Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/HKtZXzzNOueu2nfceWOlOwJeiLE.roa
File:                     HKtZXzzNOueu2nfceWOlOwJeiLE.roa (raw, json)
Hash identifier:          pByyjW8HShLmcXesnbRO21X3xj0dAnanqbTvxm7WGAc=
Subject key identifier:   1C:AB:59:5F:3C:CD:3A:E7:AE:DA:77:DC:79:63:A5:3B:02:5E:88:B1
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       128D
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/HKtZXzzNOueu2nfceWOlOwJeiLE.roa
Signing time:             Wed 29 Sep 2021 02:54:43 +0000
ROA not before:           Wed 29 Sep 2021 02:54:43 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24165
IP address blocks:        49.158.128.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4749 (0x128d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:54:43 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=1CAB595F3CCD3AE7AEDA77DC7963A53B025E88B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5b:ba:50:27:27:8d:e0:9c:43:b4:8e:c8:39:
                    ba:b2:c8:69:43:ad:8e:66:f4:e6:9d:81:e8:31:eb:
                    72:ba:ca:c5:37:be:fc:44:97:25:0c:b1:4a:88:7a:
                    79:75:e5:3e:55:8f:99:aa:de:39:74:f3:03:13:1c:
                    7f:42:59:a2:96:b4:a9:ee:95:5c:da:a7:17:fb:18:
                    06:5b:06:7d:49:ad:82:47:7a:25:61:a3:23:f7:97:
                    20:be:81:3b:8a:fb:ef:8f:c3:5f:ea:c5:1c:01:6f:
                    53:49:1f:97:1c:a6:0c:57:bc:e9:16:c2:fd:9d:26:
                    a4:48:5f:3c:37:a0:89:14:48:98:5e:af:9e:31:96:
                    72:2f:55:43:ec:4d:0a:cd:49:1b:97:a1:08:01:06:
                    14:27:39:4f:a9:13:6b:92:8e:72:1a:18:bd:5b:f3:
                    09:c6:ce:70:5b:10:f2:1e:6a:7e:b5:14:70:ae:7f:
                    e3:c7:96:cd:1a:41:77:78:c1:1c:1a:14:f0:01:d3:
                    c9:ab:39:a4:ac:49:44:8a:9b:92:d5:8c:fe:68:13:
                    3d:78:37:05:98:f4:67:69:47:24:a8:0f:69:02:c1:
                    d3:03:0a:6d:cb:f3:13:bb:2a:d6:c3:f4:b3:aa:6e:
                    a7:fb:64:32:dd:7a:29:d4:5a:12:76:8f:76:94:c2:
                    94:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:AB:59:5F:3C:CD:3A:E7:AE:DA:77:DC:79:63:A5:3B:02:5E:88:B1
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/HKtZXzzNOueu2nfceWOlOwJeiLE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:f0:38:74:ac:9b:d9:54:53:82:01:4e:d6:cd:c2:d3:8f:09:
         52:c9:27:9e:e3:22:90:3e:f9:ab:cb:3a:17:7a:49:5c:f5:23:
         b0:52:e8:21:eb:1d:21:59:9e:54:0b:bc:99:6d:79:f4:a4:d2:
         9a:e0:c6:1b:c3:7d:fb:3c:64:dc:d4:ac:e4:f7:3c:45:19:75:
         5a:d0:f9:fd:7e:7f:4d:24:16:f9:88:bc:5f:a7:22:75:11:1b:
         60:e4:0c:b6:0c:a9:67:67:b5:ae:1d:70:aa:07:f5:ff:c7:25:
         89:81:b2:a1:cc:e1:a9:3f:e2:5d:01:92:b8:22:f2:2c:73:23:
         fa:6c:ad:7d:7a:7f:20:1b:66:64:e7:8e:4d:6f:92:20:a9:5c:
         97:1a:a5:26:88:03:fa:da:66:6a:a6:26:2e:fd:e4:a9:41:41:
         d3:74:06:1b:f5:25:0a:d5:d4:20:85:bb:65:dd:2c:8e:3f:eb:
         fb:cc:df:a8:f9:7e:0d:a4:19:c3:fe:d6:a8:8b:56:ca:27:56:
         95:6f:1e:7b:00:b3:bf:df:c3:78:48:cc:f1:82:9a:f1:55:a7:
         76:5a:7d:32:d1:72:73:27:f4:30:1e:7d:f0:02:94:fc:05:62:
         6f:95:20:e7:fd:fe:1e:83:f6:91:98:c1:04:2a:b8:14:0d:25:
         c6:68:81:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----