Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/vnhLz5dk2JY0NmeYgp1hYecir5M.roa
File:                     vnhLz5dk2JY0NmeYgp1hYecir5M.roa (raw, json)
Hash identifier:          a7JKh831YBiHC4U8dY3rbmG7H/XH6u/aoAEAJ6UQUSM=
Subject key identifier:   BE:78:4B:CF:97:64:D8:96:34:36:67:98:82:9D:61:61:E7:22:AF:93
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0B63
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/vnhLz5dk2JY0NmeYgp1hYecir5M.roa
Signing time:             Tue 29 Sep 2020 10:08:21 +0000
ROA not before:           Tue 29 Sep 2020 10:08:21 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24163
IP address blocks:        49.158.184.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2915 (0xb63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:08:21 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=BE784BCF9764D89634366798829D6161E722AF93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b3:b5:3b:69:3f:85:14:47:3a:01:bf:ad:de:
                    86:93:40:03:69:a6:88:ba:0f:41:88:cc:e9:a2:e8:
                    73:00:58:9f:fe:e0:63:27:fa:9f:fa:c7:43:30:40:
                    9c:22:9a:c2:c6:8b:1f:ea:0c:0d:c2:4e:b5:c3:02:
                    f5:f1:c4:98:1b:d8:16:23:87:74:8e:36:87:78:47:
                    c9:ef:e5:ee:14:e9:61:5d:22:ea:06:66:1c:e4:63:
                    e9:12:8c:9f:95:33:dc:b2:ba:aa:13:51:54:94:64:
                    da:0d:20:c9:f4:3d:64:74:ac:98:95:fb:b4:f9:bd:
                    6c:21:6b:8d:20:9c:fd:f0:c6:98:04:a2:65:10:12:
                    cb:7c:c4:08:76:eb:e6:6c:e7:9e:9b:65:85:e4:78:
                    5c:21:c6:cf:bd:12:97:89:0c:56:11:72:c5:2c:fc:
                    17:b5:d0:61:63:70:61:4d:75:ba:63:30:d2:4a:f9:
                    4b:7e:fb:c7:03:13:97:82:2a:ef:4e:23:76:cf:ed:
                    dc:13:32:d5:06:b0:8d:58:4a:e4:9c:c8:87:d6:06:
                    40:92:c3:03:1c:9b:bb:f2:8d:c6:ad:35:22:4f:b1:
                    50:2f:80:35:a1:4e:8b:d3:a3:b0:7c:ad:74:85:0c:
                    39:89:d9:81:88:06:41:2f:5e:df:d4:fa:4e:8c:c7:
                    53:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:78:4B:CF:97:64:D8:96:34:36:67:98:82:9D:61:61:E7:22:AF:93
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/vnhLz5dk2JY0NmeYgp1hYecir5M.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         45:36:7a:0a:9a:45:21:01:86:af:3c:12:13:23:82:63:2f:09:
         62:fa:86:04:79:6e:0e:42:14:8a:0a:0c:1a:f1:73:70:ca:1d:
         d1:cb:3e:e7:f7:f2:ff:e3:47:83:cc:18:6f:e4:43:96:37:df:
         9a:06:0d:d8:72:16:43:da:b9:f9:81:ec:79:ad:31:39:84:0e:
         4e:35:9c:f2:18:66:4e:a1:47:af:2d:2e:66:bc:8d:8a:5e:93:
         33:60:e5:f3:55:c6:2f:78:ea:d0:0a:20:a0:25:fb:99:8a:d2:
         d7:eb:f1:da:13:18:81:a7:40:cf:93:ab:6c:55:46:ca:e3:54:
         72:9b:1a:8a:19:1d:b4:3e:e0:06:81:0b:61:aa:03:2e:5a:80:
         75:99:79:6a:27:5b:7a:43:68:ad:a6:a3:63:48:4b:82:81:24:
         a3:5a:c4:42:18:7c:8f:12:ef:73:5e:58:de:2e:d2:7f:06:95:
         ee:b2:13:eb:58:56:03:04:68:16:d6:56:fc:97:a6:60:e5:f7:
         86:b7:f7:bf:61:60:9d:a3:87:34:85:60:07:15:80:b1:46:ec:
         c1:a0:ec:4c:b0:0b:3d:5e:e5:e6:fd:f8:58:25:ad:a2:8d:1d:
         05:ad:1e:ab:29:3a:a2:0b:2f:50:fe:a0:50:9b:c1:fb:33:b1:
         34:42:08:3c
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICC2MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMDA5Mjkx
MDA4MjFaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEJFNzg0QkNGOTc2NEQ4
OTYzNDM2Njc5ODgyOUQ2MTYxRTcyMkFGOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDbs7U7aT+FFEc6Ab+t3oaTQANppoi6D0GIzOmi6HMAWJ/+4GMn
+p/6x0MwQJwimsLGix/qDA3CTrXDAvXxxJgb2BYjh3SONod4R8nv5e4U6WFdIuoG
ZhzkY+kSjJ+VM9yyuqoTUVSUZNoNIMn0PWR0rJiV+7T5vWwha40gnP3wxpgEomUQ
Est8xAh26+Zs556bZYXkeFwhxs+9EpeJDFYRcsUs/Be10GFjcGFNdbpjMNJK+Ut+
+8cDE5eCKu9OI3bP7dwTMtUGsI1YSuScyIfWBkCSwwMcm7vyjcatNSJPsVAvgDWh
TovTo7B8rXSFDDmJ2YGIBkEvXt/U+k6Mx1NPAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUvnhLz5dk2JY0NmeYgp1hYecir5MwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3ZuaEx6NWRrMkpZME5tZVln
cDFoWWVjaXI1TS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx
nrgwDQYJKoZIhvcNAQELBQADggEBAEU2egqaRSEBhq88EhMjgmMvCWL6hgR5bg5C
FIoKDBrxc3DKHdHLPuf38v/jR4PMGG/kQ5Y335oGDdhyFkPaufmB7HmtMTmEDk41
nPIYZk6hR68tLma8jYpekzNg5fNVxi946tAKIKAl+5mK0tfr8doTGIGnQM+Tq2xV
RsrjVHKbGooZHbQ+4AaBC2GqAy5agHWZeWonW3pDaK2mo2NIS4KBJKNaxEIYfI8S
73NeWN4u0n8Gle6yE+tYVgMEaBbWVvyXpmDl94a3979hYJ2jhzSFYAcVgLFG7MGg
7EywCz1e5eb9+FglraKNHQWtHqspOqILL1D+oFCbwfszsTRCCDw=
-----END CERTIFICATE-----