Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-cxvP_cNeUyf8InQzHJRI85eqMI.roa
File:                     -cxvP_cNeUyf8InQzHJRI85eqMI.roa (raw, json)
Hash identifier:          EqN5GfRRwifLvZ7X5nosZFAdEmxoWIE8OG4ttQvHRM4=
Subject key identifier:   F9:CC:6F:3F:F7:0D:79:4C:9F:F0:89:D0:CC:72:51:23:CE:5E:A8:C2
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1419
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-cxvP_cNeUyf8InQzHJRI85eqMI.roa
Signing time:             Fri 29 Apr 2022 10:27:02 +0000
ROA not before:           Fri 29 Apr 2022 10:27:02 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24164
IP address blocks:        49.159.32.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5145 (0x1419)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Apr 29 10:27:02 2022 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=F9CC6F3FF70D794C9FF089D0CC725123CE5EA8C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b3:fb:3e:40:92:5f:a6:62:86:b7:32:52:68:
                    22:b1:da:73:21:c3:3a:19:55:4b:84:f7:67:ad:0b:
                    ea:4d:71:a9:a4:4b:74:83:da:68:0f:5a:55:bb:e1:
                    7b:f5:7c:b8:ae:15:07:c0:3e:d7:08:4d:3b:2f:86:
                    79:8c:5c:30:28:ec:09:ea:8f:56:00:86:04:a3:05:
                    fd:1f:2f:30:fe:01:74:ec:24:57:f1:77:17:2d:b9:
                    01:93:76:1a:17:85:f8:37:9f:f3:c7:74:85:ac:8a:
                    74:59:6d:48:13:8f:4e:cc:18:b9:68:44:5e:66:09:
                    34:c5:40:b8:e4:30:97:01:87:13:17:01:f9:e7:12:
                    2c:cf:44:39:bc:a5:43:3a:e3:bd:2d:1b:9e:82:2c:
                    f4:01:a8:ab:e5:58:f0:4e:d5:ac:fa:6e:b8:cc:03:
                    56:98:c8:09:a5:38:66:c4:1b:5c:5f:2c:db:d4:6d:
                    98:80:87:ab:85:ae:4c:e9:d9:af:f3:92:16:fe:6c:
                    ab:31:c1:c7:9b:bc:b4:cc:72:ed:4a:f8:dc:18:9d:
                    37:38:46:83:29:8b:bc:06:54:9a:19:54:96:f4:60:
                    1c:eb:b3:41:9f:fa:bc:91:66:73:fb:36:dc:45:86:
                    f3:48:bd:3f:b4:fe:f6:1b:e4:d7:32:94:92:6c:31:
                    9f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:CC:6F:3F:F7:0D:79:4C:9F:F0:89:D0:CC:72:51:23:CE:5E:A8:C2
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-cxvP_cNeUyf8InQzHJRI85eqMI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.159.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4c:1c:13:3d:17:fa:22:3a:b4:9c:26:01:cc:d3:90:2b:65:85:
         bf:d2:62:9d:56:81:34:20:6a:61:fd:62:a3:0e:92:ae:c8:29:
         fe:bf:14:46:9f:c7:e2:93:03:9c:7e:a2:cb:53:8d:f2:28:59:
         58:e5:fa:36:52:7c:c2:43:1b:30:d6:a5:25:2e:79:8a:e0:d6:
         6d:3a:cb:52:6b:a8:78:14:79:b6:4a:b8:66:44:8c:71:a0:5e:
         92:e8:69:fa:ca:23:67:22:74:5b:5a:62:64:31:d4:bb:ca:5e:
         98:e3:ad:a2:cb:fe:73:25:ae:ba:a2:6f:b7:66:80:d0:0f:b2:
         f2:95:58:69:d1:94:a2:78:53:65:66:c4:bc:72:53:4e:5a:97:
         22:0d:cd:57:b5:16:6c:40:d6:3a:6d:b2:20:b7:ef:65:27:3e:
         23:3b:95:3e:eb:46:ef:97:3d:e3:f0:b5:52:dd:da:af:f7:df:
         8e:c8:24:98:63:8f:69:5a:8c:10:a4:b5:bc:3f:95:92:6c:6f:
         a0:80:4f:ce:99:56:04:1f:f2:61:48:51:45:08:17:1f:31:42:
         c6:36:52:c1:d2:e7:86:94:7d:cf:42:fe:0e:01:3b:32:da:14:
         10:fe:c3:f9:8a:d2:e9:03:1a:22:b2:1d:85:ad:bf:03:3b:9a:
         0f:c2:2d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----