Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/NNFo2WwlPDnRWsKTGnWmfVTyfM8.roa
File:                     NNFo2WwlPDnRWsKTGnWmfVTyfM8.roa (raw, json)
Hash identifier:          0/Xi5MRGylHNIDGJfGQH9iVYttcz2wleC+0mYGbBBXo=
Subject key identifier:   34:D1:68:D9:6C:25:3C:39:D1:5A:C2:93:1A:75:A6:7D:54:F2:7C:CF
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0B9F
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/NNFo2WwlPDnRWsKTGnWmfVTyfM8.roa
Signing time:             Tue 29 Sep 2020 10:08:38 +0000
ROA not before:           Tue 29 Sep 2020 10:08:38 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24163
IP address blocks:        49.159.88.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2975 (0xb9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:08:38 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=34D168D96C253C39D15AC2931A75A67D54F27CCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9d:4a:f2:fd:43:32:8c:1e:45:6c:05:25:ad:
                    9a:ef:3c:ce:af:d6:25:cb:71:45:7f:54:04:7d:6c:
                    6b:1f:77:a2:d1:3b:6d:72:1b:c7:25:6f:3f:44:ea:
                    06:4b:19:b8:95:44:1c:05:f9:29:b3:66:ed:20:c0:
                    ba:f8:00:dd:ef:65:34:08:a9:b1:92:4a:3b:01:4f:
                    49:92:59:e9:15:52:ce:64:99:8f:db:d7:17:1a:bb:
                    eb:54:f4:08:68:4e:8d:93:cb:6a:7f:9c:31:33:5f:
                    e5:c3:9b:7b:da:27:0f:f8:42:17:d0:8e:83:b9:44:
                    4a:d5:7e:3d:05:73:7e:33:09:3f:c0:96:25:65:74:
                    69:7d:48:84:54:af:7c:c7:92:78:05:8c:c3:a9:8b:
                    48:85:67:23:b5:c1:dc:9d:44:38:ce:6b:e1:e9:88:
                    9c:68:d2:99:9d:72:96:66:82:7f:59:ac:1d:38:13:
                    eb:98:b4:81:09:ea:5f:66:8d:ed:5d:84:db:85:32:
                    5b:27:ee:4f:bb:f3:be:dc:f9:1d:cd:5f:0d:83:49:
                    d0:3c:3f:b7:4f:1a:5c:fb:b2:05:ab:26:55:65:65:
                    99:d5:6f:51:a2:87:a7:74:b4:fa:b9:a3:8e:0b:8c:
                    f8:a7:ee:9e:74:f5:19:de:3a:87:6f:19:03:43:f9:
                    53:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:D1:68:D9:6C:25:3C:39:D1:5A:C2:93:1A:75:A6:7D:54:F2:7C:CF
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/NNFo2WwlPDnRWsKTGnWmfVTyfM8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.159.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         73:16:18:27:b0:17:5a:87:ea:b1:9b:7d:af:6b:ad:ae:5a:f5:
         93:c1:f6:80:aa:2b:6d:c5:87:96:ce:69:ba:b0:ab:65:19:98:
         5f:7f:5b:f3:45:50:60:ed:51:fa:c7:23:6d:24:36:6e:5e:8b:
         01:1e:77:3c:77:43:15:07:89:6b:e9:da:61:85:fb:37:1d:ff:
         0a:52:3f:41:81:70:5e:51:ed:fc:30:31:13:d2:b9:9a:54:76:
         dc:17:3c:1d:9f:8e:e3:f0:f3:0d:aa:46:15:e9:09:46:8a:5d:
         d9:24:2a:ae:ed:2d:87:02:39:e4:45:38:54:d5:4d:fc:88:19:
         07:5e:c1:0e:d3:ff:0d:76:cb:ad:ae:6d:0c:bc:0f:83:66:56:
         89:b2:19:ff:36:2b:be:4f:75:5b:e1:c9:78:42:cb:2a:8f:b6:
         6b:34:c1:76:b5:7d:a0:e0:f9:a0:2c:70:a6:88:a5:37:e4:20:
         63:87:19:60:9b:91:36:c4:e6:13:57:f3:12:98:5a:36:5b:d7:
         97:05:ec:2d:bb:5a:46:34:92:bc:b4:52:c6:e8:56:a1:8f:dd:
         5c:3c:03:49:ea:96:66:e5:41:56:b5:8d:53:ca:24:a7:f6:3e:
         e8:18:0d:00:b4:bf:ac:5b:83:91:08:0e:43:07:ac:97:87:b6:
         2f:37:35:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----