Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/RNsKeNs15dwmuwCcqQmdmkg6oPw.roa
File:                     RNsKeNs15dwmuwCcqQmdmkg6oPw.roa (raw, json)
Hash identifier:          l498L7fO1LwvkjCS9XliSkjqKfCPHw0d/8ZbEKd8E0M=
Subject key identifier:   44:DB:0A:78:DB:35:E5:DC:26:BB:00:9C:A9:09:9D:9A:48:3A:A0:FC
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1287
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/RNsKeNs15dwmuwCcqQmdmkg6oPw.roa
Signing time:             Wed 29 Sep 2021 02:54:40 +0000
ROA not before:           Wed 29 Sep 2021 02:54:40 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24164
IP address blocks:        49.158.100.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4743 (0x1287)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:54:40 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=44DB0A78DB35E5DC26BB009CA9099D9A483AA0FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:79:db:12:86:8e:d2:75:d4:1e:66:8c:fb:8b:
                    55:d6:28:65:bd:a8:99:36:df:c2:d3:ba:60:77:67:
                    d4:af:ee:81:a3:42:80:08:fe:78:aa:e2:e1:a8:5d:
                    f2:94:9e:0c:f9:e0:ae:a6:47:b9:69:5d:71:bc:da:
                    6a:a1:33:d6:e3:f9:b0:de:91:6a:08:24:41:cf:04:
                    e6:4e:56:07:4c:a1:3f:ac:18:62:2e:72:23:c4:2c:
                    12:1b:80:a1:b9:22:92:58:db:ba:4c:52:13:bb:d1:
                    ec:50:1e:7d:37:e3:ab:68:f9:51:2c:b4:b6:2e:9f:
                    6a:4c:9c:5b:31:00:ad:60:fa:37:0c:86:72:b3:bb:
                    d0:a4:0d:9e:b4:04:3a:37:9a:b4:9d:fd:69:c2:86:
                    72:75:a9:5d:e7:48:ad:2c:b7:a7:7f:ae:45:56:7a:
                    2c:b1:b7:bf:3e:7c:4f:5c:44:9e:20:11:be:1f:21:
                    c6:11:dc:ef:12:6d:4e:c1:4a:93:f2:5e:75:20:cd:
                    b6:4f:cd:39:39:a5:13:32:3e:10:d3:b3:cf:ac:46:
                    86:be:c0:44:d5:ab:18:8f:ba:00:66:c1:50:6b:39:
                    29:89:4f:a6:0c:c6:e5:6b:0f:5a:d4:aa:ee:13:50:
                    45:d6:6f:33:08:fa:4e:bb:e0:2a:08:92:48:43:03:
                    22:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:DB:0A:78:DB:35:E5:DC:26:BB:00:9C:A9:09:9D:9A:48:3A:A0:FC
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/RNsKeNs15dwmuwCcqQmdmkg6oPw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:1f:50:a7:7d:99:49:b5:a6:18:18:ef:45:09:7a:92:a7:82:
         c7:bc:bd:e1:bb:69:00:0e:81:43:e7:9d:19:3f:7b:36:79:b7:
         29:14:b8:74:a2:28:fe:8b:3b:bb:b9:f1:d5:07:df:83:6d:d7:
         6c:97:7b:02:34:ae:9d:12:8c:43:85:9e:f9:d2:5d:7b:d0:88:
         f0:71:88:00:6b:68:cc:a0:82:11:88:1b:e5:f9:ff:ad:b1:5a:
         00:6f:5c:1d:af:ac:04:db:e5:4a:0e:30:c4:b5:75:6f:32:cf:
         73:7e:f6:cf:e4:8f:eb:18:82:e3:61:fb:45:5b:da:a3:b0:3a:
         17:89:66:42:67:d8:ef:25:4f:67:71:3e:11:5a:59:9c:12:ac:
         3e:18:15:5e:75:34:ef:b5:fc:20:de:b6:bc:02:c1:db:03:bd:
         cf:97:5b:c6:b5:ce:89:ab:19:17:dd:e4:2a:37:fc:6d:7b:a3:
         f7:d3:0b:94:f0:be:3b:27:35:3e:8b:2b:66:28:84:71:a5:b2:
         0a:c8:7e:f2:e5:f4:72:3c:76:30:c8:36:02:6d:bb:35:c1:6f:
         8a:8e:4d:37:39:b7:b7:3b:88:2a:19:5c:04:01:ac:9f:5c:22:
         16:f4:7c:95:ff:52:17:be:16:84:75:83:71:5c:05:71:26:7a:
         67:05:94:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----