Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zOBFOwqWdRJcWROtk4CsOkIzOEE.roa
File:                     zOBFOwqWdRJcWROtk4CsOkIzOEE.roa (raw, json)
Hash identifier:          Re2j36n0/s5zwKUrS7HEJSKmUDwEtf/46zsBD+/j15s=
Subject key identifier:   CC:E0:45:3B:0A:96:75:12:5C:59:13:AD:93:80:AC:3A:42:33:38:41
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       12E7
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zOBFOwqWdRJcWROtk4CsOkIzOEE.roa
Signing time:             Wed 29 Sep 2021 02:55:07 +0000
ROA not before:           Wed 29 Sep 2021 02:55:07 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24164
IP address blocks:        180.218.138.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4839 (0x12e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:55:07 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=CCE0453B0A9675125C5913AD9380AC3A42333841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ae:94:82:c0:f7:76:d0:b1:bb:a0:0a:4a:5e:
                    df:02:6b:60:6e:4f:8b:1d:09:9c:e3:29:91:f0:57:
                    44:c4:e1:2e:5f:09:ed:d2:f2:a8:d5:47:91:90:37:
                    1d:f1:41:83:65:6c:0a:6e:18:d8:37:dc:f8:1c:4c:
                    41:d7:b3:c4:07:5e:6a:90:d5:5c:cf:17:08:d1:85:
                    a6:a1:7e:28:f7:56:1c:05:99:92:d9:32:e5:51:e9:
                    85:26:e6:64:91:92:9f:44:76:e1:e0:4a:eb:fa:14:
                    c8:b2:de:b9:ea:1c:d5:a5:20:cf:03:53:02:6d:f6:
                    07:d9:a4:6d:4e:7f:50:0b:e4:0e:52:0f:a6:da:e1:
                    84:24:b7:58:eb:1e:b8:5f:42:66:ba:91:51:a4:27:
                    6c:2d:6d:c9:15:c5:14:e4:a2:80:c6:81:46:05:bb:
                    c1:eb:18:f3:a6:ac:6e:45:3b:04:1e:69:99:5b:75:
                    4e:ab:60:cf:5e:93:74:49:ff:4a:c1:09:93:77:af:
                    5f:27:cd:99:a5:27:91:a9:b7:aa:14:ca:5e:67:97:
                    dc:86:08:a2:93:b0:9e:f5:b3:40:67:f7:be:66:75:
                    cf:72:ca:66:8e:c5:6e:86:0b:a2:1e:1d:6a:d5:0b:
                    c2:65:40:18:58:38:39:17:93:d2:ba:b6:5a:20:d7:
                    2a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:E0:45:3B:0A:96:75:12:5C:59:13:AD:93:80:AC:3A:42:33:38:41
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zOBFOwqWdRJcWROtk4CsOkIzOEE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:97:d3:c1:0a:89:85:e5:5b:ee:f1:d1:53:e1:6e:96:98:f2:
         aa:3c:b4:88:a8:c2:fd:bb:8a:d1:c8:63:0a:bb:7c:54:01:8e:
         cd:8d:83:9b:24:0f:85:b0:f6:4c:49:da:22:f7:61:50:95:a0:
         1b:12:3a:e5:06:00:cf:30:3c:11:94:72:80:65:d5:9c:b6:06:
         f4:d2:f9:6e:b3:a8:28:4d:70:0e:6e:89:3f:98:02:48:3b:56:
         a2:16:0b:a2:d7:bb:02:c3:6a:4e:fe:e1:7d:aa:29:4a:46:ab:
         6d:f4:f1:02:7e:87:8a:46:5c:65:b9:bb:15:2a:25:79:c1:b1:
         e0:ae:48:da:44:b3:a2:36:11:bf:9a:23:cf:f2:2d:93:8b:83:
         fd:9c:32:b5:b4:7f:c1:f7:85:b5:5a:e5:18:7d:6a:fb:c2:69:
         4e:5b:13:ee:df:6a:92:86:00:87:e8:0e:27:59:70:86:d4:74:
         17:a7:c1:6e:d0:df:73:e7:94:b5:41:67:f5:aa:f5:a9:b7:1a:
         d6:57:62:1f:51:46:83:c2:48:f4:d4:17:ce:54:db:20:e1:fd:
         91:8d:c6:31:02:e5:63:7f:6c:93:98:f3:ff:9c:de:4f:8c:a9:
         61:4f:c3:63:4f:d2:9b:22:8a:73:ad:16:ca:1f:d8:dd:f8:40:
         9f:d3:5b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----