Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/bLqDzFapKV8aPx3pPod3_2g_RgI.roa
File:                     bLqDzFapKV8aPx3pPod3_2g_RgI.roa (raw, json)
Hash identifier:          tm/yVc+fHeDvP8dACV0LEOhaLh25ZS4OK8LlomN9syQ=
Subject key identifier:   6C:BA:83:CC:56:A9:29:5F:1A:3F:1D:E9:3E:87:77:FF:68:3F:46:02
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1462
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/bLqDzFapKV8aPx3pPod3_2g_RgI.roa
Signing time:             Thu 19 May 2022 06:01:55 +0000
ROA not before:           Thu 19 May 2022 06:01:55 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24164
IP address blocks:        49.158.144.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5218 (0x1462)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: May 19 06:01:55 2022 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=6CBA83CC56A9295F1A3F1DE93E8777FF683F4602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:16:8f:1e:ea:f6:b9:d2:75:e7:64:86:0e:21:
                    5f:2c:ae:91:6f:e9:3b:9b:67:3b:41:19:3c:35:2c:
                    31:64:6b:91:88:1b:3e:d7:c9:3d:8d:44:36:dd:9d:
                    c8:02:cd:56:7a:25:07:33:bc:ea:8e:db:4b:fc:f7:
                    25:05:b2:00:cf:51:01:d9:23:f1:c3:16:3d:9c:78:
                    79:d3:7e:b2:5a:a4:89:88:13:75:65:96:c6:5e:bf:
                    0f:8d:7a:77:40:b7:61:4f:2d:89:05:73:61:fd:24:
                    f3:2a:30:bd:e4:51:86:1c:c5:3a:e9:f5:80:85:21:
                    14:85:fb:1b:e8:bb:9a:27:43:65:1c:4e:89:2a:38:
                    60:60:02:a8:5e:31:f6:f8:9c:2d:b3:d3:1f:62:b9:
                    76:ae:70:4a:fb:e5:6b:ee:b4:49:b7:28:5c:2e:e8:
                    8f:33:45:8d:35:1a:75:f0:99:55:9a:49:a1:29:92:
                    ea:18:10:e2:92:67:3b:25:71:a5:cd:df:e6:9a:90:
                    64:23:c3:94:13:1e:a2:48:58:1f:cf:b1:f3:9a:fd:
                    eb:8a:62:52:44:66:15:ae:95:31:43:5b:07:d5:14:
                    d8:dd:8d:89:46:02:10:47:09:b9:10:80:25:ab:d2:
                    66:98:25:f3:3f:63:88:18:e9:33:37:63:d3:5f:cc:
                    50:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:BA:83:CC:56:A9:29:5F:1A:3F:1D:E9:3E:87:77:FF:68:3F:46:02
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/bLqDzFapKV8aPx3pPod3_2g_RgI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:d7:36:3a:f1:60:00:38:08:d6:de:24:05:65:b1:f3:3b:81:
         de:6b:08:ae:82:44:75:30:56:e8:94:6f:18:c3:55:a7:9e:ae:
         b2:32:1a:71:f7:db:fb:39:81:f4:41:ea:df:d7:db:78:3e:f5:
         d7:e8:ba:62:8c:15:25:99:73:29:c4:01:0e:b3:1d:0f:d9:8a:
         22:6e:5d:f4:33:cc:3f:7d:5a:34:5e:7c:c9:fd:9b:36:ea:99:
         56:c5:b3:03:17:d1:1b:59:e1:13:21:dc:6f:ba:dd:b1:6f:8a:
         a9:db:48:77:5c:12:40:78:5d:6b:df:21:20:e2:7b:53:26:91:
         a6:31:1a:2d:03:3b:02:db:49:da:9e:f5:12:1d:ee:c0:63:2c:
         c8:91:9e:40:b7:fb:84:d6:5d:c5:e8:9f:38:ff:4f:95:11:5d:
         5e:6a:c1:15:0e:f1:ae:0c:42:52:83:bd:f3:a4:4b:fd:ff:9b:
         ec:ca:08:de:8b:88:14:dd:72:f5:cf:95:35:9a:63:38:9d:14:
         45:21:e7:b5:7b:eb:0a:00:09:2c:c6:af:de:15:d5:79:6e:f7:
         94:fe:93:0c:76:bb:77:a5:bc:89:59:b2:91:0c:1a:53:68:1e:
         9e:dd:68:18:47:bc:98:bf:a5:a8:c2:75:08:be:40:de:a8:c5:
         0c:7f:9d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----