Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/wB3H-mXMxc1mr4thg166leRgSDU.roa
File:                     wB3H-mXMxc1mr4thg166leRgSDU.roa (raw, json)
Hash identifier:          Pt0uP21XT0P2vV3CP/5Hi5b/hzTijsCdmiQP04r+qxM=
Subject key identifier:   C0:1D:C7:FA:65:CC:C5:CD:66:AF:8B:61:83:5E:BA:95:E4:60:48:35
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0EF7
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/wB3H-mXMxc1mr4thg166leRgSDU.roa
Signing time:             Sun 07 Feb 2021 12:30:58 +0000
ROA not before:           Sun 07 Feb 2021 12:30:58 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        49.158.44.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3831 (0xef7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb  7 12:30:58 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=C01DC7FA65CCC5CD66AF8B61835EBA95E4604835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:68:39:11:ff:0d:40:a0:72:50:55:11:16:07:
                    31:69:6e:dc:3e:f7:05:56:86:d1:19:a9:35:c1:41:
                    b5:95:2c:c4:48:b0:11:31:2e:30:00:73:10:b4:c6:
                    2e:1f:95:42:0c:1a:83:0a:86:88:50:07:18:18:a7:
                    3e:63:ba:28:16:ca:89:5b:43:89:b3:74:d9:ac:15:
                    90:0a:7e:7e:cc:f8:17:2e:27:58:a7:96:d0:c3:84:
                    01:36:cf:54:37:74:5e:3d:15:81:5c:7e:45:5a:7d:
                    4e:1e:0f:87:d3:4a:39:87:0f:31:e7:c2:91:2f:09:
                    02:fd:aa:0c:a2:e4:60:d8:cd:92:d9:c2:13:00:4c:
                    bf:e7:9d:0c:18:6e:77:48:b1:0e:df:7e:6c:c5:94:
                    06:20:91:a4:86:ad:20:3f:dd:7b:13:db:38:d7:96:
                    91:89:92:54:f4:ee:a4:d7:04:97:d1:56:55:de:4c:
                    f0:a1:31:e8:d9:f0:2e:d8:57:9d:04:14:2a:63:4e:
                    7a:9c:ab:f5:23:c1:15:ae:a3:d8:cb:65:c2:4e:0c:
                    53:88:0b:b8:21:35:31:b1:32:f2:86:cb:bc:98:bf:
                    24:df:a3:fe:aa:e3:ff:31:20:04:2f:50:1f:57:32:
                    3c:3f:8d:d0:56:aa:da:59:fb:85:f8:01:d7:65:af:
                    3a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:1D:C7:FA:65:CC:C5:CD:66:AF:8B:61:83:5E:BA:95:E4:60:48:35
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/wB3H-mXMxc1mr4thg166leRgSDU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:67:d2:71:78:39:84:8f:73:c5:8b:0a:da:15:ab:8a:8a:e9:
         78:e7:4c:31:3b:85:be:0e:e3:ab:b7:91:3a:ea:93:4b:f6:86:
         b9:9a:71:31:e8:32:b3:af:86:3a:fc:8b:4c:5f:b1:76:f7:77:
         df:a7:11:6c:67:1c:a8:d2:fc:ca:2d:67:8c:ed:32:c9:9a:10:
         a1:04:b7:21:a4:71:dc:b3:23:b5:6b:dd:bc:c3:31:f7:f8:40:
         64:bd:ee:87:1a:9c:4d:e4:c9:94:1c:e2:93:30:18:cf:08:6f:
         34:3d:d9:f2:01:50:c5:de:24:c9:e8:80:fd:40:b4:29:98:77:
         b7:8e:88:f4:98:68:c2:02:74:80:5f:ce:61:06:8c:29:53:16:
         6a:96:02:5b:f2:11:f0:66:d1:37:2f:2d:75:9e:c2:79:24:28:
         dc:10:68:31:05:ac:0d:a3:de:cc:8a:fd:62:0e:e0:a2:ba:ae:
         8b:07:ea:31:53:7e:ae:79:ef:2d:8f:ed:1d:cf:19:a9:c3:06:
         5f:63:cf:38:36:af:93:ff:70:2b:09:e9:9c:e0:60:9d:5c:90:
         ba:0f:b3:0f:cf:b5:16:ae:2a:26:01:b8:c7:52:fe:f3:31:f4:
         da:23:dc:a2:85:e7:bd:ef:37:23:c0:48:a9:c8:67:b2:bf:20:
         10:ca:2a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----