Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FPxhbwbWCVYtL2Ytsrp3puRB814.roa
File:                     FPxhbwbWCVYtL2Ytsrp3puRB814.roa (raw, json)
Hash identifier:          MS7h6AnS96Nku73HDUAGr5GpHYveKj2GLIOyFagmj2Q=
Subject key identifier:   14:FC:61:6F:06:D6:09:56:2D:2F:66:2D:B2:BA:77:A6:E4:41:F3:5E
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1256
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FPxhbwbWCVYtL2Ytsrp3puRB814.roa
Signing time:             Wed 29 Sep 2021 02:54:28 +0000
ROA not before:           Wed 29 Sep 2021 02:54:28 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24163
IP address blocks:        122.100.110.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4694 (0x1256)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:54:28 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=14FC616F06D609562D2F662DB2BA77A6E441F35E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a7:a6:f5:0d:1a:a8:04:82:9a:01:b5:82:c9:
                    42:b0:75:b1:91:dd:57:63:c8:7d:ed:a8:70:53:39:
                    6a:70:58:bc:f1:89:8a:ab:c7:27:c6:e7:e8:d4:7b:
                    8c:eb:38:5b:62:0d:c5:b0:2f:46:d9:d3:d1:37:42:
                    2d:af:b9:83:ef:fe:9f:a6:e3:1c:66:97:26:2e:e8:
                    6f:ce:62:d4:f3:68:e3:77:ad:f4:27:63:00:a8:52:
                    fd:bf:68:c6:4b:35:c9:4d:41:66:00:b4:ba:98:27:
                    1b:d6:b4:af:9f:67:ce:ee:59:2f:b2:7e:62:42:15:
                    44:38:0a:e0:64:e3:ba:40:9f:7c:61:f5:dd:a5:57:
                    75:bb:37:28:e7:78:ca:9b:53:5e:5a:58:3f:51:61:
                    89:05:2f:4b:58:4e:82:b6:00:ae:55:51:12:00:fe:
                    61:57:4e:7d:71:52:dc:84:c2:f1:27:5d:7f:19:2d:
                    24:86:f0:05:91:79:24:78:20:bf:57:44:ba:2e:93:
                    5c:45:39:11:09:a0:70:ae:ee:bb:4e:37:f7:1d:84:
                    80:bc:f8:ce:00:74:e1:4a:ae:5f:76:13:62:2e:e6:
                    fd:b7:52:07:05:62:ad:f3:9f:30:77:67:f9:4d:04:
                    c2:69:e1:33:d4:48:c8:d1:88:9c:a4:9a:06:b6:db:
                    d7:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:FC:61:6F:06:D6:09:56:2D:2F:66:2D:B2:BA:77:A6:E4:41:F3:5E
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FPxhbwbWCVYtL2Ytsrp3puRB814.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.100.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:ae:af:b5:0d:9d:1f:d0:1d:6b:50:70:62:23:cf:2c:6c:aa:
         f5:76:80:82:ed:00:0c:5b:cb:7d:94:15:d2:2b:0a:1c:62:f8:
         c1:9a:d5:b6:a5:d3:a5:cc:2f:2a:9f:c8:c9:b1:1a:cf:31:c2:
         cc:fc:4a:bc:a8:96:0b:cd:1d:79:bd:5d:59:f2:34:45:8f:94:
         9d:8a:8d:f0:96:8e:1d:af:86:76:5d:49:d7:64:d6:31:9e:0f:
         d4:aa:d3:d9:c6:c7:f1:40:68:89:48:a7:f9:d3:0c:1a:d8:52:
         c8:93:63:cc:d2:02:23:d0:98:d7:5f:db:c8:da:5d:a5:2b:22:
         68:09:84:d0:17:e3:0f:14:4a:bf:5b:89:27:fb:01:67:08:28:
         76:c3:40:88:e1:91:5c:ab:e3:4f:d9:5e:1d:c7:f9:ce:50:49:
         c9:26:b4:09:a5:45:e3:8e:d7:0a:0f:c7:c9:32:78:96:af:ec:
         83:37:4e:33:ed:41:91:cf:6f:c0:9d:61:b1:d2:b7:d1:d7:b6:
         6f:91:7f:ed:60:6c:c0:dc:09:bb:8c:29:ce:38:7b:0e:ac:2f:
         7b:37:f5:ad:e8:0f:10:cd:6b:b9:85:aa:02:0a:4c:17:43:4c:
         df:4b:8f:2f:eb:b4:93:9c:15:6e:1e:7a:df:2e:22:71:2c:9a:
         5d:3a:c9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----