Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IokiU9Zd-qRB-YyI0f5QL15SSjM.roa
File:                     IokiU9Zd-qRB-YyI0f5QL15SSjM.roa (raw, json)
Hash identifier:          m+vdruUjO/7UDHy0AiGcHByJ4IcX+pXtBzWESu/wD8s=
Subject key identifier:   22:89:22:53:D6:5D:FA:A4:41:F9:8C:88:D1:FE:50:2F:5E:52:4A:33
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       123D
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IokiU9Zd-qRB-YyI0f5QL15SSjM.roa
Signing time:             Wed 29 Sep 2021 02:54:21 +0000
ROA not before:           Wed 29 Sep 2021 02:54:21 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24164
IP address blocks:        114.198.162.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4669 (0x123d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:54:21 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=22892253D65DFAA441F98C88D1FE502F5E524A33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:59:9d:a3:fa:2d:d1:87:fc:47:50:ee:9c:71:
                    d3:c6:87:ea:a1:f5:f5:f1:35:ca:8e:39:f6:e9:05:
                    b6:1f:90:fb:9c:82:aa:47:46:86:14:44:35:e3:90:
                    3a:1a:3c:b8:ea:87:b9:3d:84:0f:2e:17:11:b1:d7:
                    40:55:b6:83:43:7f:df:3f:b4:36:04:8f:d6:4a:b6:
                    c4:2f:d5:4f:33:d1:05:55:eb:46:99:27:d9:4c:53:
                    66:be:12:a3:a5:c7:0c:ea:9e:75:c0:98:5b:9c:3f:
                    5f:c8:41:a1:af:89:c4:e5:85:f6:34:05:b3:d9:51:
                    66:a8:85:19:a5:d2:a6:34:00:63:37:3e:77:31:93:
                    f9:b5:6b:0f:d7:a5:53:40:32:9c:3c:3d:2e:df:c4:
                    94:ba:be:ff:9b:7d:89:52:19:fe:20:62:78:8e:b1:
                    96:0f:d9:d6:17:0d:c8:95:9c:8f:93:12:f0:bc:e8:
                    bd:d5:b0:fd:99:2c:f3:2a:43:01:c7:61:ab:90:a3:
                    73:72:ff:3c:f8:68:0a:62:41:24:f7:e4:0a:86:cc:
                    f7:bb:6e:2f:0c:57:fc:d0:1f:ad:6f:74:94:8e:81:
                    51:7c:ad:72:50:48:6c:22:77:20:1a:06:2e:09:d2:
                    5b:07:bc:ea:be:49:fb:ad:bf:06:b9:7e:bd:96:64:
                    3b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:89:22:53:D6:5D:FA:A4:41:F9:8C:88:D1:FE:50:2F:5E:52:4A:33
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IokiU9Zd-qRB-YyI0f5QL15SSjM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.198.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:38:9a:1b:80:94:62:ad:8d:51:68:66:fb:49:a8:d2:1e:f6:
         7a:87:1b:8b:07:c1:7c:eb:00:47:58:64:65:12:00:4a:85:e8:
         ce:f9:ee:9b:d6:20:27:f3:fc:d3:b1:8f:0c:89:de:09:4c:59:
         bf:b5:44:10:85:60:fd:36:d0:4f:77:d4:f9:37:f0:d3:fe:d5:
         e2:63:99:eb:8a:ce:ca:f8:7e:03:2a:42:38:2d:2f:d5:91:97:
         32:da:11:04:91:45:5d:36:9e:ee:bf:c0:ce:d5:02:f6:81:54:
         4c:be:de:35:3c:a8:9a:8c:b5:e5:a8:b9:c7:58:e2:ee:ad:1f:
         d8:1e:ba:6e:6c:8f:b8:88:00:63:f8:7b:63:6e:8c:28:57:e9:
         d9:6f:d1:70:88:ca:06:26:d7:13:29:db:b0:4d:b5:1d:f5:18:
         31:ba:ac:1f:17:2d:5b:51:96:d6:c5:03:b5:f6:38:59:74:ca:
         3a:90:6d:36:a0:a9:d1:df:82:fb:71:75:34:d8:d8:67:fe:ae:
         06:e4:13:ae:6a:f0:68:2b:bc:ed:aa:c2:fe:6c:85:8d:95:81:
         5a:e7:eb:6f:84:31:69:52:3f:42:93:9a:5e:15:8d:76:35:62:
         53:95:ea:da:7b:86:da:86:ed:16:b2:83:e2:3b:d3:99:5d:23:
         93:7a:1b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----