Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/uR71eUB5KELbOC8fPtCzfH6uP4Y.roa
File:                     uR71eUB5KELbOC8fPtCzfH6uP4Y.roa (raw, json)
Hash identifier:          6DdqY+eqg4X6eU3xQaDPnb84+MDl2MG7yAYzwiw0buw=
Subject key identifier:   B9:1E:F5:79:40:79:28:42:DB:38:2F:1F:3E:D0:B3:7C:7E:AE:3F:86
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       127E
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/uR71eUB5KELbOC8fPtCzfH6uP4Y.roa
Signing time:             Wed 29 Sep 2021 02:54:38 +0000
ROA not before:           Wed 29 Sep 2021 02:54:38 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24164
IP address blocks:        211.76.63.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4734 (0x127e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:54:38 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=B91EF57940792842DB382F1F3ED0B37C7EAE3F86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:23:44:85:58:23:c4:7c:8b:5e:a8:7b:22:fe:
                    29:97:14:c7:9e:3c:56:03:2e:88:4d:2d:a7:d7:f5:
                    f0:d0:4f:f9:a2:86:1c:6c:2d:9d:47:53:78:1a:4c:
                    d6:cd:df:bf:5d:55:c5:88:00:8a:df:0b:b0:fb:38:
                    ab:fd:3e:44:26:49:6c:62:72:18:9b:83:cc:d2:ef:
                    6e:6e:d1:61:5d:63:b8:cf:7c:e8:e8:38:a8:ef:6e:
                    49:70:77:4c:6b:b2:9a:67:87:a0:ed:d6:6e:58:fa:
                    a9:c2:7e:70:8d:5d:80:f4:b9:f5:5c:77:12:83:68:
                    66:45:bc:09:99:ad:9d:b1:9f:53:70:50:cf:93:b7:
                    fd:5a:5d:50:0c:b4:40:a5:a4:1b:00:21:ac:e0:cd:
                    be:5a:b0:a6:48:35:4e:06:04:ec:a4:52:c4:d4:82:
                    b8:33:d3:69:9a:27:9a:0e:66:3c:4d:fd:17:aa:64:
                    a7:e5:69:01:d9:ba:db:93:a9:de:2b:4e:03:bc:dc:
                    37:1b:7b:48:42:f5:92:1f:24:64:86:ff:fa:e7:44:
                    63:8a:f5:ff:19:f9:b9:c9:22:53:07:85:ef:b6:f4:
                    94:8d:7d:d6:ff:6a:36:d6:5a:31:9e:11:ac:f7:ca:
                    41:b1:2f:10:af:a9:0f:78:7d:04:32:9f:d6:6f:30:
                    78:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:1E:F5:79:40:79:28:42:DB:38:2F:1F:3E:D0:B3:7C:7E:AE:3F:86
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/uR71eUB5KELbOC8fPtCzfH6uP4Y.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:f2:da:c8:8a:56:23:db:64:46:6f:c2:2b:d4:89:35:56:78:
         81:dd:a6:aa:33:a5:9c:88:34:e3:b3:88:b5:59:27:c1:c4:74:
         51:bc:91:b5:ff:5d:d2:87:be:e2:60:d9:c5:61:c1:a3:db:b9:
         0a:d1:ae:49:fb:66:96:47:d3:f5:d7:cb:55:4f:b9:fa:e3:f9:
         45:ac:16:78:50:2e:fd:6e:41:ba:61:b4:64:ac:1a:29:85:ea:
         ce:28:92:e3:65:ac:f8:2d:c7:ff:07:29:51:95:4e:48:8a:c7:
         ac:cf:4e:e8:6d:a9:09:6f:0f:ad:e3:84:8a:49:57:26:00:c0:
         38:3f:ca:cf:39:72:ff:bc:64:00:98:e2:0c:9b:23:74:d0:3b:
         17:af:dd:89:cd:75:95:ce:85:e1:bc:cf:12:8d:95:2c:ae:75:
         6b:f9:c3:59:63:7f:da:2e:de:27:db:8c:3b:47:e1:41:3e:5c:
         0e:4c:69:fe:d7:26:25:30:b7:6a:c7:13:5d:4b:f8:95:55:51:
         d9:67:87:5d:03:ee:c0:23:36:d2:d6:9b:49:fb:c4:94:a0:ed:
         65:ef:46:17:2f:58:82:fd:46:b1:54:81:5f:25:c6:c8:54:1f:
         b0:91:da:ee:71:9f:3b:b4:4b:c2:9b:92:77:bc:1a:c5:d1:e2:
         03:dc:33:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----