Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CQ-W-OCf2SsRhc6O4T2HrvMHMHw.roa
File:                     CQ-W-OCf2SsRhc6O4T2HrvMHMHw.roa (raw, json)
Hash identifier:          HK6/WTtSsyE58nvLfEKF3jIQKCSZBnr9B67ZIzYPojg=
Subject key identifier:   09:0F:96:F8:E0:9F:D9:2B:11:85:CE:8E:E1:3D:87:AE:F3:07:30:7C
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CQ-W-OCf2SsRhc6O4T2HrvMHMHw.roa
Signing time:             Thu 15 Sep 2022 02:36:07 +0000
ROA not before:           Thu 15 Sep 2022 02:36:07 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24164
IP address blocks:        61.64.24.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5374 (0x14fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 15 02:36:07 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=090F96F8E09FD92B1185CE8EE13D87AEF307307C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4c:b4:c5:a9:14:f5:77:02:ac:95:6b:5e:a1:
                    52:c2:e6:40:2a:29:20:42:b2:bc:c9:3b:39:3d:f2:
                    fa:66:5b:51:21:35:de:e4:0a:35:e6:04:d8:da:5f:
                    d3:35:cb:41:13:d4:13:ce:f7:db:72:eb:60:69:aa:
                    36:97:11:83:ae:b1:a3:62:dc:d0:3b:ec:04:d3:86:
                    4a:e0:71:56:1e:3e:94:a7:95:60:9d:e0:a0:34:29:
                    b5:ec:88:66:d3:78:8e:f9:e9:c2:a3:de:4d:f8:67:
                    9f:6f:12:48:8c:b4:31:9e:a0:0a:fa:b2:46:e6:f8:
                    47:7e:94:8c:55:6c:27:5e:6d:88:18:a3:ff:56:ab:
                    bc:26:7e:a2:11:60:d5:b2:94:d0:da:b1:c9:bc:49:
                    79:62:96:32:3d:c6:f4:27:cd:18:fe:33:7f:83:63:
                    6c:87:f3:9b:79:43:d0:11:a6:ae:20:ef:9c:3d:ef:
                    48:ad:59:87:7f:68:ce:44:14:85:39:f0:bb:7d:52:
                    13:28:27:7d:14:7c:21:f9:26:5a:1f:88:1d:2e:48:
                    52:41:41:a7:ec:bc:00:2c:93:a5:50:55:0b:6a:27:
                    b8:de:85:7a:65:25:46:1f:7e:33:a6:a6:46:9b:20:
                    c9:d8:ee:7a:88:a2:d8:d6:03:6c:7a:73:f4:ec:46:
                    e6:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:0F:96:F8:E0:9F:D9:2B:11:85:CE:8E:E1:3D:87:AE:F3:07:30:7C
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CQ-W-OCf2SsRhc6O4T2HrvMHMHw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.64.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:9c:25:ad:b0:a5:15:21:f2:69:57:ea:f8:76:50:9b:66:20:
         12:ce:a2:d4:86:66:a0:b7:84:e0:86:a4:50:6f:1a:d2:90:a3:
         b0:31:82:6e:0b:25:aa:70:89:be:96:0f:e2:00:81:e7:c8:21:
         aa:5e:b2:0b:4c:b1:5c:c4:85:18:ff:67:9e:1d:eb:7b:51:b7:
         4d:d9:f7:9e:a4:82:04:ac:56:0c:17:1c:a1:06:7a:2c:bd:31:
         ee:fb:bf:7b:cd:d5:ee:37:56:a3:d2:22:6b:13:27:d5:93:37:
         b4:67:48:ff:94:fa:11:7b:ba:9a:0f:41:dd:0d:7f:5c:c5:62:
         e1:ec:fa:5a:4b:f4:58:d0:81:5d:50:03:6e:ca:cd:30:ac:33:
         c3:b2:7c:a0:72:b6:5b:bf:66:71:71:bc:3b:dd:14:59:d9:87:
         01:21:39:3e:2d:ff:fa:a2:4a:37:d2:04:c8:f3:73:ca:24:45:
         15:44:77:b0:c5:25:37:13:32:e3:88:b1:df:13:73:8b:2e:ec:
         46:2d:9d:3b:39:2a:a0:ef:e2:9d:26:62:d1:1d:ef:36:0b:17:
         54:1f:a6:85:dc:5b:65:7d:f1:8d:19:7a:15:35:e0:4a:a3:97:
         22:25:44:62:19:41:46:79:03:58:de:73:72:cb:c4:c6:f6:2b:
         69:d9:ca:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----