Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/khae_eHonhNrFzCqeyo5icMIsyQ.roa
File:                     khae_eHonhNrFzCqeyo5icMIsyQ.roa (raw, json)
Hash identifier:          JxfRKk7su3r+7NfLU+wl6jXOYtMxCx6cyH9Cjedny/c=
Subject key identifier:   92:16:9E:FD:E1:E8:9E:13:6B:17:30:AA:7B:2A:39:89:C3:08:B3:24
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0FC1
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/khae_eHonhNrFzCqeyo5icMIsyQ.roa
Signing time:             Sun 07 Feb 2021 12:35:54 +0000
ROA not before:           Sun 07 Feb 2021 12:35:54 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24163
IP address blocks:        49.158.184.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4033 (0xfc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb  7 12:35:54 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=92169EFDE1E89E136B1730AA7B2A3989C308B324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:15:1e:5f:1e:79:da:29:75:f3:ab:82:ec:72:
                    24:81:0a:60:08:5e:c1:2d:c4:f8:24:8f:c9:96:5b:
                    5a:e3:92:5c:ae:34:67:87:62:96:31:34:b8:e8:20:
                    5b:6f:ce:5c:10:5b:8e:3e:68:53:34:02:96:45:54:
                    c3:55:4b:27:b8:ab:b0:b0:9f:fd:30:75:d6:af:cb:
                    79:dc:b3:0c:80:16:52:51:1e:d0:31:67:a7:39:e9:
                    a5:5e:c3:4f:50:1c:3b:3a:87:09:83:4b:02:64:ab:
                    38:fa:06:6e:66:16:cc:1a:e2:82:63:c1:fb:2e:0e:
                    e6:cf:cb:04:a7:c1:2a:1c:2a:d7:10:3f:98:2c:b2:
                    d2:ff:8e:73:8f:ef:11:1c:11:4c:f4:0a:f9:ca:fb:
                    02:d6:a2:ab:51:ab:f7:c2:59:6a:7a:6f:4e:61:b0:
                    87:34:11:42:48:97:9e:ac:1f:e7:10:26:a6:6d:8b:
                    f5:d9:16:39:28:c2:0f:ef:4b:16:80:8f:60:5b:1d:
                    29:d5:7c:2e:e3:03:15:c5:c4:9b:29:d1:01:d0:89:
                    1d:b1:8a:57:73:71:1b:a6:08:b1:91:30:e6:62:17:
                    96:71:3b:f9:c1:c8:e4:12:f0:b1:a4:44:d1:68:1f:
                    49:ff:97:09:55:97:ef:3b:8b:80:20:f9:93:33:bf:
                    55:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:16:9E:FD:E1:E8:9E:13:6B:17:30:AA:7B:2A:39:89:C3:08:B3:24
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/khae_eHonhNrFzCqeyo5icMIsyQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         95:d8:2d:84:f7:d5:ba:b4:e1:f1:c0:35:47:13:43:c8:f8:bb:
         91:d2:05:2d:3b:8e:02:d1:64:ec:52:20:da:93:d5:a6:ed:e1:
         27:09:b6:5f:87:e3:aa:87:33:bc:74:5f:9c:e7:c3:cc:da:c5:
         29:6f:f6:04:17:9a:e0:b2:38:0b:3c:ff:cd:18:f5:0e:6d:1b:
         ce:5a:34:36:96:1c:c7:27:56:09:53:26:bf:59:5d:79:a3:19:
         16:3e:d7:61:d9:e3:60:fb:14:ff:be:b6:46:26:1e:e4:45:97:
         85:97:be:84:c0:b9:61:36:c8:c4:1e:7f:11:88:fe:57:5e:38:
         59:e4:55:bd:0c:a5:7b:fd:1c:ab:c0:ae:31:13:51:57:b1:4a:
         e7:78:b5:dd:b9:19:85:fb:6e:39:2f:8f:49:74:dc:f0:4a:06:
         f5:90:a3:f3:34:44:34:0a:db:f3:c2:77:37:f2:90:ff:dd:2d:
         7d:98:3e:10:65:32:09:89:e1:60:96:f2:85:a7:d9:9b:9e:06:
         34:42:0e:b4:62:13:82:9b:df:20:5c:c4:e9:b1:9b:42:d1:c5:
         1a:0b:9a:73:03:82:fa:43:0c:0c:54:31:e5:7b:a8:a3:44:8c:
         e4:ec:87:f0:dd:93:f3:6e:9b:1d:b8:42:58:78:36:31:6a:1a:
         e0:af:e2:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----