Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/TUScFLUjCE5GvR03ywY0q3DabCI.roa
File:                     TUScFLUjCE5GvR03ywY0q3DabCI.roa (raw, json)
Hash identifier:          enhHMI7pNDrEiww5EhCBP7FjU3rodLSKKYNr7xQ9eCo=
Subject key identifier:   4D:44:9C:14:B5:23:08:4E:46:BD:1D:37:CB:06:34:AB:70:DA:6C:22
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0ACC
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/TUScFLUjCE5GvR03ywY0q3DabCI.roa
Signing time:             Tue 29 Sep 2020 10:07:39 +0000
ROA not before:           Tue 29 Sep 2020 10:07:39 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        49.158.61.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2764 (0xacc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:07:39 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=4D449C14B523084E46BD1D37CB0634AB70DA6C22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9f:78:3a:09:67:da:c1:79:21:37:95:2b:7f:
                    37:c5:5a:eb:7c:94:2a:64:8d:27:ac:35:40:73:85:
                    fd:30:81:d0:ef:4c:76:84:f4:75:0e:2a:b1:0b:12:
                    d0:ba:b7:b6:bd:70:1e:e1:05:19:a1:41:fa:20:a5:
                    b5:c8:e6:7a:43:8f:35:57:d9:e7:b0:a4:44:24:27:
                    3f:d5:ba:0a:95:d8:86:dc:26:0a:b5:e5:63:a3:a8:
                    42:ee:a1:6a:65:19:b0:e4:70:d7:9e:f6:75:7e:c6:
                    fb:bc:8a:a1:62:54:82:c1:66:a3:1b:9c:7c:db:d9:
                    6c:1e:7f:78:d9:f8:e7:54:f9:44:3d:75:9b:40:4f:
                    e4:d0:74:24:3b:52:27:c6:f7:39:4f:10:7c:90:6f:
                    9a:f6:e0:a1:da:60:45:cf:b2:ee:a1:c0:84:a1:cb:
                    58:bf:2a:c5:7c:d6:c3:73:7d:39:fd:07:13:48:b1:
                    c6:58:7b:96:03:26:10:ee:c4:b7:03:f0:6c:52:90:
                    90:1b:74:5e:54:33:03:35:28:f5:ca:f5:ec:8e:c3:
                    99:d4:dd:6b:40:d7:7e:14:68:ab:a5:a1:b2:ba:da:
                    9f:61:ac:24:03:81:cc:47:5f:48:68:3e:ea:82:c8:
                    26:1a:6c:50:e5:08:d5:60:09:55:9e:4f:d4:f8:47:
                    b3:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:44:9C:14:B5:23:08:4E:46:BD:1D:37:CB:06:34:AB:70:DA:6C:22
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/TUScFLUjCE5GvR03ywY0q3DabCI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:81:26:9d:b8:9c:7e:ba:95:81:f8:71:15:a3:f2:38:c7:f0:
         a4:a3:79:30:78:a0:a1:c6:8a:27:d2:88:b1:32:84:7c:71:61:
         ea:f2:c1:7f:8d:d2:fd:96:8b:9f:79:50:c1:72:09:5e:b8:3e:
         32:b3:b2:15:ca:7c:3b:be:fc:8a:96:c5:fe:86:9f:fa:36:12:
         f4:5b:f2:52:b5:15:4e:75:50:fa:5f:28:a9:97:b1:9c:41:8a:
         58:b9:95:d1:c4:75:27:31:9d:d7:80:7c:57:ef:9d:f3:6b:99:
         aa:f0:27:90:26:2d:49:7e:33:77:d3:75:f9:32:d2:97:a1:8d:
         ce:b9:a5:fb:19:1a:ea:51:8a:87:df:6e:09:49:8b:05:a0:b5:
         db:92:10:f3:c0:94:ca:81:e8:d5:84:f5:18:d4:67:23:bd:39:
         6f:0a:37:f4:eb:8b:69:b0:0d:d1:12:4d:ef:85:da:43:84:7a:
         fa:00:85:fd:d8:c4:2f:97:b0:05:63:ce:2c:3e:bf:67:0a:3e:
         ca:cf:6e:cb:2a:34:ed:d3:e4:25:a3:b7:20:21:e4:f5:b3:9a:
         af:03:d2:f9:4c:c1:11:92:c7:c7:1f:c6:3b:a1:b5:d7:ad:f0:
         a3:dc:6f:bc:c9:ac:f6:82:db:05:bb:03:7d:41:5c:0b:8e:eb:
         9b:f1:19:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----