Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/sWXqfDurTbptla4A3gT3BvYbpAE.roa
File:                     sWXqfDurTbptla4A3gT3BvYbpAE.roa (raw, json)
Hash identifier:          oHoeGMM/Zlkr7u7sxJvJkWFnCDX9UdHs2zBVgW5QCFo=
Subject key identifier:   B1:65:EA:7C:3B:AB:4D:BA:6D:95:AE:00:DE:04:F7:06:F6:1B:A4:01
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1264
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/sWXqfDurTbptla4A3gT3BvYbpAE.roa
Signing time:             Wed 29 Sep 2021 02:54:31 +0000
ROA not before:           Wed 29 Sep 2021 02:54:31 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24165
IP address blocks:        122.254.0.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4708 (0x1264)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:54:31 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=B165EA7C3BAB4DBA6D95AE00DE04F706F61BA401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d9:14:d0:dd:6c:9f:1e:df:0c:5a:58:54:70:
                    ab:80:99:ae:78:e6:d6:7b:64:f5:12:28:e9:2a:3b:
                    c5:d7:4a:c6:02:6f:42:af:ad:1f:4e:79:99:d3:0e:
                    7b:27:05:ee:d0:c0:82:a7:fb:b2:d6:31:89:2f:67:
                    42:87:b5:49:46:a4:60:d8:d4:b7:17:58:2f:1f:d0:
                    80:3c:e0:a1:7e:4c:50:28:fa:f6:4c:b1:a2:0f:45:
                    b4:f9:ed:c4:23:ff:2e:62:b4:1c:99:b8:2b:8e:43:
                    62:27:3d:17:c2:50:7c:5d:65:c0:a9:bd:6b:8c:54:
                    65:d0:55:41:f8:e1:2e:83:f9:11:a3:d2:89:64:ff:
                    b9:a2:79:73:e7:2c:13:f6:85:a3:27:90:cb:8e:9b:
                    60:93:eb:a4:2b:cf:7d:09:0a:a6:27:f6:ab:d9:b3:
                    ea:56:8b:25:54:5b:81:a5:7c:c4:c6:7c:89:ff:b4:
                    51:2f:0f:48:b8:64:49:b6:78:8b:37:12:12:20:29:
                    72:e8:e2:c6:a3:34:e0:cb:5e:9d:d3:eb:cd:37:51:
                    d4:4e:f7:73:0e:17:80:43:c5:c0:fd:85:92:59:a1:
                    36:37:e9:a6:0c:69:5a:eb:34:47:6e:78:2e:27:a6:
                    cc:a4:b0:26:b3:10:dd:40:02:e7:c8:8d:21:d4:84:
                    ff:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:65:EA:7C:3B:AB:4D:BA:6D:95:AE:00:DE:04:F7:06:F6:1B:A4:01
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/sWXqfDurTbptla4A3gT3BvYbpAE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.254.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4a:58:35:d5:7e:f2:0e:4b:d4:18:78:d3:08:ef:62:8a:f6:c3:
         b6:08:ed:7c:b2:1d:54:24:dc:4a:01:8f:5d:f5:01:53:d6:74:
         dc:f4:0b:df:e0:51:1f:b0:56:6b:12:e9:63:ad:a0:91:c8:85:
         4c:45:d0:2c:e4:82:72:60:e0:66:61:10:4c:42:49:3d:53:3f:
         b4:53:65:23:72:cc:6e:b7:96:a1:ed:84:d4:9d:45:2a:53:c6:
         2b:df:f7:91:06:90:ab:75:21:44:f0:e6:81:34:38:4b:a6:22:
         d5:3d:c1:36:4f:5f:05:ae:7b:d8:6a:b2:ad:37:cf:41:a3:d9:
         0f:f7:ae:cc:e6:89:0b:a6:b6:85:61:b0:37:05:b5:0a:93:2b:
         37:84:ef:e2:9f:58:51:a7:03:73:30:ed:a5:e3:b6:09:46:34:
         2f:2e:9e:04:37:d8:81:f2:82:29:a2:8f:56:34:55:bb:4a:63:
         25:9a:a8:e0:02:64:bd:80:2b:43:5a:be:e4:fb:4a:42:d0:d8:
         72:26:4d:8e:0b:40:3c:29:aa:fb:50:e7:b1:87:b3:ac:63:64:
         54:77:d9:2c:b2:fb:5f:67:ab:d1:7e:15:5e:4d:50:83:a7:2d:
         7e:76:d4:2b:f8:bb:d3:11:85:b3:f9:1f:3b:10:0b:70:6f:3c:
         29:63:5a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----