Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/GG0_D4t3YrrL_4SsrXXqccVwke0.roa
File:                     GG0_D4t3YrrL_4SsrXXqccVwke0.roa (raw, json)
Hash identifier:          5ABJ7XY9dk1zaGOGexa9aLu7xBSbPWE31ktgVq2XZT0=
Subject key identifier:   18:6D:3F:0F:8B:77:62:BA:CB:FF:84:AC:AD:75:EA:71:C5:70:91:ED
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0B5E
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/GG0_D4t3YrrL_4SsrXXqccVwke0.roa
Signing time:             Tue 29 Sep 2020 10:08:20 +0000
ROA not before:           Tue 29 Sep 2020 10:08:20 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24163
IP address blocks:        49.158.152.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2910 (0xb5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:08:20 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=186D3F0F8B7762BACBFF84ACAD75EA71C57091ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bd:e0:08:30:26:7a:b6:c6:6c:71:aa:bb:0c:
                    d9:a3:84:9c:16:8b:7e:7d:b4:b2:28:6b:66:8f:4a:
                    93:76:e8:8c:c0:30:73:43:84:29:e9:04:ca:81:d2:
                    af:51:10:97:31:1d:28:7a:ab:66:ff:18:87:3e:c7:
                    59:e9:bb:a7:05:82:c3:4b:d3:e1:1f:4a:6b:41:e0:
                    10:5c:1c:72:bd:86:74:5e:07:81:4e:07:81:37:ee:
                    99:93:da:3d:f1:a1:92:27:4e:f7:3e:bb:d2:45:62:
                    23:3f:ee:1d:2c:f6:c8:18:81:bb:02:98:25:54:5e:
                    35:da:21:0b:e3:fc:b5:bc:84:ca:f9:04:d1:78:cd:
                    61:33:89:82:b2:5e:79:82:3f:e5:e3:89:93:96:14:
                    7f:c0:d1:1f:d2:40:2b:1f:0e:57:20:23:67:61:75:
                    86:aa:4f:63:fa:ac:89:c6:5f:d5:bb:08:d3:0e:51:
                    d1:46:aa:30:2b:37:66:6e:b0:74:39:8a:5d:ea:20:
                    d2:eb:ca:88:f7:d8:7a:99:96:73:78:59:94:61:93:
                    6d:b9:3e:15:7c:ad:34:26:78:d4:c5:4f:f0:e8:1a:
                    e4:37:d6:5f:c4:8d:d1:68:cd:2e:3d:51:9a:83:0c:
                    6f:ed:85:5e:ee:19:5b:c8:f5:73:4e:ae:1e:1e:5e:
                    59:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:6D:3F:0F:8B:77:62:BA:CB:FF:84:AC:AD:75:EA:71:C5:70:91:ED
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/GG0_D4t3YrrL_4SsrXXqccVwke0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:e4:88:f1:3c:7d:ee:6e:4a:21:ef:60:cc:27:bc:c1:6b:03:
         a5:d5:c7:dd:18:e0:2f:ea:e6:6b:08:1d:0c:6e:a5:5a:a4:21:
         05:be:de:57:70:ca:e6:ae:35:f2:bc:fa:84:3b:c6:ba:92:bd:
         c6:a1:8f:f1:1f:05:d0:7b:2f:a6:25:c6:76:5c:5c:ef:89:82:
         dc:26:0e:b1:58:2e:1c:ff:99:34:6c:cd:63:d4:32:9c:ff:3f:
         be:06:5e:45:52:f5:32:bd:0c:56:52:26:6f:c1:58:92:a4:a7:
         53:a8:0c:9c:6c:e1:87:cb:6b:82:6d:7c:85:9b:e4:20:fb:b4:
         2b:6b:09:21:83:73:14:5f:a8:31:c3:ff:b4:86:8a:5f:d0:39:
         1c:5d:97:63:75:8b:af:ec:1f:a7:52:f3:38:5f:b1:13:27:10:
         1e:73:bb:ca:b7:51:d0:95:64:45:e1:4c:29:a7:83:f9:d7:4e:
         75:e0:de:59:55:af:c2:0b:93:ed:f3:74:d2:94:de:92:81:3f:
         6e:12:01:c7:40:2a:66:53:97:69:f7:f3:20:be:64:f4:5f:14:
         4d:0f:7f:d6:06:54:36:5b:b8:49:e1:ca:7c:16:23:a2:ac:70:
         d0:a9:a4:b1:d1:25:b6:af:09:79:53:1c:ac:bf:09:a5:0f:9c:
         dc:1d:af:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----