Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/DxMKHkYzOIGK-in31C_5oUzfYRI.roa
File:                     DxMKHkYzOIGK-in31C_5oUzfYRI.roa (raw, json)
Hash identifier:          arwBDEN+BHa7+qKbNuHPCxGow7KKPVmSbsyOyCZS6eE=
Subject key identifier:   0F:13:0A:1E:46:33:38:81:8A:FA:29:F7:D4:2F:F9:A1:4C:DF:61:12
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       196E
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/DxMKHkYzOIGK-in31C_5oUzfYRI.roa
Signing time:             Sat 22 Oct 2022 06:06:31 +0000
ROA not before:           Sat 22 Oct 2022 06:06:31 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24163
IP address blocks:        2407:4b00::/32 maxlen: 36

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6510 (0x196e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Oct 22 06:06:31 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=0F130A1E463338818AFA29F7D42FF9A14CDF6112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f5:34:35:e6:db:b6:c1:1e:2d:43:1c:9d:30:
                    e9:d1:01:e3:8b:75:d6:2c:40:53:67:dd:49:3e:f4:
                    71:19:66:a2:25:a6:95:9b:3e:f7:32:ec:1e:e5:d0:
                    28:46:0a:22:ea:da:db:f1:bc:3e:6c:7c:fc:b6:b7:
                    b9:06:55:bc:f9:67:f3:3d:76:fc:a3:41:5b:ed:55:
                    b7:04:ed:b0:3c:99:4f:ea:c4:e7:83:8e:29:d4:f8:
                    46:49:d3:3e:1f:d3:47:e1:22:12:85:c8:1c:68:7c:
                    74:ca:f3:d9:2c:00:19:2f:ea:61:94:8b:f8:42:33:
                    da:fa:56:be:5e:2e:97:de:8a:f9:0a:f4:e6:e2:f6:
                    3e:96:9d:d5:79:3e:1f:83:f9:ab:16:dc:f1:b6:34:
                    e4:7d:65:aa:a6:c8:c4:f8:8e:f0:1c:9d:24:33:95:
                    9d:64:f1:0a:cc:a2:9e:ad:bf:c3:e4:3d:da:8b:21:
                    2f:bd:df:4d:f6:bb:c0:43:1e:e7:3f:45:24:56:36:
                    5f:03:16:29:f7:65:71:f0:7d:cf:3b:2f:5c:d3:54:
                    a9:8f:0b:0b:a6:66:2e:34:1d:92:be:c9:a7:ec:a4:
                    6b:3a:19:2b:f8:b7:73:de:a6:3a:2f:eb:1d:47:d1:
                    28:2e:ac:cf:4e:5e:9e:77:f7:f0:7a:81:7b:0b:89:
                    83:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:13:0A:1E:46:33:38:81:8A:FA:29:F7:D4:2F:F9:A1:4C:DF:61:12
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/DxMKHkYzOIGK-in31C_5oUzfYRI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:4b00::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:78:eb:08:1d:3a:79:d2:45:7b:45:94:75:d5:86:3f:d8:76:
         5b:5f:65:15:d6:b3:2d:c2:fb:60:f7:be:1f:c5:fc:36:b7:bc:
         2e:c9:49:0e:aa:22:87:48:2e:58:a4:4f:2d:15:d6:33:e9:dd:
         dc:e1:db:5c:30:42:5f:69:13:b1:d8:5e:bd:20:9a:cf:f2:5c:
         c2:d7:58:0d:84:06:4f:cf:ed:4f:1a:8c:76:18:b5:97:df:c8:
         42:b9:b3:df:1a:29:90:33:ee:9a:fb:12:ee:2e:90:5b:f4:b0:
         5c:ec:d2:25:c0:df:7b:ed:9a:28:28:34:c2:43:45:dd:07:dd:
         ff:36:9e:95:a9:67:82:a5:06:dd:ad:8d:5c:a5:a6:4a:36:5b:
         ea:14:bc:73:13:3a:4c:40:c9:de:5d:5a:1f:4e:da:41:c7:c9:
         b0:38:e9:eb:89:29:80:ad:70:2b:1b:eb:96:2b:d1:b7:26:44:
         96:42:0e:7d:e6:b4:0d:92:59:96:4a:e7:ef:e9:53:af:64:0f:
         1f:dc:95:0e:fb:47:a6:5b:17:ff:30:53:5f:f5:10:17:d9:27:
         3a:33:9f:f9:ab:65:46:3b:bb:dd:24:f4:9a:98:e1:b2:d5:46:
         57:cb:82:10:7d:1d:86:b9:b5:dc:23:8e:e9:be:74:fc:78:58:
         d5:12:38:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----