Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/2EYET61hss8QFSTVGRfFt_BlzEg.roa
File:                     2EYET61hss8QFSTVGRfFt_BlzEg.roa (raw, json)
Hash identifier:          t8NZnMCNE2MKBV1ce2ScN4pw8kxCvCc/DykOy7exels=
Subject key identifier:   D8:46:04:4F:AD:61:B2:CF:10:15:24:D5:19:17:C5:B7:F0:65:CC:48
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       12BB
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/2EYET61hss8QFSTVGRfFt_BlzEg.roa
Signing time:             Wed 29 Sep 2021 02:54:54 +0000
ROA not before:           Wed 29 Sep 2021 02:54:54 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24165
IP address blocks:        49.159.216.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4795 (0x12bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:54:54 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=D846044FAD61B2CF101524D51917C5B7F065CC48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:37:cb:eb:ca:14:39:0a:2e:e1:1d:20:d4:3e:
                    9b:95:61:77:56:62:a5:fa:25:fe:28:e9:8e:0c:e4:
                    e3:ca:a2:15:54:99:78:86:a5:0c:09:c1:27:1e:0f:
                    16:1f:22:15:05:97:c5:7b:29:5b:b9:54:6e:72:ff:
                    6a:90:ce:18:6c:b9:8e:a8:ea:15:2c:aa:3b:aa:c4:
                    7e:c9:39:b4:94:5f:cf:bc:76:2f:5c:6d:a8:b1:07:
                    6a:ee:d3:c9:40:60:bb:eb:c2:49:f1:9a:86:1d:87:
                    87:c6:e1:ee:35:2d:bc:95:47:67:7d:eb:d1:28:28:
                    12:6f:5d:31:7b:d3:de:82:39:70:0e:13:07:45:3f:
                    bd:2b:7b:d4:63:e2:56:2d:45:e5:37:c6:fb:8b:12:
                    52:c0:14:3d:2f:e2:07:8b:10:e1:95:53:f8:23:7b:
                    9a:14:de:81:7d:31:d6:7e:f2:3c:c0:77:b8:fd:19:
                    d9:39:b2:72:30:11:f4:d5:50:b7:09:b3:96:cd:56:
                    0d:13:d5:53:fd:60:96:e6:e7:82:11:cb:b5:92:97:
                    0c:93:fb:7b:2a:89:28:08:23:3d:31:e1:92:59:91:
                    6b:4b:1a:f8:c1:31:c6:6b:df:dd:d3:54:66:fa:d6:
                    0d:8c:69:79:de:83:bb:2e:10:a5:73:f6:84:65:b2:
                    6d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:46:04:4F:AD:61:B2:CF:10:15:24:D5:19:17:C5:B7:F0:65:CC:48
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/2EYET61hss8QFSTVGRfFt_BlzEg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.159.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0e:84:12:62:61:fb:b6:a9:bd:73:80:72:f6:ea:6e:d5:64:cc:
         af:25:fb:3b:f3:82:9b:e8:a1:19:4a:a9:5a:8c:0f:28:8d:74:
         61:79:ad:b4:bb:9b:50:94:ad:31:ed:db:33:ca:cd:a4:7f:8e:
         0f:de:a9:16:82:91:70:bc:4a:21:cf:86:38:ac:74:39:6d:7a:
         d4:6c:4f:00:1a:64:e9:5d:bb:e2:37:4c:d6:41:24:ec:06:ff:
         77:13:1a:5d:7f:57:71:30:65:76:1a:e4:26:c4:b1:e3:8b:d8:
         55:c7:e8:06:8a:86:db:77:fb:a8:01:60:c6:3f:39:29:c1:16:
         22:cb:b7:67:d4:fc:6f:83:81:46:0a:95:f9:d9:cb:95:47:29:
         e5:f0:8f:28:dc:62:ad:81:1b:87:70:bc:e0:e8:7a:e4:67:61:
         f8:26:10:4c:52:22:0b:db:00:a4:82:73:59:6b:95:72:18:bb:
         59:e0:c2:77:8c:64:92:59:14:12:1b:d3:e9:b0:d8:50:8a:bc:
         67:b8:d3:cb:ff:17:fd:52:9e:17:cd:79:a0:97:92:09:5d:3b:
         59:41:9e:4c:11:d0:44:ed:e7:cc:00:4e:0f:ea:d0:53:74:ac:
         31:8b:87:3c:28:28:cf:b7:5c:29:5e:6a:25:4d:c1:c9:fb:bb:
         9c:22:58:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----