Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Pt7rF7-y-6EJ9ATBxHWrfNIfDjY.roa
File:                     Pt7rF7-y-6EJ9ATBxHWrfNIfDjY.roa (raw, json)
Hash identifier:          FcaFA4SQ/Qq5/cuwXUP8q0YJSNf7ag642ol9DqYdgwU=
Subject key identifier:   3E:DE:EB:17:BF:B2:FB:A1:09:F4:04:C1:C4:75:AB:7C:D2:1F:0E:36
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0D39
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Pt7rF7-y-6EJ9ATBxHWrfNIfDjY.roa
Signing time:             Thu 14 Jan 2021 07:26:02 +0000
ROA not before:           Thu 14 Jan 2021 07:26:02 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24165
IP address blocks:        124.6.12.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3385 (0xd39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Jan 14 07:26:02 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=3EDEEB17BFB2FBA109F404C1C475AB7CD21F0E36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:df:69:b8:6f:06:2d:79:83:8c:93:cc:86:6e:
                    8f:f9:6c:38:20:6b:6c:5e:48:1f:9e:2b:d8:46:92:
                    de:6f:4f:73:e8:7b:1c:a4:00:03:1f:76:1e:7a:ac:
                    9c:c7:4e:f1:42:8a:d7:98:48:dd:63:59:f4:d2:8c:
                    76:a0:c8:81:57:bd:4a:57:1e:13:ac:5a:64:ef:c8:
                    44:1f:87:f7:03:7c:b3:ba:96:a3:cd:6d:62:5c:b6:
                    79:86:89:8b:37:dc:b1:dc:5e:70:1b:82:a7:a5:90:
                    13:4b:e2:97:8b:1e:29:37:19:76:7c:3a:bc:10:ef:
                    a5:eb:35:d5:a9:fd:72:17:b3:60:12:44:9e:fa:40:
                    f5:ef:96:a9:73:4f:5c:7d:c6:e3:26:2f:38:1d:d2:
                    53:b7:12:22:a4:94:c3:b7:3a:47:c8:8b:fe:73:81:
                    bf:43:80:eb:3c:47:90:13:09:64:4b:07:5c:fd:c5:
                    c7:35:40:a2:54:73:4f:52:46:14:8f:ee:10:84:69:
                    a1:04:af:40:f5:6a:74:ee:b1:7c:e6:0e:93:ed:08:
                    82:6a:df:4e:ed:3b:20:72:b6:1e:9f:3e:d6:79:50:
                    1e:9e:48:e0:35:3f:d3:8c:da:43:2f:12:3c:96:1f:
                    8b:0a:a5:b4:4c:1a:fb:60:7d:41:48:ad:eb:3d:d2:
                    b4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:DE:EB:17:BF:B2:FB:A1:09:F4:04:C1:C4:75:AB:7C:D2:1F:0E:36
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Pt7rF7-y-6EJ9ATBxHWrfNIfDjY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.6.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:42:c2:3b:52:62:ab:9e:68:1a:37:79:d9:9c:a0:b5:06:36:
         56:fe:67:00:8b:46:f5:44:5e:74:76:d8:b8:56:ec:7b:53:68:
         04:c2:b9:4e:ba:01:34:48:99:fe:f8:19:15:b0:ff:41:d1:82:
         2c:9c:da:26:db:7d:05:60:4a:7e:61:a3:c7:13:1c:72:52:9e:
         4f:e2:6e:d0:a9:eb:f6:9b:19:96:48:10:e4:4e:4b:89:d4:3f:
         91:08:b9:88:77:59:52:3d:78:b2:42:3e:4d:5a:b4:a6:d6:99:
         09:22:cf:d6:15:69:08:9c:31:fd:8f:b8:ef:48:c4:2f:a6:7a:
         6c:e3:d3:1e:8a:6e:d5:35:0a:10:c8:80:32:30:bf:7b:84:ae:
         8a:01:6a:fc:71:b2:70:88:ae:7e:b2:94:77:e7:54:50:3a:63:
         99:6a:5a:9b:ea:92:0a:29:47:15:d3:b3:ce:be:1d:39:ce:e9:
         a9:fd:08:df:62:59:b5:86:a0:b9:f9:52:b4:80:c6:e5:7a:7f:
         c8:4b:0b:f2:3a:bd:91:a8:a7:45:dd:07:c2:37:dd:b7:01:09:
         54:37:ca:08:81:3c:05:e2:95:aa:36:92:ea:34:4a:4b:0d:66:
         4f:05:15:64:c8:eb:cf:33:4c:01:63:95:b7:3f:82:54:59:0d:
         e7:12:4f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----