Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/F_uebrtNDiRDBtosPAjLhaiF2HY.roa
File:                     F_uebrtNDiRDBtosPAjLhaiF2HY.roa (raw, json)
Hash identifier:          9aWxlqdeW1gvHAwN1yCk/3BPiygvF0arMO2LByRzSyo=
Subject key identifier:   17:FB:9E:6E:BB:4D:0E:24:43:06:DA:2C:3C:08:CB:85:A8:85:D8:76
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0F4D
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/F_uebrtNDiRDBtosPAjLhaiF2HY.roa
Signing time:             Sun 07 Feb 2021 12:33:37 +0000
ROA not before:           Sun 07 Feb 2021 12:33:37 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24163
IP address blocks:        122.100.72.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3917 (0xf4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb  7 12:33:37 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=17FB9E6EBB4D0E244306DA2C3C08CB85A885D876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8b:ce:46:ae:10:93:2c:0b:14:6f:29:9a:a5:
                    12:99:3b:2c:9e:7c:3f:74:8a:76:86:0a:87:7d:c8:
                    dc:88:8b:4b:4e:b1:b5:1d:f3:34:14:8c:ba:c2:d6:
                    04:e0:e5:50:ed:2b:36:ab:3e:33:0e:20:34:cc:e2:
                    bf:1a:62:b6:75:be:57:b2:34:37:c9:e7:e5:5b:30:
                    dd:bd:79:c3:a4:53:1b:f8:b8:88:7d:60:4d:8b:6f:
                    82:a2:d8:b8:f8:4d:f6:2b:f0:0b:f0:bb:ac:80:88:
                    fa:d5:f6:36:6b:33:13:d9:da:88:0c:0d:8b:9a:73:
                    d9:ef:66:58:2b:aa:cc:fb:db:e3:db:20:85:52:a7:
                    da:12:08:86:88:e3:99:cf:c5:90:f3:2c:24:cc:1a:
                    01:de:1e:d9:21:73:2f:13:1a:f9:66:81:69:47:fd:
                    18:67:79:ca:7e:6f:d3:0e:2f:5e:f9:23:fa:52:27:
                    49:8e:84:37:7d:1f:cb:f5:1d:0b:dc:3c:a3:13:7c:
                    4e:5f:06:05:b6:eb:b5:01:70:c6:21:04:b3:61:04:
                    71:1e:67:f8:75:fc:e9:d1:af:6f:a6:7d:4f:07:98:
                    3f:16:97:c6:3d:37:a1:a3:27:f8:ae:b9:26:61:80:
                    bf:42:0a:9a:5a:18:3b:54:29:b7:f5:a1:86:53:d8:
                    27:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:FB:9E:6E:BB:4D:0E:24:43:06:DA:2C:3C:08:CB:85:A8:85:D8:76
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/F_uebrtNDiRDBtosPAjLhaiF2HY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.100.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:9b:0b:5d:8f:5c:d8:8c:87:e1:6b:90:f9:43:a8:92:fb:45:
         a8:d1:e4:24:a1:0e:c0:a0:9c:58:57:61:6a:ee:ac:dc:f0:c1:
         33:7b:28:6f:ea:a4:b8:63:68:ee:4f:25:43:23:d5:68:cd:02:
         64:5b:a2:58:ee:ff:4f:c6:d7:56:ea:4c:3e:0b:14:6e:a1:7b:
         d2:60:9c:25:a2:14:b4:3a:7b:ce:66:20:1b:de:85:9d:c9:46:
         12:17:b9:3c:a7:36:a3:46:52:c7:84:de:b0:ca:84:5a:09:8f:
         c6:5c:a5:f3:6a:3a:19:aa:57:ac:d7:30:7a:d0:19:c3:eb:29:
         57:ba:da:49:10:5e:fb:8a:03:67:b8:92:93:02:62:3a:91:26:
         02:50:4d:c4:05:c0:fa:4e:ee:ed:5d:61:e3:3d:c3:ef:c4:81:
         4f:b5:40:eb:64:65:bd:34:1f:01:8c:48:d9:dd:53:e9:a6:b6:
         49:ff:c1:9b:39:75:bd:e2:97:23:8b:b8:1d:18:d4:2c:d4:d4:
         63:ec:d6:0e:88:14:78:32:1e:09:55:5f:0a:d0:e8:4a:2f:fb:
         0e:76:b5:af:53:86:90:06:68:34:c0:bb:5a:64:5a:99:04:67:
         37:60:32:9b:a7:de:2d:8e:05:57:da:19:e2:85:e7:f1:d3:35:
         da:fd:b9:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----