Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/pD3jU8ukmTTsXsX4jgeTQQflZj8.roa
File:                     pD3jU8ukmTTsXsX4jgeTQQflZj8.roa (raw, json)
Hash identifier:          6awMIJfS6OtyOp0CzE+MPtiltaF2Urj8x8ZBagpehvI=
Subject key identifier:   A4:3D:E3:53:CB:A4:99:34:EC:5E:C5:F8:8E:07:93:41:07:E5:66:3F
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       12AB
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/pD3jU8ukmTTsXsX4jgeTQQflZj8.roa
Signing time:             Wed 29 Sep 2021 02:54:50 +0000
ROA not before:           Wed 29 Sep 2021 02:54:50 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24164
IP address blocks:        49.158.248.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4779 (0x12ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:54:50 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=A43DE353CBA49934EC5EC5F88E07934107E5663F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:25:2e:cf:e5:1a:e0:15:40:e2:a1:21:67:a5:
                    ae:40:9a:61:2f:b4:e9:f0:49:22:a2:91:32:1c:de:
                    87:3b:e7:ea:67:9b:4d:d1:ce:ea:0f:e6:32:3d:33:
                    30:0e:0b:b1:14:de:27:1e:0e:ce:f3:dd:57:4a:57:
                    f0:b4:2e:c7:65:a3:98:0e:69:8b:7f:81:fe:f3:12:
                    f9:d8:bc:d3:7f:b3:b6:21:8f:f8:5c:d7:5a:c6:d2:
                    58:79:71:fb:48:88:b0:00:9c:8c:73:55:24:cb:6d:
                    72:d3:ed:82:ba:fd:08:d9:63:87:c1:d2:f7:6e:ae:
                    b1:e8:bb:e2:67:82:4c:d7:ab:2f:10:27:89:7c:82:
                    45:5c:87:d1:ca:81:e3:a4:f0:b0:ff:2e:44:99:05:
                    85:ef:ca:0c:c0:ad:b2:92:20:f2:8c:55:5c:c2:78:
                    eb:af:fb:ae:d8:9b:94:84:a3:58:f5:16:a5:7d:ae:
                    2f:72:08:48:17:d7:f0:f8:3b:24:4b:32:61:32:91:
                    15:67:5b:69:a5:28:92:8a:62:cb:2d:d2:b2:0c:b3:
                    7f:ef:78:79:3a:29:b3:c2:5a:7b:60:1b:ec:34:cd:
                    44:47:92:07:65:1d:2a:3a:b6:87:c4:8e:d7:e8:b0:
                    1f:02:ac:08:50:00:c7:25:f8:05:ff:a6:70:d0:37:
                    0d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:3D:E3:53:CB:A4:99:34:EC:5E:C5:F8:8E:07:93:41:07:E5:66:3F
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/pD3jU8ukmTTsXsX4jgeTQQflZj8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         87:d3:cf:0c:1e:70:1d:7f:7b:24:bb:ca:c2:03:f7:09:dc:16:
         03:e7:c7:bc:3d:44:e6:6d:57:58:95:92:6a:e1:dc:45:d7:87:
         d6:6b:b0:59:fa:a7:d3:c2:b5:43:ae:a4:10:97:de:bc:87:e2:
         c0:b0:3e:aa:ae:a7:f3:9e:b2:d7:fb:13:2a:3e:97:d3:6f:29:
         54:14:ad:ca:ca:77:34:05:90:b0:51:e7:00:4f:51:86:61:cc:
         7a:16:bf:bb:81:f0:2b:0c:e3:78:df:85:4b:57:0a:7c:07:16:
         d4:3c:f2:e0:a2:5b:36:d6:b1:2a:03:8a:d5:00:3f:be:50:57:
         36:f6:7c:2a:eb:aa:d1:dd:16:af:78:61:c1:2a:6a:cd:18:09:
         4f:d8:f4:33:b6:53:d7:f8:0f:bd:98:bf:db:c9:4b:19:71:45:
         19:68:e0:a6:ee:50:60:dd:2d:67:5f:0e:36:a6:a7:6c:7f:6a:
         38:97:a3:ec:0d:79:2a:a9:d3:fc:8a:e9:5d:2e:f9:27:ab:5d:
         18:ae:bb:01:fe:f4:f6:e4:08:0f:b2:4a:33:13:60:8d:a1:06:
         f0:6d:57:07:6f:b1:ec:8f:08:37:f4:df:2f:a6:d1:90:c9:c8:
         a6:82:2e:44:77:07:e9:bd:d5:b5:16:42:ed:a3:b2:09:6f:22:
         23:74:01:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----