Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fK36DqQ1HnYZ_51HbBVGhNv8ER8.roa
File:                     fK36DqQ1HnYZ_51HbBVGhNv8ER8.roa (raw, json)
Hash identifier:          l0I8LE6zU2BVn4Qgp5m41odelhrY33VR3vKU8cgc6TU=
Subject key identifier:   7C:AD:FA:0E:A4:35:1E:76:19:FF:9D:47:6C:15:46:84:DB:FC:11:1F
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1422
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fK36DqQ1HnYZ_51HbBVGhNv8ER8.roa
Signing time:             Fri 29 Apr 2022 10:31:17 +0000
ROA not before:           Fri 29 Apr 2022 10:31:17 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24164
IP address blocks:        49.159.216.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5154 (0x1422)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Apr 29 10:31:17 2022 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=7CADFA0EA4351E7619FF9D476C154684DBFC111F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:97:83:95:23:34:83:b5:35:38:e0:3a:8d:dc:
                    e3:97:b2:4b:1a:9b:c3:6e:dc:3c:94:86:2a:3f:9d:
                    65:de:6d:27:d6:20:f6:6f:7d:19:c5:62:9a:7e:71:
                    f3:66:d9:e1:df:dc:f4:0e:58:85:3f:1a:44:c4:5c:
                    e5:a6:93:87:c9:5c:b4:60:59:be:e1:98:b9:15:81:
                    49:f4:a3:4d:07:60:b0:3c:8e:79:d9:ca:77:f7:35:
                    ab:dd:18:d8:56:de:b9:c8:57:5e:1d:2f:41:48:c1:
                    2a:eb:02:40:bf:1f:55:b0:95:56:6b:39:47:81:8e:
                    3d:8d:fd:e2:bb:4d:d6:62:52:4c:9d:01:de:2d:5c:
                    d3:12:eb:13:f6:87:2d:e3:6d:fc:91:2c:66:39:e8:
                    ab:8e:bc:36:cd:82:39:1f:b9:af:99:ef:f5:1c:2a:
                    ec:0f:89:a3:bc:94:3f:15:31:ae:7c:cd:48:76:ec:
                    16:f5:b8:d5:aa:a5:43:d2:c7:f4:23:90:cb:75:71:
                    c5:ec:74:74:2c:d9:fb:8d:54:3e:a0:03:2c:a5:55:
                    ce:d6:d8:cb:df:2c:0f:63:9d:3a:f9:a6:6b:93:bc:
                    2b:ec:c6:40:9b:d4:bf:27:b2:1b:b9:18:dc:cf:79:
                    07:30:fe:89:75:ae:5e:e9:45:67:7b:c0:a8:ed:ee:
                    ea:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:AD:FA:0E:A4:35:1E:76:19:FF:9D:47:6C:15:46:84:DB:FC:11:1F
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fK36DqQ1HnYZ_51HbBVGhNv8ER8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.159.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         55:10:46:0f:b8:bd:d1:3a:ea:b3:dc:29:28:eb:0c:83:ee:3e:
         b6:49:30:7a:e0:52:29:95:8a:b1:0a:00:59:b4:a7:ca:d8:26:
         ac:bc:48:6c:dd:2a:48:44:fd:b2:aa:18:89:3b:8a:b9:23:57:
         69:0d:6e:b6:8c:68:81:38:f5:a1:73:25:58:22:bc:60:2f:b7:
         32:24:04:80:0b:0e:7e:61:cc:23:f3:fe:e5:41:98:ce:b2:33:
         4d:89:63:13:c7:a9:e1:b6:04:73:13:35:70:5a:b7:72:4e:91:
         64:37:d6:78:d9:3f:c0:f5:a0:73:bc:97:6e:4d:88:a7:10:7c:
         0c:ca:2a:39:bf:2a:65:4c:15:fd:83:13:f9:1c:fe:4b:17:e6:
         4e:93:86:d2:45:b7:b0:0e:b8:b0:5c:f7:6c:2a:96:d2:22:48:
         71:e6:4b:02:80:07:ff:68:b0:c0:df:c6:ab:5c:98:f2:34:2c:
         d0:bf:f1:54:67:d2:9b:ac:33:f7:6f:7c:e6:1d:17:9c:fe:d2:
         11:88:3c:d9:7f:b7:fb:5e:6d:a4:71:7d:9b:67:f5:d6:f0:52:
         77:24:4b:fc:6c:be:2f:bc:3b:15:2c:27:05:d2:ff:34:41:a2:
         b6:d2:c8:3a:59:db:22:33:ea:f1:74:d3:c2:56:3e:48:bf:17:
         70:72:d8:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----