:94:17:27:77:14:1b:2f:75:6f:b5:
         23:12:d9:72:06:c7:ac:96:7a:00:ce:52:25:3d:ab:cc:72:c1:
         be:3a:8e:a6:2e:b9:e3:16:5e:d4:23:8b:e6:7d:af:45:55:8d:
         aa:9f:b7:bd:ee:f3:1b:89:e8:49:95:91:58:01:51:0f:ed:2f:
         2e:2d:19:de:8a:84:c6:18:1a:02:89:ca:70:68:08:48:f2:66:
         62:fe:d8:5f:c1:14:a3:cf:65:4b:cb:5b:cb:fd:af:b0:e4:11:
         d8:ee:46:df:1d:3c:e1:19:e3:66:76:6d:28:5a:3f:f5:2f:ea:
         e3:2d:90:fd:97:9d:fd:e6:7b:7c:35:17:b5:41:9b:0b:26:f4:
         08:f4:1f:06:47:5f:b8:00:d3:2b:5b:fa:fc:ee:59:a0:eb:b7:
         8c:81:43:67:17:c9:63:b9:13:8f:86:19:d6:ad:e9:0f:88:38:
         c1:bb:96:cb:e9:7e:2f:fe:7b:03:18:4b:cf:92:46:9c:5a:e4:
         b3:4b:cd:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----