Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/DZtHwzfJGEMor0kiBYE3txoB7r8.roa
File:                     DZtHwzfJGEMor0kiBYE3txoB7r8.roa (raw, json)
Hash identifier:          W23j1thlT2j5ZMw2MfvFIOeTTvjnhWzVGqWN7eiUEzY=
Subject key identifier:   0D:9B:47:C3:37:C9:18:43:28:AF:49:22:05:81:37:B7:1A:01:EE:BF
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       12C1
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/DZtHwzfJGEMor0kiBYE3txoB7r8.roa
Signing time:             Wed 29 Sep 2021 02:54:56 +0000
ROA not before:           Wed 29 Sep 2021 02:54:56 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24165
IP address blocks:        49.159.248.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4801 (0x12c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:54:56 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=0D9B47C337C9184328AF4922058137B71A01EEBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a9:09:98:c6:e9:47:7f:6b:ee:ff:37:d1:7e:
                    0a:2f:25:a8:5e:da:ce:a6:60:98:eb:36:f5:3a:71:
                    5b:f5:fb:87:7e:19:8a:63:ab:78:d8:b7:fd:bd:a5:
                    c4:ea:f6:e1:f0:83:97:5e:e4:b5:d1:d1:65:13:51:
                    2e:f5:68:11:aa:2f:a8:38:c9:24:c7:63:f6:3f:25:
                    0e:a1:6f:e0:c3:25:c3:ba:72:b3:dd:c9:94:09:df:
                    89:55:64:f9:25:38:ca:63:a8:89:9d:1b:b1:90:5f:
                    34:e6:49:3b:a3:d1:9b:f6:8f:05:89:1a:f2:8d:a0:
                    2c:bf:a2:f5:0a:82:98:5e:5d:74:7f:42:0e:96:7b:
                    e1:91:e2:f7:37:c3:4f:05:c1:36:38:05:cc:c6:f4:
                    f1:0b:cc:fd:8d:ae:aa:e1:b5:6e:44:45:68:8d:d6:
                    c0:be:95:9f:a9:9a:07:03:fb:04:3d:53:78:a8:e8:
                    dc:7b:b9:e4:9f:20:cf:8d:78:ed:86:b8:ef:42:6a:
                    f2:56:71:40:6b:71:9e:17:f6:2d:51:a6:b6:ee:3a:
                    aa:5c:00:08:5f:c9:55:34:87:90:fa:b7:61:51:b7:
                    0a:d0:a2:a5:4d:20:ee:9a:9b:34:22:d7:8b:eb:11:
                    27:45:9a:87:80:0a:82:ee:73:c1:c4:ce:5a:55:c8:
                    d4:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:9B:47:C3:37:C9:18:43:28:AF:49:22:05:81:37:B7:1A:01:EE:BF
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/DZtHwzfJGEMor0kiBYE3txoB7r8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.159.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:51:d3:81:4f:d9:cb:e7:50:e5:67:ff:62:0d:af:c7:45:8e:
         74:40:0f:15:dd:d1:7f:15:3e:74:73:e4:0e:df:e6:52:a9:91:
         b7:c1:99:da:0c:9c:83:55:d1:c7:69:0d:b3:cc:88:10:fa:b4:
         d3:cd:1b:34:d9:20:7f:aa:67:30:4f:c2:6a:52:f7:32:90:29:
         93:6a:e3:55:09:30:ac:22:ec:95:9e:ed:d1:56:c6:bb:8a:26:
         03:05:77:14:58:a3:d1:42:11:34:78:04:4d:d6:06:a5:71:5e:
         5f:31:b3:f2:2e:d6:41:59:5c:18:35:36:75:04:49:45:eb:8d:
         56:56:52:62:c7:8d:d5:34:b9:9a:9c:e6:1c:fe:f0:6b:e4:23:
         a2:a2:1b:97:c1:a7:e4:6a:53:dd:60:0c:20:ed:6f:54:92:2f:
         2e:52:59:54:b7:fc:40:57:a6:27:d1:f3:43:19:cd:01:5a:f0:
         60:6a:df:55:6c:ee:3f:44:71:e6:32:56:8e:ca:e7:81:ea:ca:
         bb:35:7d:6b:f8:3c:fd:db:39:f8:46:cc:f8:4f:0b:d5:61:22:
         1b:f7:fc:1c:c2:ed:99:f7:2c:31:24:75:09:dc:a2:6b:53:c7:
         4f:51:73:96:e3:02:de:4f:bc:73:25:76:8a:3e:d8:56:ee:6b:
         bd:de:b2:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----