Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LCSAPWPO960usDIoUQ2U8RsZv60.roa
File:                     LCSAPWPO960usDIoUQ2U8RsZv60.roa (raw, json)
Hash identifier:          U0uro2tFi+1FA2jMIsdJk5ngdzabN8po7eSf1tMadCo=
Subject key identifier:   2C:24:80:3D:63:CE:F7:AD:2E:B0:32:28:51:0D:94:F1:1B:19:BF:AD
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0AE1
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LCSAPWPO960usDIoUQ2U8RsZv60.roa
Signing time:             Tue 29 Sep 2020 10:07:44 +0000
ROA not before:           Tue 29 Sep 2020 10:07:44 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24165
IP address blocks:        49.159.216.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2785 (0xae1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:07:44 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=2C24803D63CEF7AD2EB03228510D94F11B19BFAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:42:1b:06:33:f0:38:51:0a:4c:06:3f:f5:ca:
                    f2:d5:00:8f:d4:e8:37:f9:3d:9a:2e:7d:ea:b6:36:
                    73:e1:58:1b:1b:cf:4f:f8:b1:5d:4e:bf:95:06:61:
                    60:d8:ab:1b:b2:2a:90:ad:01:3a:ef:a2:51:91:99:
                    43:e3:22:2b:71:81:f9:e8:e3:17:3d:0e:d1:95:d5:
                    73:5e:35:42:e9:53:4b:2c:b2:6f:5c:6e:e8:a4:8c:
                    8a:14:65:38:a7:c8:2a:20:55:7c:6f:2b:73:a1:73:
                    1f:e0:03:90:e8:fb:db:6c:a1:60:55:7b:bd:66:79:
                    bd:f6:e5:8c:cd:9e:1b:80:30:ac:55:68:5d:3b:32:
                    fa:e0:fd:db:8a:f8:21:8a:f8:9e:5b:b5:15:25:3d:
                    82:bf:48:1c:08:0a:29:32:2a:07:41:71:42:c0:64:
                    7a:f0:f8:e3:ec:6a:7d:d2:70:54:05:7e:22:2c:c8:
                    f7:38:c7:a1:00:ef:67:2a:6b:47:32:da:69:d2:71:
                    98:87:d1:82:2f:73:d1:80:da:64:5f:70:7c:4e:37:
                    3a:4b:cd:82:b9:ba:28:0c:f7:fb:5b:60:37:df:f6:
                    38:e3:92:0c:ce:26:06:71:6c:66:21:c7:c0:37:b4:
                    ed:a9:3d:e9:0f:56:02:c6:1c:25:bd:cd:71:dd:66:
                    7f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:24:80:3D:63:CE:F7:AD:2E:B0:32:28:51:0D:94:F1:1B:19:BF:AD
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LCSAPWPO960usDIoUQ2U8RsZv60.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.159.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:93:9a:fb:ef:4b:fc:3d:d3:ee:58:28:c1:d8:11:47:c4:b1:
         15:2c:a7:02:21:2f:11:4c:75:29:a6:4f:58:23:e1:9b:f6:b3:
         45:2f:18:f6:09:5d:06:81:df:34:8c:00:e2:9e:59:80:ed:58:
         bf:c4:6c:fc:0f:98:39:08:03:61:37:ce:ea:5b:59:ec:a3:c0:
         08:f4:70:4f:87:8b:54:11:b1:ee:a7:24:4d:a3:35:e7:d7:9d:
         b2:00:10:a0:c2:b7:29:f4:81:36:34:13:b0:fc:0e:6d:0d:06:
         e1:42:83:81:e4:8b:b9:9b:84:5a:7f:3f:97:81:c6:93:65:67:
         e5:f9:f7:07:6e:a4:90:d9:eb:9c:04:94:87:c7:75:24:29:c8:
         3c:a1:60:f1:3b:b7:ec:8d:eb:a2:dd:48:05:60:33:5a:a3:fa:
         36:7e:75:20:a8:e9:8d:00:81:fc:19:47:29:45:b6:6b:ad:37:
         b1:a7:3a:68:4f:ab:b6:ac:8e:c1:e0:a9:1b:07:dd:43:90:91:
         79:81:a6:c0:a0:5a:e4:0f:e2:ed:f5:72:eb:5b:f8:22:23:28:
         a2:ae:de:52:33:d6:f0:b0:3e:d9:86:0a:82:76:9f:dc:3d:c9:
         c7:2d:ff:46:5a:e5:f6:6a:a7:e5:7b:c6:10:26:9c:ac:e0:cc:
         9a:67:63:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----