Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/BWIOUbecWtSdSwhu9f3BsLVBN-E.roa
File:                     BWIOUbecWtSdSwhu9f3BsLVBN-E.roa (raw, json)
Hash identifier:          7PVNKlQZuARIWv8vIAMXzW3f1gpgffWidhlK1C5tMkk=
Subject key identifier:   05:62:0E:51:B7:9C:5A:D4:9D:4B:08:6E:F5:FD:C1:B0:B5:41:37:E1
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       198A
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/BWIOUbecWtSdSwhu9f3BsLVBN-E.roa
Signing time:             Sat 22 Oct 2022 06:06:39 +0000
ROA not before:           Sat 22 Oct 2022 06:06:39 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24164
IP address blocks:        49.158.72.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6538 (0x198a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Oct 22 06:06:39 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=05620E51B79C5AD49D4B086EF5FDC1B0B54137E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c0:3b:76:de:64:7d:c3:3f:4c:0c:49:3e:90:
                    e4:a5:f0:3b:ca:17:2f:0e:b2:13:14:5e:41:95:cf:
                    9d:8f:06:07:7d:d9:69:7c:37:39:41:28:bc:af:3d:
                    89:9d:15:b9:03:a7:c2:32:bf:0a:20:15:f2:79:11:
                    b8:52:71:a1:a0:1b:ef:38:e6:9d:9b:c7:b6:63:d7:
                    21:c2:1a:0b:b4:76:bf:a3:e2:ea:30:45:99:bb:f0:
                    62:b6:18:7c:8b:99:83:d0:90:f2:9f:c6:e5:fa:d4:
                    60:d2:99:07:0e:75:2a:52:2f:f5:63:b0:5b:be:93:
                    c4:58:3d:bc:d0:67:5c:65:82:c5:b6:c8:b8:b5:70:
                    01:2f:c7:cb:0a:79:e6:3d:ab:3c:75:8a:5a:e4:4f:
                    cb:31:ef:bc:01:69:b0:d4:6d:9c:a4:50:eb:cf:0b:
                    87:31:16:3b:a3:ea:d9:66:69:af:6f:6a:04:1b:98:
                    86:85:8b:40:74:64:aa:a7:37:ff:e5:fe:57:4f:7a:
                    69:82:5f:60:76:3a:2d:1b:ab:7e:99:0e:0d:19:8c:
                    55:69:77:25:e8:f4:62:86:2f:ba:20:52:1c:08:29:
                    74:93:c1:97:8f:dc:20:0c:c7:29:17:34:07:7a:93:
                    d0:02:d5:73:fd:39:7f:4d:51:c2:28:55:09:5b:09:
                    6a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:62:0E:51:B7:9C:5A:D4:9D:4B:08:6E:F5:FD:C1:B0:B5:41:37:E1
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/BWIOUbecWtSdSwhu9f3BsLVBN-E.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         60:f1:32:22:e1:7f:7a:fe:78:98:2f:db:e7:37:10:9b:ed:96:
         9f:7f:3a:ef:e7:03:bf:09:2b:8c:55:77:ea:12:6b:50:93:08:
         4f:39:84:14:d5:19:71:df:85:e1:42:a7:c3:de:ec:f8:05:e5:
         83:a8:92:f7:94:ab:fb:a7:ab:9d:30:db:e8:c7:51:2a:20:e4:
         f7:94:6e:f0:23:c5:81:68:a7:5a:a8:41:90:15:9a:38:d1:46:
         39:85:25:c5:5c:d4:d6:76:f4:c9:18:9b:73:2c:34:ec:36:29:
         11:f6:f3:49:6d:cd:a5:5b:a9:bd:ad:8e:ef:e4:78:fc:68:5f:
         01:6f:7a:e1:50:37:13:f7:f1:62:d7:cc:0b:b3:68:a2:c0:11:
         e1:60:95:ee:c0:5e:3a:17:55:98:07:23:5b:e9:11:6a:6a:92:
         b4:d7:98:45:d9:65:6d:ed:f7:71:7c:53:10:2f:95:97:8f:38:
         97:07:22:e1:c8:8f:8e:15:8a:82:8c:e5:71:07:d3:99:8e:5d:
         4a:53:12:b3:b9:95:fe:0e:81:5b:18:11:6a:d6:26:90:c7:63:
         0d:ec:d4:2e:80:ff:24:42:11:a2:a9:f2:76:b9:3d:d7:94:53:
         17:48:ba:a5:ce:3b:57:13:e5:29:0f:5c:6a:0f:21:7d:7f:63:
         70:17:b8:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----