Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ukqPI_h7nRgg8h_a8vtmExaRf1k.roa
File:                     ukqPI_h7nRgg8h_a8vtmExaRf1k.roa (raw, json)
Hash identifier:          weQeK5kod+Sk1/96MQ4ZgaSxRDnf6t/7aQwAPMZWNs8=
Subject key identifier:   BA:4A:8F:23:F8:7B:9D:18:20:F2:1F:DA:F2:FB:66:13:16:91:7F:59
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       128A
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ukqPI_h7nRgg8h_a8vtmExaRf1k.roa
Signing time:             Wed 29 Sep 2021 02:54:42 +0000
ROA not before:           Wed 29 Sep 2021 02:54:42 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24164
IP address blocks:        49.158.112.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4746 (0x128a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:54:42 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=BA4A8F23F87B9D1820F21FDAF2FB661316917F59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ab:92:b5:c5:2f:0d:2b:7e:94:13:1d:39:7b:
                    b4:b2:d7:c5:b1:af:62:8c:17:1b:94:da:d4:e8:8a:
                    20:39:0c:73:23:7d:de:0e:a8:d9:d9:b7:00:fc:6c:
                    6a:41:cf:2f:12:93:71:97:76:b7:62:a2:30:81:91:
                    bd:6d:42:49:9e:e0:d2:1c:05:2e:a0:9c:e0:4c:b2:
                    11:9a:83:e8:c8:c6:38:2e:92:d8:c3:0f:a6:1e:94:
                    bc:c8:1c:e4:b4:a0:c3:db:db:4f:4e:5f:dc:e2:9c:
                    67:5a:7e:c6:ca:04:64:a6:a3:dc:9e:b2:3d:10:08:
                    69:2d:ea:84:2b:91:4b:51:3e:c5:af:96:44:c0:f1:
                    5f:79:0d:89:c4:c6:c7:f0:68:70:93:8f:12:2b:17:
                    f8:14:43:ea:44:95:b7:e1:7f:6f:4a:30:26:a0:af:
                    78:9b:6e:6b:1c:b7:f1:54:4e:a1:be:e1:d8:b5:7b:
                    e2:6b:6c:25:02:eb:1d:51:23:72:6c:25:25:60:e5:
                    4b:32:c7:06:1e:c9:68:20:d8:34:70:8d:ac:10:06:
                    3d:ba:fd:03:17:42:c0:b6:25:02:bd:f9:10:63:a5:
                    ae:ca:6a:b5:96:0e:77:76:5c:9c:c8:27:24:8d:20:
                    06:06:2b:f0:2a:6c:cf:32:5e:07:7c:7b:63:30:b0:
                    c7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:4A:8F:23:F8:7B:9D:18:20:F2:1F:DA:F2:FB:66:13:16:91:7F:59
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ukqPI_h7nRgg8h_a8vtmExaRf1k.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         10:f9:e2:ba:45:09:67:c3:ca:96:65:ae:cc:0e:2a:f1:2b:25:
         dc:0a:36:ed:a5:d5:aa:ec:cc:1d:dc:e4:32:57:d0:25:1e:2e:
         78:08:67:63:4f:c0:50:db:fa:5b:2b:ab:a5:37:37:55:b0:68:
         31:7d:02:45:47:08:44:3e:55:8c:76:4a:14:a3:c6:2e:a0:c0:
         2a:1b:a3:2b:5a:5b:36:14:e7:1d:60:c9:75:2c:e4:7a:52:98:
         e6:db:5d:ea:ff:c3:b3:7c:9d:3f:10:46:34:f6:4c:a7:9a:f6:
         5a:28:94:45:37:61:84:33:87:74:f2:5b:a9:d1:a4:f5:dd:a2:
         b0:d4:bc:c7:a1:87:34:57:a3:b0:2b:19:bb:6c:4f:5e:ce:f1:
         1f:6c:49:c0:be:2c:a1:a7:a0:a7:18:ad:8d:61:85:9d:3b:07:
         a4:a2:08:d2:1d:ac:6d:f1:e2:f6:1c:fd:69:82:fd:6b:e7:a1:
         c8:49:f3:88:a3:ec:80:36:45:27:13:d6:ac:88:00:29:6b:a9:
         7e:f2:02:25:fb:cf:b7:a9:7d:af:d5:b3:24:d3:26:f4:f7:71:
         60:70:99:75:63:0a:82:fa:d5:ec:49:b3:11:60:0f:7c:be:ff:
         3d:d5:f8:29:b0:74:19:63:8c:be:05:27:e3:58:f7:4b:a4:98:
         e9:fa:f4:ac
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICEoowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTA5Mjkw
MjU0NDJaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEJBNEE4RjIzRjg3QjlE
MTgyMEYyMUZEQUYyRkI2NjEzMTY5MTdGNTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCxq5K1xS8NK36UEx05e7Sy18Wxr2KMFxuU2tToiiA5DHMjfd4O
qNnZtwD8bGpBzy8Sk3GXdrdiojCBkb1tQkme4NIcBS6gnOBMshGag+jIxjguktjD
D6YelLzIHOS0oMPb209OX9zinGdafsbKBGSmo9yesj0QCGkt6oQrkUtRPsWvlkTA
8V95DYnExsfwaHCTjxIrF/gUQ+pElbfhf29KMCagr3ibbmsct/FUTqG+4di1e+Jr
bCUC6x1RI3JsJSVg5UsyxwYeyWgg2DRwjawQBj26/QMXQsC2JQK9+RBjpa7KarWW
Dnd2XJzIJySNIAYGK/AqbM8yXgd8e2MwsMcjAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUukqPI/h7nRgg8h/a8vtmExaRf1kwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3VrcVBJX2g3blJnZzhoX2E4
dnRtRXhhUmYxay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx
nnAwDQYJKoZIhvcNAQELBQADggEBABD54rpFCWfDypZlrswOKvErJdwKNu2l1ars
zB3c5DJX0CUeLngIZ2NPwFDb+lsrq6U3N1WwaDF9AkVHCEQ+VYx2ShSjxi6gwCob
oytaWzYU5x1gyXUs5HpSmObbXer/w7N8nT8QRjT2TKea9loolEU3YYQzh3TyW6nR
pPXdorDUvMehhzRXo7ArGbtsT17O8R9sScC+LKGnoKcYrY1hhZ07B6SiCNIdrG3x
4vYc/WmC/WvnochJ84ij7IA2RScT1qyIAClrqX7yAiX7z7epfa/VsyTTJvT3cWBw
mXVjCoL61exJsxFgD3y+/z3V+CmwdBljjL4FJ+NY90ukmOn69Kw=
-----END CERTIFICATE-----