Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Woo3bomY1tp83gCOGw2xiKaFQUY.roa
File:                     Woo3bomY1tp83gCOGw2xiKaFQUY.roa (raw, json)
Hash identifier:          i22N+A7Igwo7akGlbfInHIvpG+KbQOMCRFOTc5DfG80=
Subject key identifier:   5A:8A:37:6E:89:98:D6:DA:7C:DE:00:8E:1B:0D:B1:88:A6:85:41:46
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       12B5
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Woo3bomY1tp83gCOGw2xiKaFQUY.roa
Signing time:             Wed 29 Sep 2021 02:54:52 +0000
ROA not before:           Wed 29 Sep 2021 02:54:52 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24164
IP address blocks:        49.159.160.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4789 (0x12b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:54:52 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=5A8A376E8998D6DA7CDE008E1B0DB188A6854146
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:dd:94:97:c4:62:85:c1:7b:1b:22:6c:82:1a:
                    58:b5:f4:4b:8c:bb:28:07:8f:7c:62:6b:b3:13:10:
                    4d:5c:86:5f:8c:a5:0f:ef:5c:47:32:66:6d:ac:f7:
                    82:72:50:12:84:ca:02:cd:fa:8b:db:5a:22:42:50:
                    29:fa:71:6b:f6:ca:d7:4a:fd:40:87:dd:7e:63:48:
                    07:00:cd:bb:be:ca:12:fd:69:46:da:20:1b:55:e4:
                    6e:f7:72:26:a2:13:5e:47:e5:dd:40:e7:d0:49:2b:
                    a6:2c:8a:a3:2c:f7:f6:1e:cd:1a:5e:d6:bc:33:1c:
                    d1:f9:86:8e:16:e0:4e:85:2f:1d:b8:32:38:14:93:
                    51:42:85:a7:2e:b7:bc:d8:9b:42:b8:84:ce:fe:bf:
                    62:f2:06:71:6a:4b:b5:bd:af:f1:16:a9:0b:94:b2:
                    63:15:18:53:03:95:53:38:7e:fa:55:ea:e4:32:91:
                    a0:29:19:39:8d:14:ba:85:d8:bf:fa:cc:40:67:ac:
                    3b:d8:9d:08:d4:01:d9:26:ae:18:1d:59:f1:2b:f1:
                    5a:70:9e:89:8d:7d:87:ff:e2:fa:9b:f4:15:de:26:
                    63:fe:8d:43:2e:ad:62:59:c9:de:81:34:8f:2f:2e:
                    90:93:49:f3:26:48:ea:a0:28:c4:df:f7:cd:64:10:
                    68:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:8A:37:6E:89:98:D6:DA:7C:DE:00:8E:1B:0D:B1:88:A6:85:41:46
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Woo3bomY1tp83gCOGw2xiKaFQUY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.159.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         14:bb:5b:03:4d:bb:e7:21:c8:34:f3:57:e2:75:dc:2b:84:bc:
         fa:7b:74:75:ec:94:21:22:cb:36:40:c5:8c:10:d4:b5:51:01:
         71:b1:b4:ae:5f:b9:75:41:3e:d7:87:74:ad:69:80:99:c2:23:
         ec:9d:b1:a6:38:3c:1b:27:86:29:33:d3:2e:82:40:bb:32:dc:
         c1:34:62:89:e6:6e:ed:01:2f:85:2d:e8:6f:c5:b4:c1:e1:a1:
         4f:1f:43:ea:f0:a8:d1:69:0e:3f:29:90:4e:00:8d:86:65:ed:
         2d:3e:fc:7b:ba:59:12:98:37:0a:9a:d8:21:9f:87:c9:5a:e9:
         62:23:f0:6b:36:9c:c9:2b:ee:b2:57:2e:3c:b7:34:47:ed:08:
         eb:32:cb:1f:8a:37:f2:ce:c8:f3:99:94:07:0a:5a:97:b4:4d:
         f2:21:ff:f2:14:33:43:43:6d:30:4a:75:80:f2:50:58:73:4e:
         5a:5a:04:e8:d1:f2:0b:25:cf:dc:1f:90:b2:d2:0e:db:92:72:
         44:b2:e8:e1:d7:0c:7d:64:26:8e:71:79:72:60:d6:e8:dc:18:
         7c:6a:67:f2:b2:dd:59:7c:0b:b8:6e:d5:9a:51:4b:ff:8f:97:
         29:c3:7a:c9:35:64:77:7b:99:40:07:bc:9e:0c:ac:55:a1:77:
         4c:af:f8:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----