Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/vGI9XWrkJinBCR2aEGro3o6ZSeQ.roa
File:                     vGI9XWrkJinBCR2aEGro3o6ZSeQ.roa (raw, json)
Hash identifier:          OikKgr0GSW6a+5MBrsw6o9hNz42vDs2EiWi/WjoXBBM=
Subject key identifier:   BC:62:3D:5D:6A:E4:26:29:C1:09:1D:9A:10:6A:E8:DE:8E:99:49:E4
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0ACB
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/vGI9XWrkJinBCR2aEGro3o6ZSeQ.roa
Signing time:             Tue 29 Sep 2020 10:07:38 +0000
ROA not before:           Tue 29 Sep 2020 10:07:38 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        49.158.60.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2763 (0xacb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:07:38 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=BC623D5D6AE42629C1091D9A106AE8DE8E9949E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:d9:d8:18:89:cb:91:c5:22:6c:5e:c1:62:0c:
                    d8:94:df:04:15:34:73:bd:cc:cb:55:e4:5d:fa:2c:
                    0d:ac:e2:37:88:06:79:0c:c2:c4:fa:4b:4a:6d:e7:
                    d3:01:8c:99:6a:31:ce:97:c7:43:20:7c:57:e9:7d:
                    52:44:da:c8:e1:15:ee:01:ba:cd:b0:1e:96:2b:db:
                    d2:16:c9:b3:13:cc:8a:c1:a4:bb:62:0a:8a:dc:d1:
                    74:5d:ec:49:29:16:80:db:90:c3:5c:45:55:bb:73:
                    05:80:84:dc:d7:9d:b5:90:9f:8c:64:e3:48:73:02:
                    f2:af:ef:65:3d:a7:fc:fb:97:a3:47:79:80:96:74:
                    07:8b:3f:07:57:8b:88:79:97:b5:3f:44:1c:3c:90:
                    bd:98:95:ff:f6:dc:e0:39:e3:31:9b:43:a9:0a:c2:
                    32:93:de:31:65:ee:7e:5e:d6:d2:24:87:0d:8c:1f:
                    99:d3:ac:d2:1e:17:23:78:db:ea:91:f7:e3:cb:e9:
                    49:de:8f:51:58:ca:69:64:a0:91:5c:a0:9a:ee:20:
                    b5:23:9d:6d:96:b4:ee:cf:e7:e9:bc:55:11:b5:71:
                    d3:6c:d8:37:8c:59:d4:36:42:17:64:2a:a8:ca:5a:
                    a0:56:e0:35:ea:29:9c:6c:04:14:1d:5c:80:12:c4:
                    8c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:62:3D:5D:6A:E4:26:29:C1:09:1D:9A:10:6A:E8:DE:8E:99:49:E4
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/vGI9XWrkJinBCR2aEGro3o6ZSeQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:6d:d4:03:fa:2f:f6:61:2f:bf:79:0e:4c:54:d0:e3:a0:fc:
         d8:0b:dc:32:c9:9b:71:ad:ad:52:f3:54:e5:9e:25:50:b6:14:
         d6:df:86:52:30:15:d8:bc:03:cc:e8:11:4e:ae:7a:58:81:f2:
         fc:6d:91:95:cf:55:2b:76:c0:35:8d:d4:1d:15:c3:3b:6d:bb:
         72:07:59:61:19:a3:35:e6:94:dc:5a:bb:7d:8a:4b:ae:96:ce:
         39:9f:05:9e:6b:e5:86:64:4b:38:cf:18:5a:5a:3a:eb:f7:a6:
         34:d8:46:6a:c8:e6:ac:3e:60:86:1e:5c:2b:68:4c:26:63:1c:
         fc:fc:d7:d4:9b:a4:91:4e:91:64:cc:2b:5d:d2:77:71:c3:be:
         c0:c7:8e:99:db:e5:c4:2b:86:0a:27:ef:53:b0:e0:d7:54:61:
         ae:88:f2:e4:25:b8:29:87:2d:e5:ab:24:ed:f6:67:b5:ff:ad:
         5e:a7:f8:28:78:66:dd:1f:48:57:10:d1:20:0a:c7:3d:3b:36:
         44:e5:d8:f1:2b:4b:a6:4b:6e:44:e1:7d:30:92:e8:b8:bf:e6:
         6f:38:45:d2:02:e3:17:73:42:aa:e9:37:9c:ea:82:74:46:45:
         c9:49:ec:69:cb:ab:34:36:b3:e2:9f:b4:55:fc:2c:b7:53:bd:
         17:12:be:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----