Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yBbB04iY8ONwhbpjeDnMw-x_0mw.roa
File:                     yBbB04iY8ONwhbpjeDnMw-x_0mw.roa (raw, json)
Hash identifier:          UUF1aKyCbcE9Gx4BW67BD6hzMPSXQ8+BtXRNUHBbfMU=
Subject key identifier:   C8:16:C1:D3:88:98:F0:E3:70:85:BA:63:78:39:CC:C3:EC:7F:D2:6C
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0BB0
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yBbB04iY8ONwhbpjeDnMw-x_0mw.roa
Signing time:             Tue 29 Sep 2020 10:08:43 +0000
ROA not before:           Tue 29 Sep 2020 10:08:43 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        49.158.0.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2992 (0xbb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:08:43 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=C816C1D38898F0E37085BA637839CCC3EC7FD26C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ee:6e:ef:47:4a:2a:b4:08:97:4a:9f:d1:50:
                    20:c8:49:2f:86:75:e3:fe:21:7d:32:89:8e:bf:a1:
                    82:08:f4:40:54:e5:70:03:a8:c8:df:1c:fb:07:1c:
                    9b:65:16:92:c9:d9:e7:b0:a9:37:6d:09:56:ed:6b:
                    1a:09:5c:50:53:1c:67:c3:38:ec:a0:61:db:ec:79:
                    d6:86:bb:d2:0c:50:3e:94:44:d9:96:61:86:00:40:
                    2d:ce:b7:0f:36:ad:c3:30:26:5c:99:d9:fe:66:64:
                    72:47:42:a5:bb:3c:f8:78:35:2c:90:89:51:e6:32:
                    74:1d:28:ba:19:1f:34:54:db:a8:2e:fd:a1:4f:db:
                    55:27:40:18:e4:a6:0e:1c:b8:70:1d:66:e4:c3:f5:
                    f1:b8:35:ba:9b:bb:a9:61:79:18:39:fb:f5:9b:e5:
                    4a:67:e2:e8:67:2a:b9:35:8d:ce:62:c3:e5:56:ac:
                    04:7f:08:40:ba:a7:6d:bf:9f:43:b8:51:8a:84:68:
                    5d:b6:ca:36:ed:7a:fb:5c:42:15:4d:90:de:4b:9e:
                    f7:43:31:fb:49:7d:47:c6:f1:99:07:82:a1:65:9c:
                    4e:1d:5f:a3:fa:aa:61:35:6f:19:2f:bb:09:c7:c1:
                    ff:a6:1f:19:8e:5b:43:f5:79:45:29:db:e8:bc:30:
                    9f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:16:C1:D3:88:98:F0:E3:70:85:BA:63:78:39:CC:C3:EC:7F:D2:6C
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yBbB04iY8ONwhbpjeDnMw-x_0mw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         59:d4:ff:47:9d:1b:d3:a9:5d:03:37:92:8d:2a:6d:eb:20:f9:
         40:26:2b:7f:2a:d9:f5:75:83:9b:a6:01:ea:64:3a:fb:17:fa:
         29:81:20:7f:d3:af:dd:fe:61:53:f7:bb:60:e1:6e:d3:45:b9:
         78:52:55:27:90:c3:0c:72:6a:88:13:8f:31:5d:50:65:6a:22:
         99:b1:2e:19:e1:2f:8e:f9:8f:bb:6b:69:76:da:df:12:34:5c:
         82:e4:0d:f5:05:0b:c5:b9:d6:8c:39:43:86:1d:8e:04:1f:c7:
         cc:85:74:b2:95:e1:a0:07:e2:d2:00:df:15:01:28:a3:95:9b:
         a0:69:56:b0:a2:b1:ba:34:d7:7f:7d:f4:13:23:b6:8a:32:26:
         5a:f4:98:ab:a6:92:33:0d:79:0c:1b:b9:2c:7e:06:df:8f:71:
         ce:ca:30:85:e1:cf:3b:7d:5c:d5:73:ad:95:7a:78:44:32:c1:
         55:d4:c2:22:3f:7a:83:a0:2b:69:b4:0a:63:fa:3b:5a:08:4c:
         61:9d:d5:65:c6:0d:15:f3:cf:4e:75:ed:d9:a8:da:50:e3:47:
         bf:ef:47:f9:33:ad:c5:71:88:3c:ca:08:3e:17:7d:ac:72:32:
         e0:49:76:ca:7c:54:fa:39:c9:1c:e6:eb:7d:01:15:9b:d7:7b:
         4b:2e:45:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----