Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/bK5cqxZ8e4vqUAecS-4oC5kQ1ko.roa
File:                     bK5cqxZ8e4vqUAecS-4oC5kQ1ko.roa (raw, json)
Hash identifier:          ktghzCngWLEl/AZd0G5MJPFg5T5KfyKJcNwyYdseCDA=
Subject key identifier:   6C:AE:5C:AB:16:7C:7B:8B:EA:50:07:9C:4B:EE:28:0B:99:10:D6:4A
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1298
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/bK5cqxZ8e4vqUAecS-4oC5kQ1ko.roa
Signing time:             Wed 29 Sep 2021 02:54:45 +0000
ROA not before:           Wed 29 Sep 2021 02:54:45 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24163
IP address blocks:        49.158.156.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4760 (0x1298)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:54:45 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=6CAE5CAB167C7B8BEA50079C4BEE280B9910D64A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9d:24:a8:f6:d8:4e:e8:ab:4e:d7:bc:a5:10:
                    98:24:1e:b4:bd:21:95:40:f5:3d:6a:c5:cc:80:18:
                    f2:77:2e:d8:5a:d5:c9:b1:8c:01:81:03:f4:01:c8:
                    9a:27:af:d6:d7:5e:87:b6:db:04:c6:b6:ca:e1:ba:
                    07:b7:07:95:7e:8a:8b:35:ed:38:9a:ed:2c:87:ba:
                    cd:7d:0b:0c:28:2b:29:f9:59:3d:b6:8b:fc:3b:28:
                    25:3b:14:f0:f4:b6:fa:47:49:6d:61:5f:6b:aa:f4:
                    26:89:bd:64:60:bb:fb:8c:dc:9e:c4:68:5b:63:32:
                    4f:0f:f1:b5:60:b1:84:93:3c:68:5b:83:4d:ba:36:
                    42:d5:db:66:ae:b3:3a:e6:18:3d:60:5f:55:da:1a:
                    d5:ea:01:21:4e:30:42:7c:fc:e1:6e:1f:8b:98:38:
                    da:9e:ed:a4:2b:e0:bd:16:cd:62:bd:94:96:4d:30:
                    f1:2e:a7:39:a2:57:47:57:0e:ae:5d:77:62:b9:7c:
                    12:66:ad:9c:7e:05:1a:bd:4a:54:23:92:b2:b4:4e:
                    65:e5:de:e2:2c:e8:84:de:46:56:c4:15:e9:2f:e2:
                    ae:9f:1d:b0:d7:fd:2c:7a:33:61:44:6c:90:70:a3:
                    56:95:c4:3f:1b:9c:d9:f2:e9:74:f8:3c:66:39:ea:
                    ef:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:AE:5C:AB:16:7C:7B:8B:EA:50:07:9C:4B:EE:28:0B:99:10:D6:4A
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/bK5cqxZ8e4vqUAecS-4oC5kQ1ko.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:c1:23:21:23:bd:2d:d9:cf:1e:19:ed:f2:9e:cd:af:ae:cb:
         46:70:31:7f:49:02:46:97:71:89:fc:07:2d:02:5b:c8:68:90:
         f0:87:e2:2a:a5:b5:0c:be:99:fa:c6:be:88:37:6f:20:e4:6c:
         25:b8:1d:ce:58:9d:b8:8f:c6:04:82:2a:b0:f0:6a:e5:c4:c0:
         d4:fc:0d:a0:71:01:19:95:ae:e9:a5:97:f6:c4:1e:88:38:c6:
         de:a4:0a:b6:5c:5a:59:9c:1f:ea:e5:78:9b:34:d5:d9:a4:32:
         b3:d8:14:3c:a2:36:63:c2:e5:43:1c:6c:63:bc:7b:b7:cc:f9:
         22:ce:3e:70:03:82:d0:dc:e5:57:c3:b2:2e:b8:f2:f0:8a:bf:
         1b:ec:02:f4:e9:0f:90:aa:83:6b:7e:7e:88:ea:0c:2d:b1:bc:
         0e:d9:b4:38:1c:9a:8e:6f:ae:65:1a:84:ce:cd:66:8d:72:79:
         fc:e9:a1:80:94:09:f9:fb:30:73:38:8e:47:53:91:1b:23:95:
         e8:5d:f8:e5:29:2a:45:d5:c2:c9:fd:6b:c3:26:36:77:91:ed:
         31:be:30:e6:c9:36:7a:23:98:d5:7d:06:76:35:9e:ba:80:dc:
         3d:9c:d9:00:24:b6:37:68:e0:f4:72:dc:97:13:f5:96:d8:cb:
         a9:5d:8c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----