Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IUoJZEMXyvReHdJpwVJ6EaPVVkA.roa
File:                     IUoJZEMXyvReHdJpwVJ6EaPVVkA.roa (raw, json)
Hash identifier:          wXzuy3WLAdNmp6eYGinTYYMglUGvSwrn/eKS0Ph+IaM=
Subject key identifier:   21:4A:09:64:43:17:CA:F4:5E:1D:D2:69:C1:52:7A:11:A3:D5:56:40
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1339
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IUoJZEMXyvReHdJpwVJ6EaPVVkA.roa
Signing time:             Wed 29 Sep 2021 02:55:30 +0000
ROA not before:           Wed 29 Sep 2021 02:55:30 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     4662
IP address blocks:        122.254.0.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4921 (0x1339)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:55:30 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=214A09644317CAF45E1DD269C1527A11A3D55640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:cb:61:0f:f1:aa:f7:22:f1:85:91:42:85:a5:
                    54:c8:59:96:88:03:92:da:15:ed:42:63:cc:27:6f:
                    bf:ec:38:68:a7:c8:87:b9:65:18:ee:7e:3d:1b:c2:
                    4c:30:f0:f0:10:d6:db:7b:54:f3:a1:52:80:e4:26:
                    a8:e5:b4:2e:9b:1d:c9:d9:c6:d5:a6:6d:7e:f9:04:
                    d8:f2:cc:01:13:78:72:37:d9:0b:77:7e:c2:1c:0e:
                    21:d2:5f:33:c8:8c:73:73:97:5f:75:5c:3c:5e:fe:
                    fc:fd:34:2d:a3:58:de:0d:4e:ea:a2:2d:63:1d:a0:
                    17:47:26:f3:91:0a:64:21:e2:01:95:16:1c:2e:18:
                    1d:33:19:75:1e:c5:f1:d6:d7:6b:1f:5e:eb:d1:35:
                    a7:7a:a7:15:0a:78:59:c2:e0:a1:ad:31:1e:4a:33:
                    0b:c9:69:95:b3:31:78:1b:b1:14:f8:24:4c:c5:68:
                    30:85:6c:88:21:21:4f:33:ab:0c:aa:89:8a:d4:78:
                    87:6b:fe:30:ba:83:67:80:c1:89:6c:59:8d:71:c0:
                    a2:5a:2a:b2:d7:53:83:73:27:09:a0:dd:df:4e:4a:
                    4f:85:5b:a2:b8:32:00:16:6a:b1:fd:d0:62:6e:f7:
                    af:f1:fa:82:ef:b0:16:4d:95:a4:e6:29:11:df:fc:
                    4c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:4A:09:64:43:17:CA:F4:5E:1D:D2:69:C1:52:7A:11:A3:D5:56:40
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IUoJZEMXyvReHdJpwVJ6EaPVVkA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.254.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         44:01:dd:fc:4a:b4:e5:88:d3:9c:46:93:f4:c8:e5:89:7a:44:
         8c:2e:33:df:af:2d:0c:3d:83:a1:5e:64:cd:0e:ea:7a:ff:74:
         32:02:28:39:36:14:70:e0:03:78:fe:0c:5e:ae:82:16:de:1b:
         3c:51:00:e1:1d:df:f7:0f:a7:74:a3:4b:fc:10:40:85:32:c2:
         7a:7c:0c:fe:59:10:0f:2c:c8:5c:f4:01:bf:6a:38:e0:bf:8f:
         8c:d2:9a:b9:57:a1:be:52:2c:63:08:e5:be:e0:85:0b:d5:bc:
         bd:65:c1:84:92:26:a1:c0:1e:5a:23:21:21:a9:3b:39:8a:6c:
         5a:cf:88:b7:5b:9c:af:fd:98:96:50:1f:ae:48:aa:2d:c7:03:
         ea:1c:37:cf:51:8a:2e:d5:78:93:0d:1c:21:3e:e5:47:d8:83:
         fa:37:26:9e:f1:c5:8c:b1:e2:2f:e0:ca:29:4d:6c:21:68:6b:
         55:16:9b:39:e2:43:00:ce:cb:31:1a:73:4f:a8:19:31:2e:b1:
         37:19:3f:46:9a:98:2e:95:85:a8:d7:18:e8:94:18:47:29:cf:
         6c:f0:2a:85:b1:1a:d3:94:2a:22:07:ec:41:bf:54:68:a4:88:
         3f:9f:9f:1a:5f:2b:c6:eb:4d:94:09:ca:6f:1a:f9:1d:95:4a:
         20:7a:7f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----