Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/sw_7dKBRkfpsUa3l-oBS4pQdVxA.roa
File:                     sw_7dKBRkfpsUa3l-oBS4pQdVxA.roa (raw, json)
Hash identifier:          xrE22CHQj1bvrjvIsJLXTAXsgRrpCFwSTQaWWMbW5KM=
Subject key identifier:   B3:0F:FB:74:A0:51:91:FA:6C:51:AD:E5:FA:80:52:E2:94:1D:57:10
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0AE6
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/sw_7dKBRkfpsUa3l-oBS4pQdVxA.roa
Signing time:             Tue 29 Sep 2020 10:07:45 +0000
ROA not before:           Tue 29 Sep 2020 10:07:45 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24165
IP address blocks:        49.159.232.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2790 (0xae6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:07:45 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=B30FFB74A05191FA6C51ADE5FA8052E2941D5710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9a:58:b2:13:33:43:46:6b:e4:d6:d3:f0:75:
                    82:bb:09:aa:fd:6f:cd:2c:93:17:0a:98:1b:d1:55:
                    f7:b4:9f:34:a4:a0:18:1b:2a:62:89:bf:f2:16:0e:
                    ab:d6:cd:b7:db:64:5b:46:3a:9e:6f:e1:52:37:be:
                    1e:3f:0f:c3:99:b1:a4:6c:65:28:4a:68:e8:12:d6:
                    19:51:92:82:13:65:93:61:7d:d5:1d:35:44:ca:d2:
                    4b:e1:b8:e1:ce:59:33:05:e8:85:45:2e:dd:36:25:
                    70:04:95:a1:0b:3c:f6:2e:fa:3b:fa:1e:38:13:a2:
                    5b:7d:fb:1e:b2:1c:84:ef:d1:18:ea:6a:0b:d9:d9:
                    79:e5:86:2a:85:60:3d:9f:a9:e4:29:27:5d:46:e5:
                    be:8a:33:92:6d:4f:35:50:10:27:ec:a3:fa:18:61:
                    d0:33:67:22:07:e0:c1:bf:9c:42:d3:8d:e1:e1:12:
                    98:d4:0e:a0:38:c6:5e:c4:32:ae:e9:6a:cf:f1:f8:
                    d4:2d:3d:d9:b4:4b:ec:e5:e1:d9:e6:ca:3e:fc:d3:
                    8e:28:b3:21:14:c6:f6:e1:25:ae:19:16:42:30:ab:
                    2c:1b:a5:4d:2d:80:af:70:69:79:0a:74:9c:fc:bb:
                    e8:87:c4:0b:99:c6:b3:13:c2:e1:b6:a4:44:ae:86:
                    da:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:0F:FB:74:A0:51:91:FA:6C:51:AD:E5:FA:80:52:E2:94:1D:57:10
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/sw_7dKBRkfpsUa3l-oBS4pQdVxA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.159.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         13:aa:4f:bf:de:f7:35:1e:0e:aa:19:6b:3f:2a:3e:82:f6:66:
         52:37:f0:1b:91:22:37:db:6a:96:6b:db:eb:d7:a0:84:55:31:
         62:73:6a:4d:89:51:b7:f3:b4:11:1b:5c:df:41:54:f0:13:c7:
         e5:2a:a1:c2:f4:87:26:c2:d5:8d:fa:2a:3f:ec:cd:1b:7b:d1:
         d4:7e:d6:97:c3:8d:a0:52:84:70:3c:fc:d3:51:1b:b8:16:a3:
         9e:08:d0:25:45:94:0d:c1:d6:a2:be:d8:f7:71:dd:99:8b:f2:
         5d:36:03:77:7c:9d:29:99:8e:09:14:fd:d8:63:89:fc:3d:1d:
         62:97:38:43:33:c4:5b:4a:14:a7:6e:a0:26:fb:1b:a0:79:8a:
         a1:4c:2a:6a:89:a1:50:d6:86:25:da:50:06:a7:9f:47:ee:80:
         9c:ed:e6:6c:ae:69:13:41:e6:01:c2:b2:5e:bb:35:32:62:13:
         45:0e:32:67:8e:7a:9a:6f:9e:9d:f1:13:7b:64:18:9f:ad:47:
         79:44:dc:c1:42:81:b8:5f:b2:03:f5:3d:5e:65:1a:9f:e6:ab:
         63:32:56:ea:f1:a2:8e:6a:42:d3:5e:b8:8f:20:c8:ba:f2:a0:
         c8:b8:fe:d3:bd:2e:e5:a6:61:57:5a:22:b5:12:ba:c0:5d:23:
         8c:48:39:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----