Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-uFDMVQCT2kR-MUIQmgmA1-Vt04.roa
File:                     -uFDMVQCT2kR-MUIQmgmA1-Vt04.roa (raw, json)
Hash identifier:          5TcOPklFuBtzdVa7bUlPOEzbcqktn1lZhTCP927XSxU=
Subject key identifier:   FA:E1:43:31:54:02:4F:69:11:F8:C5:08:42:68:26:03:5F:95:B7:4E
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       13FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-uFDMVQCT2kR-MUIQmgmA1-Vt04.roa
Signing time:             Mon 25 Apr 2022 09:01:11 +0000
ROA not before:           Mon 25 Apr 2022 09:01:11 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24164
IP address blocks:        49.158.96.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5118 (0x13fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Apr 25 09:01:11 2022 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=FAE1433154024F6911F8C508426826035F95B74E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e9:ab:48:75:46:9e:3e:3c:e8:c9:c1:9e:62:
                    3a:e5:dd:cf:2c:df:6f:fa:81:eb:f2:64:b7:8e:49:
                    4d:2e:b0:b4:42:48:52:7d:42:93:0e:68:54:53:1b:
                    ad:73:d5:14:33:91:34:8a:c5:7e:b8:a0:0d:9e:41:
                    ea:b3:58:c9:6d:11:ad:30:5b:da:1e:03:bc:c8:a0:
                    dd:bd:38:04:a5:73:44:02:9e:46:91:cb:63:e9:ad:
                    32:1e:85:77:c9:a4:8a:26:40:dd:d4:13:04:c9:e8:
                    9b:89:2f:6a:07:c5:9e:b6:d4:5f:e6:4e:3a:f3:df:
                    37:4e:f4:95:13:9e:65:88:dc:8e:68:e7:9e:46:d5:
                    b1:29:79:ba:2e:4d:75:82:64:2d:df:3a:ff:25:24:
                    9e:d4:bf:2b:2e:31:2e:90:e9:b4:5f:a5:4a:a4:43:
                    20:af:e1:d3:ad:bd:98:02:0f:6f:85:7c:26:85:23:
                    7c:b7:20:75:3f:b7:64:2a:62:d4:d5:61:40:42:3a:
                    03:11:7f:97:2c:9a:b5:64:dc:2a:62:b2:2d:a2:11:
                    dc:ad:7c:36:e8:9e:74:7a:b8:99:c6:17:d5:04:c7:
                    52:8f:40:9b:5c:e2:b4:b2:fb:af:0c:a5:d7:66:db:
                    07:b8:be:21:8a:41:9c:79:0d:f8:f2:e0:8a:15:e4:
                    83:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:E1:43:31:54:02:4F:69:11:F8:C5:08:42:68:26:03:5F:95:B7:4E
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-uFDMVQCT2kR-MUIQmgmA1-Vt04.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7c:c2:e8:df:cd:94:e2:c4:02:d3:89:4c:45:a3:ef:56:95:a3:
         40:47:58:6f:b7:a7:56:b0:73:12:3f:46:67:ca:fa:f8:61:b4:
         b6:13:21:14:c2:d9:2e:de:e5:28:d2:29:4c:85:55:b0:6a:76:
         93:d0:2d:47:e3:3c:28:00:38:de:71:c1:a7:5e:b2:a3:93:74:
         2e:11:3f:87:a3:93:7f:83:01:14:81:a4:ec:59:81:10:98:17:
         65:b1:e7:05:87:b5:0d:97:10:3b:30:ca:e5:c5:bb:19:62:63:
         e5:a6:98:2c:21:8d:f5:1d:86:ef:b1:09:a1:16:d3:6a:e6:8f:
         a8:8a:39:2e:a1:ca:ff:82:f6:cf:30:40:99:8e:85:d4:d1:e1:
         66:c2:ac:bf:87:c9:b9:8f:c4:6d:c1:1c:41:62:06:3c:d8:d3:
         50:2a:62:8f:51:3f:5a:f3:cf:54:43:8f:44:88:e8:aa:ff:09:
         10:c5:4a:0f:10:d1:e8:d7:ca:ab:75:7e:8c:c8:e1:e9:68:ab:
         6f:c2:52:00:58:0e:0f:55:08:9b:de:7a:79:3b:e2:33:a1:fa:
         52:30:36:5d:99:fb:31:c2:fa:82:4b:4a:58:d6:d5:d9:c5:a0:
         50:f8:c8:8f:d0:03:14:d4:35:bc:49:c2:78:32:d5:80:0f:3b:
         7c:4b:8e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----