Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IRLHoJH1d_HIcwT7edCXHUdJoV4.roa
File:                     IRLHoJH1d_HIcwT7edCXHUdJoV4.roa (raw, json)
Hash identifier:          I6MNzh49mIeSKmgJKU5xy6iqdnuo+SMmVnOe8OTQ+EA=
Subject key identifier:   21:12:C7:A0:91:F5:77:F1:C8:73:04:FB:79:D0:97:1D:47:49:A1:5E
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1232
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IRLHoJH1d_HIcwT7edCXHUdJoV4.roa
Signing time:             Wed 29 Sep 2021 02:54:18 +0000
ROA not before:           Wed 29 Sep 2021 02:54:18 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24164
IP address blocks:        49.158.64.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4658 (0x1232)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:54:18 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=2112C7A091F577F1C87304FB79D0971D4749A15E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:32:eb:81:93:f0:ef:12:6f:a2:1e:50:9a:13:
                    a6:2e:d0:24:44:a9:0c:97:c1:d8:71:16:16:03:3c:
                    00:7c:98:b4:73:5f:4a:fe:92:ab:ef:da:62:99:9b:
                    76:44:c3:5a:06:fa:26:db:ad:59:0d:a0:c7:7d:93:
                    dc:23:17:20:38:f2:73:51:69:45:10:18:53:56:cd:
                    5c:09:22:ce:a8:91:79:70:65:f9:ae:17:87:53:9a:
                    c0:eb:1d:52:32:ce:c5:0f:e5:0c:d2:68:ac:6e:f7:
                    72:65:df:f7:7e:3f:29:66:ae:a9:ff:00:5b:31:17:
                    96:7a:5d:b2:45:cd:6f:14:79:9f:eb:0e:ed:6c:db:
                    7d:f1:36:53:7b:1e:dd:f7:e7:7b:1b:04:d4:41:22:
                    7b:c4:83:72:f9:07:6b:28:39:e7:95:61:2d:05:ce:
                    89:0a:f1:b2:30:fc:59:18:23:b1:0e:6b:11:80:90:
                    95:0f:52:2c:37:c7:be:e7:ee:18:2d:5a:b0:c8:a1:
                    1a:12:7e:90:ff:0f:8b:64:70:8c:3d:07:07:94:c4:
                    5b:e6:44:e9:70:69:a9:a8:b7:ec:08:4d:2c:43:72:
                    6b:ba:c9:28:1e:03:c4:35:4f:0b:ed:03:7d:11:00:
                    87:52:49:47:a6:69:6d:cf:00:87:66:9c:64:de:3c:
                    1f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:12:C7:A0:91:F5:77:F1:C8:73:04:FB:79:D0:97:1D:47:49:A1:5E
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IRLHoJH1d_HIcwT7edCXHUdJoV4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         24:05:d8:a1:f7:7f:f7:d8:17:bb:10:b3:53:6c:2c:c6:3b:d5:
         fa:4f:fc:bb:4a:58:d9:aa:cf:be:ae:ff:cd:66:45:9f:08:6e:
         3b:bb:cb:e7:ab:b2:6c:de:ab:df:54:9a:b9:fd:bd:0d:95:b0:
         5b:2b:19:85:8d:44:15:11:87:1b:fa:f7:57:e3:2f:b7:df:f4:
         ac:09:ad:53:ea:67:7f:47:f0:e4:24:05:79:0b:61:d9:fd:26:
         ca:7f:c8:8d:3b:f8:a9:b2:62:4e:52:85:73:c0:58:6d:1c:99:
         cd:85:2e:fe:43:9f:dd:f4:b6:b1:5d:36:ba:39:9e:97:ee:47:
         37:07:af:69:ad:f1:4a:d1:3c:11:b2:82:30:a6:b2:34:c7:be:
         fc:fc:4c:cf:4c:85:c5:0c:1f:fe:8d:fb:72:88:f5:bb:ea:63:
         50:d5:e1:62:c9:29:1a:86:a3:d8:dc:5e:e7:b9:e3:21:2f:1f:
         ef:7a:ad:2b:71:e3:ba:63:f7:1f:8a:bf:34:19:c9:14:7b:5d:
         80:91:3d:c3:d3:4a:ac:4c:bc:32:09:f6:37:f4:04:67:8d:76:
         67:e5:b7:21:ec:c1:e2:eb:78:dd:7d:d0:5e:8a:f7:f4:26:61:
         1b:2a:0f:6b:b9:2b:f1:13:b5:e9:86:04:7a:ee:d3:ae:b4:0b:
         61:87:8d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----