Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gTxianWJjj6RdSkEiuwBY5B35hM.roa
File:                     gTxianWJjj6RdSkEiuwBY5B35hM.roa (raw, json)
Hash identifier:          KzuUEX8YQSNlwKBe9uck4nO7CDK794k+SeJ9NREIVDc=
Subject key identifier:   81:3C:62:6A:75:89:8E:3E:91:75:29:04:8A:EC:01:63:90:77:E6:13
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1228
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gTxianWJjj6RdSkEiuwBY5B35hM.roa
Signing time:             Wed 29 Sep 2021 02:54:15 +0000
ROA not before:           Wed 29 Sep 2021 02:54:15 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24164
IP address blocks:        49.158.16.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4648 (0x1228)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:54:15 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=813C626A75898E3E917529048AEC01639077E613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a6:7c:ec:c8:3a:39:60:15:2d:3f:5c:6a:70:
                    93:9e:89:9b:17:92:3b:5e:3b:66:73:eb:b5:61:d6:
                    7c:04:0f:e4:87:2b:88:53:33:7a:74:8d:47:18:b8:
                    a5:46:d1:28:80:38:22:a5:5a:21:b0:d7:0e:0c:92:
                    d4:07:3a:45:70:7c:90:62:ca:de:68:e2:b1:1d:9a:
                    50:0d:aa:3c:53:0a:8e:dc:27:b7:11:b4:fa:02:bb:
                    6c:7e:0c:5e:33:ec:f4:38:da:93:11:d8:93:6f:74:
                    f5:32:e6:2a:07:24:89:34:f9:33:f6:6e:11:fb:0d:
                    a4:cf:93:ed:4e:47:3e:af:51:98:c0:f1:02:43:4a:
                    24:9a:8b:04:b5:33:5d:6e:65:88:44:66:ea:bf:2a:
                    d6:ba:44:02:3f:ef:9b:eb:09:e0:06:cc:87:90:00:
                    37:17:cd:be:4a:11:f0:e9:58:d2:b9:69:d9:88:fc:
                    4f:2e:5f:69:07:f4:b3:6f:cc:54:41:ef:20:e5:7e:
                    46:01:f7:30:44:53:9d:f2:71:7b:db:94:2d:22:36:
                    ca:b4:dc:13:5f:ef:c2:e1:b4:0f:dd:a3:c8:d9:62:
                    48:da:17:10:8b:1e:d9:9f:7c:b3:85:29:94:6b:4f:
                    c9:eb:8c:7a:95:c4:a4:df:d5:db:83:7b:76:47:a1:
                    9e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:3C:62:6A:75:89:8E:3E:91:75:29:04:8A:EC:01:63:90:77:E6:13
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gTxianWJjj6RdSkEiuwBY5B35hM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         42:47:77:d9:53:8b:ea:ef:0c:8c:9c:ef:55:25:5a:1a:a1:da:
         85:00:08:d0:cb:9c:8a:a5:e3:32:22:9d:66:5f:f7:fd:21:96:
         98:42:46:c9:a4:bf:20:08:03:fa:bc:46:a5:3e:b4:f0:8c:b5:
         7b:25:6c:06:94:c7:90:c8:c5:03:8d:82:4e:fd:ba:8e:9c:fe:
         59:be:86:f4:af:75:fd:30:ed:49:9b:5d:23:c8:84:f4:82:ff:
         0b:a2:77:60:c5:f3:27:15:b4:94:76:1d:5d:ff:76:13:8b:67:
         89:73:90:46:e7:27:00:12:39:16:a9:17:b7:98:1c:e9:14:4e:
         e3:e4:a1:ac:d7:69:57:3e:3c:bc:0b:3c:9e:1a:3e:e0:a6:3d:
         28:bb:4c:11:06:fe:ce:9a:8a:a0:18:71:11:0a:33:2b:d5:c7:
         25:ef:94:dd:8d:01:03:f3:a5:01:68:98:83:5f:ba:fe:c2:58:
         9e:2c:49:2a:05:02:b8:a9:50:b6:30:c7:d3:b2:4e:77:9a:f8:
         d3:f8:1f:d7:f6:c3:df:3b:1b:76:b6:53:63:62:6b:5e:a3:b1:
         b3:0f:d9:cd:ee:a9:8e:60:e6:54:77:5b:0c:6b:f2:dc:55:f8:
         1c:b7:ca:0c:6d:64:ba:ea:93:96:2e:38:5c:f3:ec:a4:d2:d0:
         30:cf:f9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----