Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/oOvYaRVRe1vJ4DWqx01peDSfXxg.roa
File:                     oOvYaRVRe1vJ4DWqx01peDSfXxg.roa (raw, json)
Hash identifier:          3ylqx8Nj9+MNKy3YBUZRZcK4/lne8sB32v8EwMliim0=
Subject key identifier:   A0:EB:D8:69:15:51:7B:5B:C9:E0:35:AA:C7:4D:69:78:34:9F:5F:18
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       10C3
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/oOvYaRVRe1vJ4DWqx01peDSfXxg.roa
Signing time:             Sun 07 Feb 2021 12:48:43 +0000
ROA not before:           Sun 07 Feb 2021 12:48:43 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        49.159.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4291 (0x10c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb  7 12:48:43 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=A0EBD86915517B5BC9E035AAC74D6978349F5F18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:94:da:8d:8c:71:04:87:4a:b3:50:04:4b:0c:
                    c7:9d:d8:f1:b6:05:24:2c:2b:c3:17:89:2c:16:48:
                    09:22:c8:81:5c:12:4d:ad:2f:07:78:4b:c7:18:92:
                    84:2d:e6:87:b5:06:6a:f5:73:97:0f:76:77:ec:42:
                    e4:de:db:be:7d:48:2e:85:e5:44:a0:27:16:fe:90:
                    0f:bd:81:bc:a3:78:85:1b:2f:69:b0:fd:c0:20:f7:
                    31:8b:9c:23:f8:74:29:a1:e2:dd:15:63:6c:09:56:
                    d1:9e:5e:ba:8a:b1:74:0d:db:bd:b5:91:08:d6:08:
                    f6:a7:12:23:37:97:15:84:a4:41:de:db:e2:96:44:
                    a6:c8:08:5c:0d:1f:f0:f1:01:8d:4d:82:2d:b4:3a:
                    e0:bb:ac:67:c3:cc:a6:b7:9a:79:57:24:80:b6:cf:
                    34:9c:f1:39:a0:c2:26:b8:0e:b5:0d:fa:1e:b4:e0:
                    76:48:4b:25:08:f5:ae:58:44:e6:98:e9:05:b2:69:
                    fa:3b:ae:26:4e:cb:d0:44:e1:07:15:24:b6:84:28:
                    f7:4b:15:91:00:b5:94:8c:f2:d9:2a:60:8d:04:99:
                    de:ad:70:40:c0:e4:03:3f:ab:30:d3:65:74:da:7c:
                    d1:ac:8b:5b:53:00:42:c5:ba:76:44:e9:da:29:0e:
                    c9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:EB:D8:69:15:51:7B:5B:C9:E0:35:AA:C7:4D:69:78:34:9F:5F:18
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/oOvYaRVRe1vJ4DWqx01peDSfXxg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.159.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         80:9b:c8:fc:5a:5c:8d:f0:3c:e7:8a:1b:05:29:13:26:3c:08:
         a9:f6:97:9a:96:a3:b1:b7:c9:c8:65:cd:7d:f6:a8:2c:93:0e:
         11:6f:01:64:31:1a:57:a0:5a:2e:9c:f0:5e:d2:af:f6:4b:35:
         8b:db:66:ef:2c:99:3d:e8:f4:e8:c9:26:99:04:19:68:14:aa:
         f4:e0:16:4d:eb:7c:83:ee:67:de:26:d0:44:61:76:2c:d2:b8:
         7a:8c:92:2b:bc:e8:85:ea:a3:38:ad:fc:eb:27:4e:14:d9:6f:
         24:20:df:2b:c6:4f:5d:cf:b6:92:0c:09:6b:59:4f:ce:ba:d9:
         51:a6:a3:8f:f5:fd:c7:f7:78:ba:5f:85:b6:5e:b3:cf:21:c0:
         45:2c:93:df:af:86:86:52:d9:b8:26:60:c3:fa:3d:34:bc:ed:
         e0:14:47:8f:20:4b:a9:5d:84:cd:88:05:40:27:c0:a8:99:29:
         ea:48:bf:33:ee:b3:6e:f9:0c:91:8b:29:93:b7:99:0c:5c:35:
         bb:b8:99:a4:a0:d9:56:a8:e6:af:a8:a4:63:83:c6:8a:23:b1:
         5d:fd:27:fa:f0:50:a9:ec:bc:84:6a:c7:20:5c:49:c2:ad:58:
         89:1d:6b:4d:d7:bc:2a:34:06:c6:6d:1d:1d:80:28:ac:ca:7f:
         d4:47:d7:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----