Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/OCmmoViSw7_4__b9VCPEK_m72yk.roa
File:                     OCmmoViSw7_4__b9VCPEK_m72yk.roa (raw, json)
Hash identifier:          WhxVi52iXN45sWcsaPqvtbiDgdmjMBcmV2R++LsO/FM=
Subject key identifier:   38:29:A6:A1:58:92:C3:BF:F8:FF:F6:FD:54:23:C4:2B:F9:BB:DB:29
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0AED
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/OCmmoViSw7_4__b9VCPEK_m72yk.roa
Signing time:             Tue 29 Sep 2020 10:07:47 +0000
ROA not before:           Tue 29 Sep 2020 10:07:47 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24165
IP address blocks:        49.159.72.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2797 (0xaed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:07:47 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=3829A6A15892C3BFF8FFF6FD5423C42BF9BBDB29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e1:f5:6a:80:d7:4b:34:e5:eb:24:df:df:74:
                    c9:98:78:c6:f1:74:b5:4d:ee:ba:ac:93:c3:71:e3:
                    b0:40:9f:67:25:b6:f3:e5:dc:34:43:8b:67:5f:2e:
                    f6:cf:d6:12:0d:78:af:85:f8:9f:33:7e:2b:1c:83:
                    3c:5e:d8:ff:31:18:f5:4e:d3:51:a7:40:fc:c5:05:
                    c3:42:52:a6:de:84:d7:e1:92:d9:34:9a:66:2c:97:
                    fd:ab:22:71:4d:ee:ba:2f:71:24:c6:a7:26:81:05:
                    4b:3b:4c:b7:b1:04:7b:64:d0:79:1d:b7:4b:33:a3:
                    0d:0f:fd:1e:46:83:5e:44:89:40:ee:80:62:5e:64:
                    6e:9a:9e:ad:38:18:ae:e7:3e:af:31:2d:72:ae:24:
                    43:c3:7b:dc:d9:06:87:ab:5c:44:32:ec:28:1f:c0:
                    39:f3:24:fb:9a:4e:1f:fa:29:46:b7:31:e5:30:78:
                    f3:bc:19:cf:e0:81:d3:23:51:5d:15:3a:4a:bc:b7:
                    56:db:d9:9d:2e:6c:63:20:83:8c:ff:0c:b7:0b:ae:
                    14:4d:a5:b5:18:de:b6:9f:24:75:a9:d2:fe:3d:0f:
                    4a:f8:11:8c:09:c5:6a:2d:a0:9c:e9:e8:1b:ef:b1:
                    16:f3:dd:82:95:e1:0d:fe:74:f0:1b:ce:ac:5b:b1:
                    24:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:29:A6:A1:58:92:C3:BF:F8:FF:F6:FD:54:23:C4:2B:F9:BB:DB:29
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/OCmmoViSw7_4__b9VCPEK_m72yk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.159.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:a5:6f:ec:02:56:61:37:0f:f4:97:77:43:51:37:85:b4:0d:
         0a:7c:07:fb:27:b1:08:e3:31:90:88:ed:fb:fc:de:88:20:21:
         f1:9d:6f:9b:8b:9f:5a:1b:d4:af:2b:77:95:37:17:22:6e:4c:
         79:36:f7:a6:68:2b:44:2e:f4:0f:53:81:6b:08:2f:1b:06:e4:
         31:a5:3f:78:ed:e6:cf:eb:48:54:85:43:b1:18:24:f6:cc:48:
         61:54:fb:b5:ca:ad:e0:fa:6a:b7:8b:d4:3b:c5:6f:5c:93:8a:
         ed:d4:12:46:c3:52:09:b8:cc:01:c2:0a:44:b9:d7:8e:31:5a:
         bf:bb:1e:98:c5:21:2b:b6:48:af:ba:36:91:87:27:a0:47:3b:
         27:ab:dc:a1:55:60:bf:aa:d1:49:f5:89:4c:f9:0d:a8:c6:18:
         5b:1e:a9:2d:7c:1c:e8:5c:f2:14:53:41:45:3f:76:04:80:cb:
         0c:79:44:d0:e9:f7:1b:c1:7b:62:20:74:46:d2:c5:a3:26:3a:
         ec:18:ef:7f:cb:2c:bd:be:34:24:74:72:0e:ff:a9:7f:63:d3:
         88:3a:17:00:06:ec:19:bb:94:35:dd:56:e9:74:b3:8a:34:50:
         e1:89:f5:27:f6:0e:55:c5:18:8f:31:1b:5b:d6:a6:87:13:cf:
         48:4a:05:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----