Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/A8MnGsdwG5GOT1ZuBU5TVTLOB0Y.roa
File:                     A8MnGsdwG5GOT1ZuBU5TVTLOB0Y.roa (raw, json)
Hash identifier:          g4VZnDm31KWzGULi+RH098EsWoCo/M1/cArhqWe9jH8=
Subject key identifier:   03:C3:27:1A:C7:70:1B:91:8E:4F:56:6E:05:4E:53:55:32:CE:07:46
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1A28
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/A8MnGsdwG5GOT1ZuBU5TVTLOB0Y.roa
Signing time:             Sat 22 Oct 2022 11:16:39 +0000
ROA not before:           Sat 22 Oct 2022 11:16:39 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24164
IP address blocks:        115.165.224.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6696 (0x1a28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Oct 22 11:16:39 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=03C3271AC7701B918E4F566E054E535532CE0746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:92:c0:27:cb:97:2b:9b:cd:71:74:03:61:9c:
                    69:c6:4c:a5:a7:24:ce:3c:77:9e:08:18:1f:05:5f:
                    00:73:46:f2:50:11:8a:c2:b3:ed:62:4d:b3:34:9c:
                    2b:6c:d1:b6:83:5e:0d:c6:a8:86:92:7d:e8:d5:73:
                    da:20:82:8d:eb:e6:a0:5a:75:f2:e2:e6:df:19:04:
                    41:60:45:09:5f:d8:99:98:e1:e6:8e:72:a6:7b:e0:
                    54:3c:f1:a6:ac:87:d7:d0:78:c4:3f:97:1d:ba:ae:
                    8a:36:4a:22:4a:98:7b:a7:1d:44:ef:b6:97:42:f7:
                    d6:25:1c:94:d6:3f:1e:ea:0c:02:72:11:e1:22:41:
                    77:6d:3e:3b:c6:8d:a9:d5:34:82:d7:47:e0:7a:03:
                    2b:5a:d1:89:07:c4:84:30:aa:0b:36:61:aa:f7:8b:
                    e5:c2:3e:c8:5b:4b:f4:78:57:e6:02:69:0d:9a:a5:
                    00:c9:8d:fc:9b:02:1a:b3:c3:95:21:b5:25:1c:50:
                    9c:0a:60:4b:a8:5f:bf:01:12:4e:fb:c1:54:35:a8:
                    3e:0f:d6:f3:b9:3c:ee:62:16:f0:83:5d:fb:86:ba:
                    f9:3e:50:ae:89:f0:af:a9:00:8d:f3:2c:a5:0b:23:
                    f5:f3:3f:28:7d:61:0a:57:4e:4a:4a:31:19:f5:9c:
                    4a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:C3:27:1A:C7:70:1B:91:8E:4F:56:6E:05:4E:53:55:32:CE:07:46
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/A8MnGsdwG5GOT1ZuBU5TVTLOB0Y.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.165.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         97:7c:0b:3d:22:23:ee:fe:47:09:22:c9:5b:a5:92:e5:7d:33:
         fb:c2:2e:f1:6d:16:17:1f:d7:b6:1e:96:cb:c4:ef:53:c4:ad:
         ed:7d:c3:2f:c9:19:1a:fa:6d:3d:df:77:82:5a:9c:de:5e:13:
         8f:64:e3:fd:5d:7e:04:27:1c:31:73:a8:c4:91:af:b2:f2:7c:
         91:78:de:bb:16:2d:ec:ea:78:62:9d:66:4f:42:21:cb:10:b1:
         05:e4:ab:2e:28:96:09:66:95:bb:4e:51:fc:ed:99:e2:5e:5e:
         20:84:f6:66:f8:25:c4:33:88:03:c9:0d:0b:4e:20:b1:72:66:
         03:07:7e:7b:06:0f:9a:0e:80:6a:b4:a8:a6:9f:3b:0a:df:f2:
         f9:bc:a1:f3:bf:df:42:17:88:55:93:c9:da:49:bc:e1:66:09:
         b6:3b:96:b6:2d:64:b1:2b:7d:62:ca:25:d0:d8:f8:36:e2:68:
         c3:14:28:d0:15:40:b7:86:d4:c1:74:63:9d:fc:9f:99:66:77:
         ba:7e:07:f7:11:dd:ef:9c:5f:11:28:4e:59:6a:52:76:9e:f0:
         5b:71:7d:2d:49:fe:de:8b:20:b6:65:ee:f9:26:aa:dc:94:c2:
         a4:3e:21:8a:da:64:2a:e7:69:5c:c8:7f:c1:5f:32:bd:46:a4:
         d0:bb:19:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----