Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/4zEsdMHQGmRgGFZMzg7jaH7cCP4.roa
File:                     4zEsdMHQGmRgGFZMzg7jaH7cCP4.roa (raw, json)
Hash identifier:          ulBmNzwAqNVKHVe4Pl+VkvF42P3HEc3HC0BCIo5t87w=
Subject key identifier:   E3:31:2C:74:C1:D0:1A:64:60:18:56:4C:CE:0E:E3:68:7E:DC:08:FE
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       190A
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/4zEsdMHQGmRgGFZMzg7jaH7cCP4.roa
Signing time:             Sat 22 Oct 2022 06:06:02 +0000
ROA not before:           Sat 22 Oct 2022 06:06:02 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24165
IP address blocks:        115.165.200.0/21 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6410 (0x190a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Oct 22 06:06:02 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=E3312C74C1D01A646018564CCE0EE3687EDC08FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:51:3e:45:fe:1e:ab:90:37:a5:33:94:b0:7f:
                    55:5b:a1:44:88:fc:ae:55:69:58:3a:09:86:89:b8:
                    36:d7:7d:c2:15:5d:6b:ef:c0:6b:09:9b:75:b9:a9:
                    cd:3a:6c:a5:f2:a3:06:8a:7c:71:b8:ae:3c:5d:26:
                    d9:a3:c2:0e:94:29:02:8d:17:53:0b:1f:55:83:04:
                    7c:9f:37:7e:9c:65:10:b6:55:20:29:f5:6c:98:43:
                    5f:2e:a6:e6:46:71:6e:47:43:6d:a7:29:fc:ec:7c:
                    44:9b:ac:cc:5a:57:97:bd:b1:cc:70:f7:8c:52:db:
                    7e:6a:ba:f0:8e:2a:10:e8:80:9a:7e:86:85:44:dd:
                    31:45:68:c7:a1:01:7e:14:47:e4:a0:f7:08:c6:51:
                    88:25:df:be:ba:35:4f:c2:5c:0a:19:3d:3b:55:de:
                    6b:f9:4a:70:81:b4:7b:99:97:a2:37:41:41:75:3a:
                    c2:a2:91:98:c2:4d:4d:a5:12:7c:92:0f:c5:9e:53:
                    d6:5f:05:bb:04:4d:53:eb:ea:d9:ae:57:ee:5b:21:
                    e7:d2:8b:4a:26:ce:c7:71:28:f5:26:75:e7:17:89:
                    17:0d:1c:06:09:26:cd:bf:8c:70:2e:df:d5:29:6b:
                    eb:e2:f8:9d:42:50:51:c2:98:08:6c:5f:ae:b8:f8:
                    6a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:31:2C:74:C1:D0:1A:64:60:18:56:4C:CE:0E:E3:68:7E:DC:08:FE
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/4zEsdMHQGmRgGFZMzg7jaH7cCP4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.165.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2f:3e:ce:22:f4:a4:f6:eb:5b:57:d4:35:9f:6a:87:94:92:69:
         23:7b:02:6e:e2:b1:b3:99:17:c3:09:c6:78:db:7a:9f:fc:39:
         81:38:7c:28:84:d9:8c:56:b4:f8:b1:0b:f1:34:84:6e:8f:8c:
         88:c2:ad:3c:f1:18:70:9a:a5:c9:d1:0d:db:3b:a3:ad:68:18:
         95:a9:80:7d:ca:07:cd:86:e7:8e:20:85:c9:a3:73:77:5a:d1:
         20:85:34:f1:5c:24:97:a1:61:ae:af:1f:76:6f:a5:65:4b:92:
         2b:63:32:fe:31:59:e8:db:aa:c2:cd:75:0e:bf:77:a0:e8:c6:
         92:d2:1f:8f:2e:e1:23:57:82:46:a0:79:69:2d:70:29:01:6d:
         f7:19:2b:ad:45:fa:4c:0b:5d:57:bf:26:b4:50:94:5d:42:42:
         e5:86:ff:ae:d4:6d:b0:ad:a3:3c:3e:4f:6f:1a:34:3e:07:76:
         d9:ed:61:d6:f9:e8:d9:d7:90:f6:58:b5:61:ec:97:34:4b:61:
         8f:a6:09:0b:85:06:db:50:86:67:7a:ba:df:e1:91:a8:97:00:
         0b:dc:ec:da:06:28:3c:09:1b:62:7c:1c:ea:f2:8f:64:17:1e:
         e0:96:cd:75:42:f0:33:47:db:d7:3c:54:97:cf:cb:59:4a:83:
         4b:98:37:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----