Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CM_pb2JHnTTTVsGfmOFLsEQkgCg.roa
File:                     CM_pb2JHnTTTVsGfmOFLsEQkgCg.roa (raw, json)
Hash identifier:          6Y8JrfZJlWbiAG9uNY6VEdQ2FrerSrDiXsfTnqElBI8=
Subject key identifier:   08:CF:E9:6F:62:47:9D:34:D3:56:C1:9F:98:E1:4B:B0:44:24:80:28
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       124C
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CM_pb2JHnTTTVsGfmOFLsEQkgCg.roa
Signing time:             Wed 29 Sep 2021 02:54:25 +0000
ROA not before:           Wed 29 Sep 2021 02:54:25 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24165
IP address blocks:        115.165.224.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4684 (0x124c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:54:25 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=08CFE96F62479D34D356C19F98E14BB044248028
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8e:64:02:da:3b:86:fa:85:eb:0b:8e:1b:31:
                    07:9e:65:33:1b:dd:2b:55:64:23:d9:a6:d6:f2:97:
                    18:21:c2:df:43:74:e2:45:ea:bf:e0:50:13:a2:ae:
                    26:c1:a2:44:97:aa:a5:b1:6f:45:bb:80:fd:82:21:
                    b5:0a:75:6a:d1:85:24:e3:b7:86:df:e5:ad:51:b4:
                    21:d5:6c:5d:76:4e:cb:e9:55:f8:b2:8a:f2:26:f0:
                    88:4c:64:bb:b1:b4:d9:e8:6d:4d:d1:f0:d6:f0:15:
                    17:65:e4:54:96:5e:6c:1c:1c:53:35:e2:fc:d3:79:
                    63:fa:94:a6:62:58:cb:e7:49:2b:4f:2d:6a:65:53:
                    8a:ff:30:2c:bb:2e:16:10:11:69:48:d7:f5:4b:b3:
                    37:04:9a:d4:7b:8d:d9:f4:b2:11:d6:b7:c4:42:d0:
                    aa:77:52:ee:5f:2b:ee:45:14:3d:6c:01:08:1c:d6:
                    b6:a2:11:7e:68:e6:ab:07:86:31:88:d2:7d:0d:b5:
                    ea:d0:7b:66:af:4c:f3:a5:4d:ad:4f:ca:fe:35:73:
                    49:99:b7:ac:49:31:89:6f:56:86:18:e3:62:1d:e8:
                    d3:94:ae:45:d5:1c:58:ef:bd:8d:04:1d:f0:2b:b2:
                    3e:9e:10:9a:72:d0:b5:fe:6e:1c:aa:3c:af:c3:96:
                    0c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:CF:E9:6F:62:47:9D:34:D3:56:C1:9F:98:E1:4B:B0:44:24:80:28
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CM_pb2JHnTTTVsGfmOFLsEQkgCg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.165.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         34:0c:de:b4:a3:51:c2:f1:f0:b6:b5:6d:8a:62:ce:d6:47:25:
         3a:43:f7:83:e5:19:a2:86:da:1c:24:d5:17:44:a2:18:70:25:
         21:bf:f3:3f:76:fb:97:b9:c9:af:31:c8:aa:e3:78:92:81:fe:
         53:d4:23:69:51:e1:4e:e1:f9:24:67:bc:12:3b:96:cd:72:20:
         57:00:b3:68:dd:fa:14:1d:6e:36:34:fb:9d:04:9a:f4:9c:6f:
         dc:bd:f6:8b:ae:30:10:d3:20:a1:70:3f:ed:98:4b:b6:80:f5:
         98:2c:f9:df:1a:96:ba:13:df:68:13:52:9a:4e:71:5f:df:8c:
         74:d0:5d:36:96:0e:43:d7:f9:7d:cd:e7:fc:84:30:67:f0:a1:
         40:fd:07:cc:63:8e:19:f0:b1:7a:fd:46:10:47:35:f7:f5:2b:
         cd:fe:ce:5a:11:23:17:78:15:6a:96:ea:9f:21:34:a0:ae:8a:
         8c:c5:b8:35:44:02:e7:94:39:22:24:f5:58:11:84:fe:83:21:
         6f:9f:a3:ed:04:dd:a1:2f:3d:37:a8:33:a0:ae:7e:bd:e7:16:
         75:19:4d:41:9f:35:fb:9e:3f:00:0d:0a:44:2d:15:16:50:99:
         be:fa:aa:fa:c4:2a:57:76:5f:20:f7:bd:69:2a:06:ac:e0:6d:
         ca:ee:fd:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----