Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Ha8jJ7FGFBPtlkvWAlNqOCm9FVA.roa
File:                     Ha8jJ7FGFBPtlkvWAlNqOCm9FVA.roa (raw, json)
Hash identifier:          G27FcDQ/SYTn1HwWdNwiGosHCUxPfKsnnT9Pv9H9aaw=
Subject key identifier:   1D:AF:23:27:B1:46:14:13:ED:96:4B:D6:02:53:6A:38:29:BD:15:50
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0FFB
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Ha8jJ7FGFBPtlkvWAlNqOCm9FVA.roa
Signing time:             Sun 07 Feb 2021 12:36:56 +0000
ROA not before:           Sun 07 Feb 2021 12:36:56 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24165
IP address blocks:        49.159.220.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4091 (0xffb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb  7 12:36:56 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=1DAF2327B1461413ED964BD602536A3829BD1550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:7c:95:da:a2:dd:87:46:0c:7b:22:c2:64:b8:
                    1f:e1:b8:3b:60:0b:5c:d9:01:2a:58:c5:e7:72:4f:
                    84:80:d6:fc:05:cb:0d:65:8a:49:04:0b:d6:7e:0f:
                    e3:bb:ff:1d:f3:1d:83:e6:87:c2:0b:d8:f8:7c:ca:
                    a1:34:4a:c4:8d:a7:ca:b3:dc:29:88:1b:a2:14:fb:
                    7c:75:27:46:11:62:25:8b:3a:76:65:8a:cb:07:c8:
                    bd:de:68:4f:9a:0f:e2:25:8d:c7:22:38:a1:ff:a9:
                    a0:70:42:b8:d6:32:f0:a9:78:80:1b:c8:cf:a1:a9:
                    47:c0:11:5e:cc:7b:14:f8:35:30:ae:e7:4f:d7:9f:
                    c4:26:75:34:9d:3c:9e:b2:92:7d:6f:de:db:fb:14:
                    f3:bf:c6:b6:0a:d2:92:62:8d:a1:40:de:6b:9e:b7:
                    a2:ca:59:f0:95:25:b3:35:62:dd:de:bb:ac:33:3e:
                    3a:14:e6:2e:53:0f:30:04:2c:cd:12:73:dc:0d:80:
                    5d:32:70:d6:72:5c:b7:c0:d3:d6:ac:ec:c0:62:84:
                    5d:f2:58:46:f5:a4:7b:23:3e:30:73:b3:4f:67:d5:
                    4a:69:63:f3:48:41:ce:81:56:74:21:37:7d:9a:3a:
                    f7:90:67:dd:05:3b:62:23:39:11:9b:e2:40:7e:10:
                    59:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:AF:23:27:B1:46:14:13:ED:96:4B:D6:02:53:6A:38:29:BD:15:50
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Ha8jJ7FGFBPtlkvWAlNqOCm9FVA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.159.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:da:fd:c6:ea:4e:34:a2:fe:8f:b2:bd:c6:ce:c1:11:c9:b2:
         69:68:0e:1f:6d:e3:e4:73:0b:42:70:56:35:2b:69:5d:f6:e2:
         76:a1:cd:de:06:fe:ea:62:79:09:e1:72:ea:8e:9c:5e:7e:42:
         19:af:5b:e5:1a:54:f0:b0:38:40:70:3d:b9:26:3e:fb:dc:07:
         57:b3:e0:99:91:8e:cf:81:ae:d6:72:01:33:31:89:02:3a:6e:
         4f:f3:ba:6d:1f:76:d7:19:df:2f:67:d3:9a:6e:f5:34:13:94:
         fc:5f:5e:a5:53:e6:12:e4:7a:15:cb:40:98:12:da:a4:dc:a6:
         cd:f6:cf:1a:7e:f9:9b:15:93:ae:8d:5c:52:c0:8b:20:01:8f:
         77:6a:58:d5:02:c3:42:22:23:e0:51:79:ab:3e:91:cc:aa:a3:
         85:0e:e0:5d:6e:ea:c8:c1:46:5d:02:be:2d:f0:d4:88:9f:f8:
         08:c9:86:08:6b:1d:61:34:65:7f:fd:43:6b:d6:1c:c1:80:44:
         94:97:d5:1d:11:36:ba:9a:af:86:eb:82:be:d8:25:9c:8a:ae:
         3f:6c:94:28:c2:4f:90:92:57:94:23:87:b6:d9:b3:ab:55:82:
         05:b4:37:e6:42:6a:2d:58:d8:e3:12:19:49:5f:49:d1:e7:e4:
         6c:44:1f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----