Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/1jysIZqu63w-neqBi_PM2XRGSkA.roa
File:                     1jysIZqu63w-neqBi_PM2XRGSkA.roa (raw, json)
Hash identifier:          W2PKRfLyNxmBSp+w9z3kCbZIDPYS2f91Uz08/mxZsEw=
Subject key identifier:   D6:3C:AC:21:9A:AE:EB:7C:3E:9D:EA:81:8B:F3:CC:D9:74:46:4A:40
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0ABD
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/1jysIZqu63w-neqBi_PM2XRGSkA.roa
Signing time:             Tue 29 Sep 2020 10:07:34 +0000
ROA not before:           Tue 29 Sep 2020 10:07:34 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        49.158.147.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2749 (0xabd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:07:34 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=D63CAC219AAEEB7C3E9DEA818BF3CCD974464A40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:04:34:4c:3c:a4:4f:99:b3:67:8d:8e:a5:4c:
                    b5:e6:53:df:8a:a7:c0:f3:92:e2:e5:68:21:95:e3:
                    14:cb:dc:f0:18:a1:8c:d7:f6:08:07:a7:dd:13:4f:
                    2b:f8:1a:6b:df:6d:11:b3:a6:9b:1a:66:7e:b4:87:
                    85:7c:79:21:14:2b:f1:b7:7e:32:3d:96:dc:80:7a:
                    b4:00:50:e3:e6:a5:a7:d6:06:52:b2:c9:18:12:86:
                    b6:ad:ca:d3:5a:47:56:79:d6:28:25:ab:87:dc:86:
                    e2:44:72:69:43:8f:57:10:41:7e:41:8a:28:93:74:
                    1e:c9:a9:b4:0e:c3:25:8f:ef:c9:0f:a5:98:23:ee:
                    1d:ba:12:58:e4:4b:d5:7e:72:3b:b1:ef:81:34:8e:
                    14:dd:38:f0:39:54:d2:9c:fc:9c:11:2b:35:66:bb:
                    46:4b:1d:8d:77:48:e7:16:8b:ab:56:d5:8f:85:60:
                    64:49:a6:ef:13:11:cb:c2:a5:a8:8b:8c:a0:1b:d7:
                    1f:7d:f0:69:b6:a6:5d:1e:43:f3:5f:fb:47:2e:87:
                    54:1e:a8:25:12:78:eb:62:22:db:be:06:8a:8b:bd:
                    c6:78:49:be:c1:3c:3d:1d:ec:38:91:f9:8a:f0:2e:
                    76:e2:9c:b2:cb:a0:98:b8:e6:54:1a:1c:46:93:75:
                    5a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:3C:AC:21:9A:AE:EB:7C:3E:9D:EA:81:8B:F3:CC:D9:74:46:4A:40
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/1jysIZqu63w-neqBi_PM2XRGSkA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:48:72:5d:94:b3:00:29:19:63:8c:ef:03:d3:d0:a0:89:32:
         04:2e:c7:8f:1f:4d:34:73:4d:08:20:db:6e:8e:f7:2b:9b:cb:
         25:2a:d5:27:b6:33:0b:e7:6a:af:90:17:67:0c:b0:e5:50:40:
         f3:8b:2f:9d:8a:f0:46:cb:47:21:0e:97:86:fe:8b:a3:ae:84:
         1c:7d:ce:12:f1:d0:47:40:1d:d6:ac:dd:1f:57:28:42:e5:65:
         1d:44:e6:c9:0e:b6:8b:3c:2b:7c:0f:61:41:4f:f4:26:6d:e0:
         1d:06:61:04:a1:9c:5b:fa:f3:de:44:c7:82:72:16:77:ba:fa:
         da:a3:fb:74:f1:ba:25:34:38:0f:05:e9:35:b9:dd:8e:4e:e1:
         8b:14:18:30:5f:8e:55:52:8f:97:a9:1f:65:06:b2:00:29:cd:
         b5:05:bf:a6:87:83:b3:aa:9b:20:3e:ce:b1:6b:51:f0:ad:36:
         9e:75:95:ad:c0:82:97:8e:07:42:eb:32:17:34:a6:15:db:9e:
         89:4d:48:83:08:03:b4:38:82:1a:9a:0c:e8:ae:10:5d:3f:0e:
         54:5b:62:b1:dd:9e:ad:14:94:0c:75:be:04:cd:7b:e8:46:11:
         13:0e:02:90:7e:e5:ee:f2:b9:b5:d7:cf:bc:4a:0a:a8:98:14:
         7e:48:4a:93
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICCr0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMDA5Mjkx
MDA3MzRaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEQ2M0NBQzIxOUFBRUVC
N0MzRTlERUE4MThCRjNDQ0Q5NzQ0NjRBNDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGBDRMPKRPmbNnjY6lTLXmU9+Kp8DzkuLlaCGV4xTL3PAYoYzX
9ggHp90TTyv4GmvfbRGzppsaZn60h4V8eSEUK/G3fjI9ltyAerQAUOPmpafWBlKy
yRgShratytNaR1Z51iglq4fchuJEcmlDj1cQQX5BiiiTdB7JqbQOwyWP78kPpZgj
7h26EljkS9V+cjux74E0jhTdOPA5VNKc/JwRKzVmu0ZLHY13SOcWi6tW1Y+FYGRJ
pu8TEcvCpaiLjKAb1x998Gm2pl0eQ/Nf+0cuh1QeqCUSeOtiItu+BoqLvcZ4Sb7B
PD0d7DiR+YrwLnbinLLLoJi45lQaHEaTdVqHAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU1jysIZqu63w+neqBi/PM2XRGSkAwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzFqeXNJWnF1NjN3LW5lcUJp
X1BNMlhSR1NrQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAx
npMwDQYJKoZIhvcNAQELBQADggEBAIVIcl2UswApGWOM7wPT0KCJMgQux48fTTRz
TQgg226O9yubyyUq1Se2Mwvnaq+QF2cMsOVQQPOLL52K8EbLRyEOl4b+i6OuhBx9
zhLx0EdAHdas3R9XKELlZR1E5skOtos8K3wPYUFP9CZt4B0GYQShnFv6895Ex4Jy
Fne6+tqj+3TxuiU0OA8F6TW53Y5O4YsUGDBfjlVSj5epH2UGsgApzbUFv6aHg7Oq
myA+zrFrUfCtNp51la3AgpeOB0LrMhc0phXbnolNSIMIA7Q4ghqaDOiuEF0/DlRb
YrHdnq0UlAx1vgTNe+hGERMOApB+5e7yubXXz7xKCqiYFH5ISpM=
-----END CERTIFICATE-----