Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/L6b8SzL2vklzHFCgpvDtxZzP27o.roa
File:                     L6b8SzL2vklzHFCgpvDtxZzP27o.roa (raw, json)
Hash identifier:          gGAvwDsrxWDz/0jSY0Du1mUd2InVjAB1r53IZ278XZI=
Subject key identifier:   2F:A6:FC:4B:32:F6:BE:49:73:1C:50:A0:A6:F0:ED:C5:9C:CF:DB:BA
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1331
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/L6b8SzL2vklzHFCgpvDtxZzP27o.roa
Signing time:             Wed 29 Sep 2021 02:55:28 +0000
ROA not before:           Wed 29 Sep 2021 02:55:28 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24165
IP address blocks:        115.165.192.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4913 (0x1331)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:55:28 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=2FA6FC4B32F6BE49731C50A0A6F0EDC59CCFDBBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:57:59:91:04:0e:ab:64:9b:03:62:62:a4:f4:
                    8b:7e:da:5e:b2:73:5c:8a:bc:de:27:e9:59:78:19:
                    48:51:32:83:f1:a8:42:82:1d:d5:3a:a4:a7:46:6e:
                    85:37:ba:a0:d8:1e:41:9e:e7:e6:f3:17:a9:7c:10:
                    39:2b:10:e8:f9:9a:1c:bd:63:76:4e:95:a9:d2:35:
                    2e:86:37:8d:49:5a:74:d3:e5:7d:27:ad:14:b3:76:
                    a1:6e:ab:39:67:77:95:52:f3:af:ff:cc:23:09:3f:
                    9c:fc:3b:6a:7f:7a:bd:01:cf:4c:68:06:d9:c8:c8:
                    28:a1:46:fd:ad:4f:7c:3f:fc:c9:02:9f:52:b8:98:
                    c2:f0:b1:17:d8:0b:22:76:23:7f:cc:a5:f6:15:13:
                    ec:cc:6a:01:26:51:d9:ff:7a:69:ab:e7:82:c7:f7:
                    9f:67:a1:de:5c:7e:61:27:8b:60:48:f5:13:e2:d5:
                    d1:aa:97:99:0e:c0:56:80:73:9d:b6:c3:bc:30:ba:
                    59:87:d2:57:01:8d:61:59:3f:7c:ae:03:64:99:02:
                    88:26:7b:94:fb:21:41:50:2d:ba:45:37:de:49:2b:
                    92:d3:87:ff:92:c6:3d:aa:20:d3:4c:48:ff:de:7e:
                    7e:c8:c5:e4:06:9e:96:3c:1e:dd:8d:e7:82:11:0a:
                    66:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:A6:FC:4B:32:F6:BE:49:73:1C:50:A0:A6:F0:ED:C5:9C:CF:DB:BA
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/L6b8SzL2vklzHFCgpvDtxZzP27o.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.165.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         4f:6a:aa:15:42:be:3b:65:4b:6c:ce:e0:28:5a:40:0d:06:2b:
         f0:4e:81:cb:0f:da:02:ed:c8:b3:c0:0f:25:fe:34:49:a7:a0:
         15:60:5d:39:e5:33:21:30:01:73:5c:84:70:7f:85:07:4c:87:
         9d:86:e8:99:3c:24:38:4d:0d:ff:da:8b:ac:15:57:12:34:9e:
         13:0a:05:f0:d3:8e:cc:0f:51:ad:85:40:2a:04:7a:44:57:71:
         78:eb:da:8b:b0:95:e1:bc:96:22:48:44:ea:17:63:86:c9:4f:
         77:41:16:cf:9f:23:51:84:74:80:47:cb:b1:41:de:e2:61:4e:
         0f:1b:8a:dd:45:bc:6f:c3:03:12:18:89:ba:26:ee:d4:45:f1:
         a0:a1:16:85:df:4c:c2:9e:69:4a:e7:69:ee:be:06:bb:d4:b9:
         79:b9:40:3f:0d:f6:95:54:ad:5b:33:c7:ae:a5:fe:57:91:15:
         a6:16:6d:97:9c:32:42:24:32:a3:c3:06:b4:03:f7:d9:ae:ed:
         5e:c9:7e:08:48:cf:6e:95:0d:8c:39:a6:56:df:5c:3a:f5:3b:
         85:74:17:f4:4b:89:7f:3b:a5:35:4c:bd:b9:2c:03:ce:0e:44:
         5f:bc:0d:64:93:6b:87:55:37:df:3e:c8:8e:7c:bd:73:be:a5:
         b0:80:a3:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----