Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/rHmSW33xkSKdBh3ehO28Zzj5Y8g.roa
File:                     rHmSW33xkSKdBh3ehO28Zzj5Y8g.roa (raw, json)
Hash identifier:          BUFowGNdfV4jJLwH6ZAe5Pz5KLe0+ginKn4QkhMstfg=
Subject key identifier:   AC:79:92:5B:7D:F1:91:22:9D:06:1D:DE:84:ED:BC:67:38:F9:63:C8
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0AC9
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/rHmSW33xkSKdBh3ehO28Zzj5Y8g.roa
Signing time:             Tue 29 Sep 2020 10:07:38 +0000
ROA not before:           Tue 29 Sep 2020 10:07:38 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        49.158.48.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2761 (0xac9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:07:38 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=AC79925B7DF191229D061DDE84EDBC6738F963C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:47:36:4f:f6:a2:c2:d8:8a:bf:c3:ff:ea:72:
                    83:1f:11:15:2b:d0:2a:7e:35:d5:59:0b:4e:0c:96:
                    ca:75:3f:bb:2e:e3:12:84:ce:f4:b1:c7:a9:87:f4:
                    54:03:b0:1f:2e:52:0e:fd:ef:bf:f2:df:18:b0:60:
                    b1:2e:ff:eb:0e:e8:f6:a9:e7:9e:2e:d1:c1:d9:5b:
                    72:23:4b:85:5f:c3:a9:67:f4:3d:ee:e1:79:5e:43:
                    c7:16:ad:3d:40:70:0d:65:59:c4:18:c7:9e:9d:89:
                    29:cf:95:86:a3:c2:ad:68:82:28:e0:f9:4d:b3:ca:
                    3e:a6:2b:c5:e0:65:c4:d3:e7:03:69:61:bc:7a:b1:
                    b1:bc:10:3b:e5:95:1f:7c:5e:5b:1e:eb:95:94:24:
                    ee:3b:cc:ac:25:de:f9:97:4e:68:94:43:e7:d5:97:
                    24:b3:0d:bb:de:b2:19:76:11:72:32:68:af:4d:54:
                    61:60:55:01:cb:bf:d4:68:8a:e5:21:fa:bb:3f:68:
                    d2:d8:6b:52:7a:4b:06:4e:00:75:16:89:ad:62:1c:
                    eb:35:06:06:5d:20:a2:a2:1c:6f:b6:68:d0:4d:23:
                    5b:22:9c:cd:0d:88:c2:05:bc:c3:c8:93:7e:4d:3d:
                    bd:c8:4e:72:20:5f:c5:8e:e8:d0:4e:3e:c2:85:79:
                    6d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:79:92:5B:7D:F1:91:22:9D:06:1D:DE:84:ED:BC:67:38:F9:63:C8
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/rHmSW33xkSKdBh3ehO28Zzj5Y8g.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         25:5e:4e:b0:59:9e:ea:4a:4b:43:7e:16:ba:e7:fc:0c:5b:e5:
         de:12:76:1e:00:ce:f5:33:91:e3:ac:7c:61:e4:c9:96:ff:a1:
         a7:26:a1:49:b7:96:74:78:ff:e0:0c:86:7c:b7:bf:be:46:3f:
         3a:23:91:d8:ae:59:63:8a:c6:22:53:35:9e:7c:c5:de:0f:72:
         25:88:03:ad:2b:56:30:00:a3:85:ca:05:d6:3f:3a:1d:e2:ef:
         15:97:b5:53:b9:d8:2a:88:d6:59:c7:f3:fa:25:42:22:97:23:
         35:c9:20:94:62:ff:d2:9c:51:d6:45:0c:8b:b7:76:a6:c6:73:
         47:98:11:1d:fe:30:be:42:95:f2:b1:83:0b:5c:b5:a5:83:5b:
         59:7b:b4:90:95:2b:33:c0:5e:7e:94:9a:25:98:48:e1:9c:ad:
         6b:dc:94:3e:c1:f3:f9:68:84:94:82:98:53:4d:3e:84:34:51:
         ff:9d:83:b8:a5:60:f6:1a:d0:6a:74:09:63:a8:0f:92:d3:7c:
         4f:b6:00:7c:94:ad:1b:c8:cf:83:54:b0:2d:4c:ee:79:77:68:
         95:93:81:d2:37:ef:15:6e:92:61:fa:df:f9:fd:46:fd:eb:63:
         18:d1:40:6c:bf:1b:26:9b:1f:e3:d3:d3:b2:9b:77:4f:3b:8c:
         e9:ea:d5:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----