Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IK5jD6-Y5qkfxuDtTB_BCOIbWuQ.roa
File:                     IK5jD6-Y5qkfxuDtTB_BCOIbWuQ.roa (raw, json)
Hash identifier:          wTAyV7/7qBjK5lsFuYe+46viG6VPogAdq1R0JKoUJdU=
Subject key identifier:   20:AE:63:0F:AF:98:E6:A9:1F:C6:E0:ED:4C:1F:C1:08:E2:1B:5A:E4
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       12DA
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IK5jD6-Y5qkfxuDtTB_BCOIbWuQ.roa
Signing time:             Wed 29 Sep 2021 02:55:04 +0000
ROA not before:           Wed 29 Sep 2021 02:55:04 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24163
IP address blocks:        49.159.180.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4826 (0x12da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:55:04 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=20AE630FAF98E6A91FC6E0ED4C1FC108E21B5AE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:cf:4a:29:52:f7:e0:12:a0:5c:2e:aa:b7:7c:
                    54:d2:1f:b3:31:a3:b0:8d:5e:d3:92:a7:be:c1:78:
                    3a:9d:5d:f2:4d:ed:92:bb:c5:55:47:16:98:89:12:
                    70:09:96:7a:cd:29:c4:24:cf:cf:3d:30:58:a7:43:
                    cb:40:34:8e:2d:91:bc:f5:78:25:64:5e:1d:e0:3f:
                    d3:6b:b4:e0:6b:29:d0:41:10:80:39:31:3e:8f:26:
                    ce:85:a8:6f:8c:27:85:97:4b:e2:e5:e9:7c:43:8e:
                    06:bc:66:94:5e:38:33:e0:d0:35:48:fc:df:ef:7e:
                    d9:9b:3b:cb:70:ee:2d:f9:f1:27:23:65:4d:5c:0a:
                    53:5a:ed:e0:89:23:ee:49:4a:c2:ed:bc:60:93:1f:
                    c6:2c:67:63:10:ef:79:8c:4f:fb:b4:16:3d:13:6a:
                    a9:a1:99:f5:e3:10:ea:a6:25:14:b1:c8:34:6f:e8:
                    ad:3c:48:97:7b:8c:b3:f7:3e:31:03:0c:40:27:ad:
                    f3:b2:92:9c:90:c9:d7:7a:48:d0:98:8a:62:84:1c:
                    e3:d7:2c:a9:97:66:76:7c:be:3c:b7:94:0d:cc:04:
                    57:6e:6f:f6:d8:dd:88:1e:93:0e:6d:51:16:d7:9f:
                    11:35:88:08:0b:b9:14:a4:96:bf:8f:6b:03:ea:1c:
                    4f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:AE:63:0F:AF:98:E6:A9:1F:C6:E0:ED:4C:1F:C1:08:E2:1B:5A:E4
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IK5jD6-Y5qkfxuDtTB_BCOIbWuQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.159.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:14:6b:d8:8f:57:f6:1c:c9:72:11:5d:bc:8d:b3:03:d0:d0:
         84:a4:d1:41:c3:01:d5:cf:35:4a:43:d4:b6:43:ad:34:f4:d6:
         ad:7d:e8:9c:a0:6d:ac:6a:ae:36:03:9e:25:c4:36:ed:e9:23:
         ca:b3:89:a3:84:38:e3:be:84:3e:4b:54:0b:9e:8a:41:17:2f:
         9f:7d:60:d4:73:74:e6:fe:e7:cf:1a:c7:cc:a8:c3:ec:48:1f:
         a6:e1:ce:a7:59:d8:6b:f8:28:6a:0d:9b:fc:3b:57:e5:66:76:
         eb:96:e0:1a:40:ba:ae:0c:62:d6:30:de:a7:cf:80:f6:9d:55:
         55:f5:be:36:61:b5:f0:6d:41:a9:40:df:c1:d5:13:d2:f6:e1:
         06:4f:01:6f:e1:d2:ba:b4:55:33:a5:49:de:97:dd:b2:4a:41:
         90:3c:9e:40:8c:0f:54:26:ae:3d:f5:a3:ab:a7:1e:be:04:9f:
         cd:fa:ef:4c:08:08:ff:c5:85:09:e5:86:85:28:9c:f0:1d:19:
         dc:15:14:3b:89:36:f6:cf:f0:dc:b3:d6:ea:76:3a:44:54:25:
         5d:bb:39:97:c0:15:e5:fd:28:51:54:da:f9:47:13:52:89:74:
         60:09:64:10:cd:35:f9:8b:89:b0:63:c8:03:83:c3:fd:aa:11:
         1d:80:3b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----