Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/X_tdd-fEc9f5jijR3CSZJsZ8UN8.roa
File:                     X_tdd-fEc9f5jijR3CSZJsZ8UN8.roa (raw, json)
Hash identifier:          KpeJ19Xu9mwBNZjGQHWWDMTxn78QINvg7aIBBoLJnSw=
Subject key identifier:   5F:FB:5D:77:E7:C4:73:D7:F9:8E:28:D1:DC:24:99:26:C6:7C:50:DF
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       128E
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/X_tdd-fEc9f5jijR3CSZJsZ8UN8.roa
Signing time:             Wed 29 Sep 2021 02:54:43 +0000
ROA not before:           Wed 29 Sep 2021 02:54:43 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24165
IP address blocks:        49.158.132.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4750 (0x128e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:54:43 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=5FFB5D77E7C473D7F98E28D1DC249926C67C50DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:bf:85:18:8b:4c:7d:f7:67:d1:09:f7:05:66:
                    a8:97:46:60:16:f8:1b:18:c1:9b:7c:67:a3:95:8d:
                    34:94:eb:15:60:3c:85:8a:49:d9:a6:98:04:9f:d3:
                    f1:ef:39:1b:64:bc:4c:8a:47:55:19:c2:00:fc:f4:
                    0b:56:fa:7c:51:26:d8:1f:92:17:99:a4:41:dd:48:
                    78:50:1c:2f:d7:e1:98:89:02:8a:30:7c:7e:b8:a1:
                    99:a9:c1:cb:d6:f1:a4:87:30:cc:1f:87:5c:c7:60:
                    e0:97:79:93:25:fc:89:57:8f:e4:d5:3e:88:45:52:
                    d1:04:00:38:68:84:0f:45:21:ac:13:13:13:2e:d1:
                    0e:ad:ae:8e:34:66:89:b8:21:2c:7f:5a:b9:d4:89:
                    f4:93:4e:18:c7:51:a1:08:bf:0c:5f:85:99:b3:90:
                    36:92:58:a7:38:f1:aa:1f:8e:85:72:5b:be:65:62:
                    77:f3:fc:5b:94:9b:c6:43:84:ee:1c:c4:aa:b3:2a:
                    cf:87:ae:8f:86:1a:ba:04:04:3b:69:1a:37:ec:93:
                    e3:f4:85:7e:e5:3d:cb:3c:ea:23:33:97:00:d1:ee:
                    f2:a4:09:a4:33:fd:d4:6b:a3:c6:d6:64:44:0d:00:
                    aa:21:43:96:3f:51:92:50:41:6f:aa:dc:3d:5e:ff:
                    1b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:FB:5D:77:E7:C4:73:D7:F9:8E:28:D1:DC:24:99:26:C6:7C:50:DF
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/X_tdd-fEc9f5jijR3CSZJsZ8UN8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:dd:8e:db:7a:2f:a8:71:96:94:43:41:e7:3a:d9:d0:80:3a:
         d6:ae:1b:93:a5:94:4a:0c:78:a7:f7:6b:8f:09:b2:55:3e:f0:
         b3:9f:87:db:97:1d:51:d6:a9:43:b6:27:5b:09:38:11:a2:b8:
         b2:64:c5:df:5a:44:cd:db:ba:ba:33:6a:63:61:4f:e2:a6:21:
         9b:8f:e9:13:0f:a4:af:b4:6d:f0:2c:95:e0:07:96:8e:e8:fd:
         bb:25:39:41:d4:dd:0f:b7:11:8e:28:e8:f4:4f:59:03:49:a6:
         06:2e:5e:a2:ab:23:d6:ee:b6:03:79:23:4d:4b:df:a0:5a:2f:
         63:af:60:3e:14:d8:eb:73:99:5e:0a:7d:a5:f4:32:0f:9f:e9:
         3c:de:d8:16:12:bb:6b:07:b7:4e:a4:35:85:e9:2c:e3:dd:4e:
         34:ed:d6:72:98:25:55:eb:fa:51:28:f4:c6:74:48:0f:12:ff:
         81:cf:ef:48:1b:b0:31:fd:f1:e0:da:ee:2e:c2:fd:b1:20:42:
         be:0f:95:69:50:3d:7b:c4:bc:63:c2:90:f7:de:c4:ca:16:85:
         9d:0f:12:d0:cf:8c:49:54:23:27:97:2a:c9:56:62:d1:e7:77:
         ce:52:17:24:8b:98:24:0d:93:f7:64:50:0c:fa:4c:20:49:fc:
         c0:95:4c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----