Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/9aP_BRxdPPuxS-VuAVdRHjdWJ4M.roa
File:                     9aP_BRxdPPuxS-VuAVdRHjdWJ4M.roa (raw, json)
Hash identifier:          gyvjMeqm1ehr0vFcQg7dt+Zew1GMMn9YU7+L7MUPb4s=
Subject key identifier:   F5:A3:FF:05:1C:5D:3C:FB:B1:4B:E5:6E:01:57:51:1E:37:56:27:83
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1230
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/9aP_BRxdPPuxS-VuAVdRHjdWJ4M.roa
Signing time:             Wed 29 Sep 2021 02:54:18 +0000
ROA not before:           Wed 29 Sep 2021 02:54:18 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24164
IP address blocks:        49.158.60.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4656 (0x1230)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:54:18 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=F5A3FF051C5D3CFBB14BE56E0157511E37562783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c3:10:52:ed:11:14:67:12:ac:1e:c2:93:f3:
                    8a:3a:b1:15:01:f5:06:0d:21:22:8e:fb:4b:65:b8:
                    93:41:b7:27:4e:90:c4:d1:ae:fa:6b:32:ff:aa:f7:
                    37:2d:ea:40:62:48:80:4c:da:63:71:ff:ca:3c:5c:
                    a5:5c:95:97:a7:96:f9:44:dd:4f:13:94:77:83:9c:
                    e1:79:42:fb:f2:65:84:25:b1:4f:fb:c3:a0:55:b1:
                    69:d6:42:05:ee:af:5a:5e:a5:08:c3:40:46:29:2c:
                    46:fd:bb:72:8e:77:9d:9a:fb:4e:01:48:eb:f3:3b:
                    35:74:94:8d:ca:da:c3:75:c7:d0:89:09:d7:bb:d7:
                    a2:f5:cf:eb:9a:f4:58:1e:a9:47:f2:5c:1d:77:06:
                    01:cf:2a:6b:79:7a:b9:8f:9c:8b:7b:e9:1d:05:fe:
                    24:d1:9b:0c:f1:72:2d:8a:b1:0d:3c:62:60:e7:8d:
                    dc:bf:fa:ea:86:a5:0f:1a:a7:93:04:da:84:f7:da:
                    da:a4:c6:df:dd:f6:43:bd:a4:36:26:40:c8:cc:51:
                    d2:db:cf:c4:96:53:7b:1f:6d:d5:4c:85:28:f4:43:
                    f3:cf:2b:52:63:98:9c:99:1e:5a:d7:8b:5f:88:c3:
                    79:f1:cd:59:26:de:07:1f:90:7e:36:e7:bc:da:18:
                    db:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:A3:FF:05:1C:5D:3C:FB:B1:4B:E5:6E:01:57:51:1E:37:56:27:83
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/9aP_BRxdPPuxS-VuAVdRHjdWJ4M.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:76:2b:21:18:86:e1:7a:7d:aa:65:78:c1:5c:d3:ad:78:be:
         54:cb:d9:fc:11:72:17:5d:18:fa:6a:9f:f2:5c:42:d4:22:00:
         e5:bb:88:7f:56:f8:99:75:f3:08:b5:3e:11:70:5b:b1:a7:e3:
         06:d3:ff:76:48:35:36:b3:be:bc:33:12:12:58:1a:8f:0a:f1:
         4a:03:83:da:d5:2b:72:dc:06:69:f2:b9:81:bd:cd:99:fa:74:
         53:11:07:4c:68:a5:53:91:3c:8f:80:85:eb:84:16:15:c4:cf:
         48:36:8f:7b:6e:d3:e4:5b:be:f3:58:e3:82:61:f3:db:1a:fc:
         85:44:78:ce:12:32:b2:bf:17:35:76:e3:3c:a2:4e:c1:64:1a:
         77:a0:dc:7d:d9:57:15:5c:b9:ad:7b:8f:40:3d:40:c4:5d:80:
         da:80:21:ac:ca:26:91:7c:78:a9:8a:a3:cd:db:b7:21:3a:aa:
         af:f2:14:94:d0:db:41:3b:61:4c:cd:97:07:d0:3e:4c:d5:ff:
         4c:0c:11:05:67:1b:27:34:df:77:47:c5:43:f7:9b:f3:dc:6d:
         29:d5:e6:6e:8d:4a:67:08:f3:24:1b:3d:aa:ee:72:16:f1:e9:
         e3:e1:34:be:2c:93:a6:78:d0:28:26:18:8d:c0:79:0f:f1:2f:
         b4:6a:12:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----