Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Lw9JO4I61mWl3t3TAkoORXXI1vM.roa
File:                     Lw9JO4I61mWl3t3TAkoORXXI1vM.roa (raw, json)
Hash identifier:          +shl4s4vTvwkLZYzVAtdiJx6LIhWE+tv/5LKDq0qDcs=
Subject key identifier:   2F:0F:49:3B:82:3A:D6:65:A5:DE:DD:D3:02:4A:0E:45:75:C8:D6:F3
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       12B4
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Lw9JO4I61mWl3t3TAkoORXXI1vM.roa
Signing time:             Wed 29 Sep 2021 02:54:52 +0000
ROA not before:           Wed 29 Sep 2021 02:54:52 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24164
IP address blocks:        49.159.152.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4788 (0x12b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:54:52 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=2F0F493B823AD665A5DEDDD3024A0E4575C8D6F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:51:c5:45:94:92:8d:cb:5e:06:f8:a5:95:d3:
                    81:e6:e1:05:0a:5a:8b:e2:7e:e6:77:c5:5a:5b:cb:
                    dd:e4:8a:94:57:a9:27:a2:d1:da:41:45:87:6c:23:
                    d1:80:7b:81:5b:b5:19:e3:a5:ce:d9:6d:9a:b8:c5:
                    28:dc:f4:ef:78:82:9a:9f:ce:ef:36:d7:01:a3:3e:
                    54:94:49:86:be:b3:22:fb:5f:07:ec:a6:58:50:d0:
                    1f:f1:a0:7a:e5:88:54:8f:54:b3:39:74:b2:41:d9:
                    64:ad:8c:aa:00:78:8c:5b:21:66:d6:9e:b3:a3:6b:
                    1e:86:84:98:42:16:d7:94:e0:f3:bc:3b:57:76:6c:
                    cc:4d:59:d5:14:2b:0b:54:0b:a3:21:3b:d4:68:fe:
                    7b:c3:87:8b:3c:c4:4f:bf:72:7c:ba:f5:06:7b:49:
                    93:51:46:ac:c3:b7:a2:69:28:54:70:c1:06:03:0a:
                    e0:17:65:fb:fb:65:d5:cb:4a:d7:9a:a7:fd:88:09:
                    04:ba:80:17:c3:f7:cb:da:82:2a:48:8a:1e:c9:ba:
                    a7:cd:46:97:a7:61:43:4a:a4:d0:c2:b2:73:98:de:
                    1e:34:cb:e0:81:6f:57:6a:db:c0:60:b8:1f:f1:ca:
                    b1:99:65:c6:d8:a6:f8:40:45:67:be:bd:20:91:a6:
                    48:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:0F:49:3B:82:3A:D6:65:A5:DE:DD:D3:02:4A:0E:45:75:C8:D6:F3
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Lw9JO4I61mWl3t3TAkoORXXI1vM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.159.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9f:0f:22:48:de:4e:d9:f7:a0:dd:44:57:57:60:26:8e:7a:56:
         79:34:a0:7a:5f:7c:d7:9f:8c:87:25:35:02:5a:81:96:f2:5e:
         2d:0d:a8:f0:f3:69:e7:7a:88:6b:d8:2d:39:42:9f:67:c3:57:
         d7:5d:f3:1f:1c:6e:0f:90:35:fa:47:9f:51:28:8b:3f:6b:28:
         9d:a4:0f:0a:c2:5f:c7:eb:97:ac:6b:9a:6c:91:b0:3a:cf:8d:
         be:75:f2:c7:29:3c:37:be:86:0b:44:72:14:a4:49:bf:5f:f3:
         14:a3:01:6c:bd:c9:ca:d5:79:4d:88:ef:e9:26:1d:e0:22:ef:
         51:84:70:af:c9:f0:3f:2f:56:a6:26:10:64:67:29:87:0d:8f:
         5a:57:24:99:c7:97:be:aa:c0:0f:89:79:51:ce:a2:98:b3:83:
         37:ac:9a:cb:3b:e1:7f:ff:df:a4:5a:8e:28:2e:1e:4e:0c:21:
         af:78:9f:c6:26:86:f1:19:af:10:66:2d:ab:3d:ba:35:6e:16:
         e4:89:30:01:79:2c:00:e0:b2:99:27:af:ed:1a:4c:93:f4:90:
         1b:a2:5b:04:be:ed:c1:38:18:67:f4:5e:85:be:ed:08:7f:c2:
         94:f4:f5:b8:49:f9:e3:39:ed:49:ed:5f:b9:db:48:f3:d2:c2:
         b0:81:75:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----