Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/xSfL3Fd3poLC4nW3nqvQwkiWOh0.roa
File:                     xSfL3Fd3poLC4nW3nqvQwkiWOh0.roa (raw, json)
Hash identifier:          7Wx4KPMY5Prq/rEKfZonpCO3kvYzFGnK9tX0hL1CCDo=
Subject key identifier:   C5:27:CB:DC:57:77:A6:82:C2:E2:75:B7:9E:AB:D0:C2:48:96:3A:1D
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       124F
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/xSfL3Fd3poLC4nW3nqvQwkiWOh0.roa
Signing time:             Wed 29 Sep 2021 02:54:26 +0000
ROA not before:           Wed 29 Sep 2021 02:54:26 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24164
IP address blocks:        115.165.248.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4687 (0x124f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:54:26 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=C527CBDC5777A682C2E275B79EABD0C248963A1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e6:97:c9:54:0c:7c:d7:6c:8e:26:f4:2e:e9:
                    4a:7a:09:73:17:09:c7:08:ef:f0:a6:dc:b6:af:ce:
                    e1:e6:f0:b2:d5:a1:43:39:c2:fc:92:88:5a:f3:08:
                    e5:91:a2:13:97:86:e9:13:80:19:70:d8:38:9a:4c:
                    80:15:c2:ea:ca:c0:8d:12:57:34:6a:b1:cb:8f:66:
                    af:ea:7d:7a:71:5c:a8:1f:6c:c7:0d:e7:0f:af:62:
                    96:be:5f:9d:e4:dc:d2:56:ca:d2:66:e9:b2:93:ec:
                    e4:a8:08:c8:2e:0e:11:bb:3e:1a:db:01:10:c0:f8:
                    b3:31:b1:ea:06:c1:54:d6:b5:de:06:f7:38:06:2a:
                    ef:dc:8e:23:3a:38:14:4b:01:80:7d:a6:23:ab:6b:
                    90:a9:47:02:af:88:98:26:6a:7a:be:b3:da:e5:c7:
                    61:ed:b2:f8:7d:3e:d2:ad:0a:9e:e5:9c:6b:b6:8b:
                    4b:03:5d:ae:80:27:9e:04:24:1a:9d:60:63:81:5d:
                    7a:70:ad:76:1b:75:ba:9f:f8:39:f1:c2:11:8d:3c:
                    16:6f:ba:97:93:19:42:23:dc:fa:e7:a2:e4:4a:f0:
                    84:cd:f9:66:27:28:a7:49:f4:29:59:4c:ae:e1:5e:
                    31:77:75:3e:61:bc:ad:ed:6c:77:62:29:f0:fb:90:
                    35:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:27:CB:DC:57:77:A6:82:C2:E2:75:B7:9E:AB:D0:C2:48:96:3A:1D
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/xSfL3Fd3poLC4nW3nqvQwkiWOh0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.165.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         61:9b:bf:60:1f:f8:9c:7c:56:19:59:40:0e:68:ea:f3:17:75:
         7b:55:40:12:79:2d:ac:8d:5c:a6:88:4b:64:f4:99:f0:e1:6a:
         b4:fc:d9:42:ce:75:54:2b:01:e6:09:8e:1d:1e:fd:a0:6a:96:
         eb:d0:bd:e8:1d:9e:ff:7e:d0:d9:b5:eb:5f:33:64:23:a2:8d:
         78:c4:79:5f:09:23:60:48:ff:ee:91:22:02:0c:cf:6d:dc:30:
         3b:8b:5b:c4:92:ff:78:54:2b:f7:1d:5e:72:71:0b:a4:26:58:
         db:9d:17:69:82:fe:ca:77:48:84:7c:0c:cc:aa:2b:de:43:65:
         43:5e:1a:96:ae:a9:3b:e5:74:88:a5:19:7b:d6:22:0b:6b:a6:
         e6:28:22:62:b7:ce:5b:31:73:5e:1e:12:d9:ea:a8:f7:ef:ca:
         71:09:75:d7:49:02:b0:32:de:de:42:1a:f7:49:76:69:da:ea:
         78:0a:eb:d0:72:c9:13:ae:1f:e7:03:c0:6e:9e:d6:20:24:ae:
         79:16:38:a9:69:98:2e:5d:d1:14:d1:0c:5a:08:7a:16:d0:92:
         26:68:3f:55:3b:22:e0:cb:35:5b:1a:26:86:bd:47:2c:b1:7c:
         52:af:8c:bb:bb:b8:a8:cd:45:f2:42:a6:75:b7:08:80:7f:fb:
         91:a7:87:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----