Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/uRshGs9LohRJrW0czMX-lkZztKA.roa
File:                     uRshGs9LohRJrW0czMX-lkZztKA.roa (raw, json)
Hash identifier:          cxoDNaSDaTjBof0Zu3J30fBDaMfAoyshsqqM1wL7ljc=
Subject key identifier:   B9:1B:21:1A:CF:4B:A2:14:49:AD:6D:1C:CC:C5:FE:96:46:73:B4:A0
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       10ED
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/uRshGs9LohRJrW0czMX-lkZztKA.roa
Signing time:             Sun 07 Feb 2021 12:49:46 +0000
ROA not before:           Sun 07 Feb 2021 12:49:46 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     4662
IP address blocks:        124.6.0.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4333 (0x10ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb  7 12:49:46 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=B91B211ACF4BA21449AD6D1CCCC5FE964673B4A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0d:50:f0:d0:40:41:a7:4e:e9:02:f4:f4:86:
                    1d:56:57:99:15:42:39:f9:41:85:33:66:f8:e9:37:
                    b0:2e:19:72:16:ca:1a:9e:c3:d1:5c:f0:e5:75:56:
                    83:b6:80:15:c1:61:c5:fd:24:92:53:0a:76:f1:b8:
                    3b:f9:52:90:a7:c9:0d:c6:ed:98:6c:1c:c6:48:4f:
                    f3:bf:2e:2f:37:e5:3e:fa:d2:7d:6a:d0:fd:e1:f0:
                    45:82:76:25:88:a5:e7:03:b5:fc:93:09:e8:bc:a3:
                    95:36:1f:4e:99:d8:b5:ac:76:85:91:42:af:41:a7:
                    82:61:77:41:e5:06:27:67:17:0f:31:f2:73:a4:39:
                    57:60:bb:fe:f6:21:38:c6:e7:8c:eb:84:68:87:d1:
                    41:ef:d6:ec:16:9b:6f:ae:2f:80:b9:55:82:0a:70:
                    74:c0:72:be:e1:07:97:61:93:1c:89:a7:06:cd:60:
                    c9:ec:5e:db:56:07:aa:69:ae:7e:3e:b8:c3:3a:0a:
                    ae:da:6a:6d:d6:49:85:29:11:6c:c0:ee:81:47:e8:
                    35:7c:a0:a6:ae:8d:12:7b:dc:6a:85:21:f9:6f:a5:
                    f9:7d:80:52:39:81:0a:55:d5:85:75:d5:d3:95:36:
                    3c:65:c0:6d:df:df:43:38:2f:a7:33:6b:f3:e6:07:
                    d4:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:1B:21:1A:CF:4B:A2:14:49:AD:6D:1C:CC:C5:FE:96:46:73:B4:A0
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/uRshGs9LohRJrW0czMX-lkZztKA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.6.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5b:cf:f4:47:09:6f:cf:11:3f:e1:23:21:91:3f:25:2b:eb:5d:
         73:70:ee:9e:de:46:c0:45:93:1e:74:14:f5:26:6b:00:6c:0e:
         bc:d7:b1:94:1e:50:0b:e5:3b:02:ce:3d:6e:77:7a:c2:16:08:
         98:5a:ee:28:ff:42:fe:5b:20:dc:eb:c0:91:d6:a6:5e:09:31:
         00:72:7e:b3:1f:15:6c:7d:50:65:40:23:0f:df:28:29:b6:b1:
         5b:2c:e1:f1:30:a7:c9:75:5c:af:8c:1b:83:87:d1:1c:ae:cf:
         dc:de:8a:a5:3a:17:cb:b2:38:29:92:9b:07:e7:12:c7:e2:d4:
         72:d4:70:be:d4:a9:85:18:e3:fb:7b:58:ff:a9:3f:ee:43:96:
         4c:d6:36:5a:14:dd:27:4d:bb:f0:30:e1:a9:1b:bb:4f:4f:b4:
         97:bf:86:31:a0:38:26:a1:4f:a0:48:73:da:d0:88:0d:31:5a:
         7e:df:4c:6e:00:e6:10:e1:77:9b:f1:f4:d6:72:da:6a:ba:aa:
         8c:fb:9b:84:62:55:0e:f1:88:17:60:e0:b6:af:36:17:45:cb:
         53:60:5a:4f:e5:1a:03:6c:b7:8a:3c:d2:66:10:09:1c:d1:18:
         85:24:d4:8e:1e:62:43:ee:27:14:e7:b4:bd:21:e6:71:33:b0:
         89:b0:07:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----