Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/uacqjQqgdXoPSyhQJd-omSZMQK8.roa
File:                     uacqjQqgdXoPSyhQJd-omSZMQK8.roa (raw, json)
Hash identifier:          aNan9uEvcjE793GvybZepEwCMAvdA8MbXtQLtIW7Ens=
Subject key identifier:   B9:A7:2A:8D:0A:A0:75:7A:0F:4B:28:50:25:DF:A8:99:26:4C:40:AF
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       125A
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/uacqjQqgdXoPSyhQJd-omSZMQK8.roa
Signing time:             Wed 29 Sep 2021 02:54:29 +0000
ROA not before:           Wed 29 Sep 2021 02:54:29 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24163
IP address blocks:        122.100.72.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4698 (0x125a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:54:29 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=B9A72A8D0AA0757A0F4B285025DFA899264C40AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:57:37:17:3b:55:da:7d:46:2f:10:8a:ec:02:
                    8f:17:fb:cb:b6:49:28:2e:29:41:74:87:5e:84:b1:
                    f3:d0:a3:e6:11:f5:c9:e1:28:df:ca:9e:68:f1:b7:
                    7b:9c:37:29:38:16:31:71:00:42:eb:10:93:98:36:
                    dd:e9:84:e9:a7:64:2c:31:b0:84:aa:62:69:47:9b:
                    63:bd:47:db:9d:95:8d:dc:6b:6c:c9:74:b9:07:41:
                    66:fd:5e:7a:2a:00:e4:2d:11:cf:49:5d:2c:6b:b6:
                    ab:bb:7f:7b:b2:06:91:4f:12:f2:d3:7f:9e:7a:17:
                    f8:e2:85:9e:75:2d:31:9f:dd:3b:93:a8:74:5f:ec:
                    43:db:76:fc:eb:42:39:92:91:7e:46:03:b6:fb:40:
                    ce:43:70:3a:37:6e:4f:b3:22:41:2e:87:cb:68:82:
                    42:58:f9:d2:25:a6:fc:1e:86:bc:7c:73:f5:3a:23:
                    9b:27:f5:14:dd:81:73:83:9f:b9:a9:c1:f0:7d:ce:
                    ea:c7:52:a9:7c:62:32:8d:01:55:0a:04:39:e8:a6:
                    2d:5c:83:e4:4d:65:f7:0f:a8:29:af:fb:42:53:91:
                    0e:bc:2e:ae:64:8f:9c:ac:4f:dd:da:61:35:8f:85:
                    c8:f0:b8:17:85:03:72:0e:52:fc:04:c2:b3:34:73:
                    a5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:A7:2A:8D:0A:A0:75:7A:0F:4B:28:50:25:DF:A8:99:26:4C:40:AF
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/uacqjQqgdXoPSyhQJd-omSZMQK8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.100.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:52:61:50:2a:3e:a8:77:df:e4:0c:0c:4f:d6:52:9b:ba:9f:
         26:cd:9d:70:2c:9b:6b:fa:93:7a:3b:20:06:5e:c6:7f:97:d7:
         67:99:2a:65:91:9f:64:98:ce:b7:51:97:78:48:a1:25:f2:38:
         48:e9:f9:5c:c6:a2:fc:56:bb:ee:10:0b:09:6a:03:13:50:96:
         16:11:9c:64:ed:02:ab:39:1a:62:3c:d4:b6:03:fc:6c:2b:79:
         2d:05:45:4a:28:56:ef:fa:16:f8:4d:3d:56:e6:e4:3f:9f:92:
         7a:57:bc:af:29:57:22:6f:73:b1:7c:9a:3d:ef:a9:eb:0f:37:
         6a:fc:60:ac:fa:57:96:71:4e:b6:85:f1:9b:45:bc:8b:09:eb:
         e6:0f:3b:80:ac:5e:73:10:05:a4:6f:a2:70:85:f6:07:8d:47:
         68:62:e8:1f:7b:06:cd:87:37:c9:83:2f:24:8c:f0:88:f8:bd:
         9c:8b:b9:ef:67:9a:70:6b:4b:73:7c:f9:5d:f1:47:93:d6:b7:
         72:a6:c6:1b:00:de:8e:0a:31:ec:30:ef:11:53:da:6b:88:f8:
         6f:69:51:68:4a:5e:14:c5:a8:a2:3d:2a:9d:3c:d4:d3:69:16:
         75:94:0b:74:33:c1:02:10:78:fd:64:e9:b8:e2:89:7f:0b:4d:
         94:56:e0:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----