Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FiOSr8HLwD9PSOTX-atUhkZoILw.roa
File:                     FiOSr8HLwD9PSOTX-atUhkZoILw.roa (raw, json)
Hash identifier:          qj0OWyfAgVybZ/6CZP0Z4cmXSbadlrrZuAHgyx3NEiQ=
Subject key identifier:   16:23:92:AF:C1:CB:C0:3F:4F:48:E4:D7:F9:AB:54:86:46:68:20:BC
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0AB6
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FiOSr8HLwD9PSOTX-atUhkZoILw.roa
Signing time:             Tue 29 Sep 2020 10:07:32 +0000
ROA not before:           Tue 29 Sep 2020 10:07:32 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        49.158.124.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2742 (0xab6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:07:32 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=162392AFC1CBC03F4F48E4D7F9AB5486466820BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:51:d4:7a:25:8c:49:6f:49:dd:2f:fe:d4:70:
                    1d:b1:a1:3b:82:1f:c1:5e:18:6f:d7:f7:e9:a8:5e:
                    28:dd:d0:e2:0c:56:41:93:68:1e:c7:b1:45:70:15:
                    22:ec:d5:a9:f3:c4:2f:5b:23:b5:1b:68:43:e0:7a:
                    45:e2:07:e3:4f:35:8d:df:79:69:ee:7c:08:ce:93:
                    ab:1f:9c:ac:f1:ba:ae:90:c9:0e:72:e8:6b:cb:90:
                    87:bf:7d:2a:d1:df:b9:b1:65:3f:90:cd:b0:57:d6:
                    8c:88:78:05:e7:3c:f7:c9:41:52:76:dc:1a:d4:d9:
                    95:9b:08:65:d3:ad:e1:f7:c9:13:ce:28:ae:a6:83:
                    9d:a5:d2:f7:01:eb:dd:4b:98:7b:8a:5d:ba:2c:8a:
                    98:10:bf:68:ac:d7:90:5f:cb:19:23:73:7d:70:b8:
                    86:96:df:c2:72:cf:3e:e2:fc:25:53:1e:87:8f:71:
                    5a:b1:f3:57:b7:17:9a:5d:db:ff:7a:eb:4c:1a:cb:
                    77:52:00:b1:62:5d:4d:79:71:13:4f:51:fe:91:09:
                    4e:e5:47:32:5c:83:e3:23:4f:75:5e:f4:6a:80:1e:
                    de:fb:4c:35:7d:9c:82:72:32:25:de:13:7a:27:0e:
                    34:77:31:e3:c2:bc:65:b5:a8:e0:cf:6e:04:7e:7c:
                    20:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:23:92:AF:C1:CB:C0:3F:4F:48:E4:D7:F9:AB:54:86:46:68:20:BC
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FiOSr8HLwD9PSOTX-atUhkZoILw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:fc:23:8b:2a:8d:1f:8c:46:89:71:c0:9d:f3:09:a2:19:0e:
         44:fd:13:30:f7:28:67:91:25:a5:48:53:8a:99:45:0f:c2:f3:
         58:7a:9c:3c:06:6d:08:59:dd:8d:08:21:be:45:23:4b:07:7f:
         b1:27:40:a6:5c:35:06:0b:70:73:97:76:fb:14:92:b3:53:05:
         86:08:37:b1:57:c6:f5:56:31:24:34:41:df:f2:64:3d:72:0c:
         3b:f1:af:3b:d4:20:22:4f:c6:c1:0c:cf:d6:b5:db:b5:ed:c4:
         d4:41:95:fa:91:67:76:b5:42:83:36:7f:19:ee:d4:2f:68:ce:
         fe:bc:4a:8b:ae:6c:01:40:4b:67:03:79:03:ac:d0:af:b8:35:
         d2:67:48:1f:55:6b:76:a8:81:85:a8:0a:64:e4:7c:84:0e:3d:
         64:5e:71:27:64:db:d9:08:39:5d:2d:fb:d7:5a:99:a2:68:74:
         43:a2:d8:b0:c1:04:97:9e:28:53:45:4f:48:39:23:33:40:f0:
         c9:27:4b:c5:73:b0:1e:82:1b:ff:68:cf:a9:68:69:28:6b:b0:
         63:18:93:28:f8:22:e1:34:fe:b8:2c:ee:6b:89:fe:58:f1:c8:
         a3:29:b9:cb:1f:93:95:b5:5c:fc:a8:91:2f:b9:b0:85:9a:1a:
         5d:38:d5:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----