Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/SCYj1sX3jVP6z9vEbI-4neTJdsg.roa
File:                     SCYj1sX3jVP6z9vEbI-4neTJdsg.roa (raw, json)
Hash identifier:          L+vyeKms5pQpRTg7jMduDGTuePJaGZUwooyX/SbSH4c=
Subject key identifier:   48:26:23:D6:C5:F7:8D:53:FA:CF:DB:C4:6C:8F:B8:9D:E4:C9:76:C8
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1296
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/SCYj1sX3jVP6z9vEbI-4neTJdsg.roa
Signing time:             Wed 29 Sep 2021 02:54:45 +0000
ROA not before:           Wed 29 Sep 2021 02:54:45 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24163
IP address blocks:        49.158.152.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4758 (0x1296)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:54:45 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=482623D6C5F78D53FACFDBC46C8FB89DE4C976C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f5:76:14:98:5a:20:00:40:18:08:9c:4d:a9:
                    bc:ef:7a:49:fa:31:65:f2:72:0e:2a:89:81:f7:6b:
                    ac:9e:50:a5:7b:f9:da:8e:58:82:a8:64:78:97:47:
                    79:da:a9:9a:c0:59:39:6c:16:9b:b8:27:22:8e:a7:
                    20:e6:bf:88:dd:e7:dc:fa:d2:8f:33:9a:1b:3e:be:
                    ab:75:4c:da:10:6a:97:31:d2:1b:85:5f:d4:07:0e:
                    18:94:3d:82:4d:59:77:30:52:17:e5:18:a3:cf:af:
                    50:95:be:7d:fd:68:88:f0:c6:e0:86:38:86:17:02:
                    bf:14:6e:e4:e9:d8:fa:2d:7c:dd:d7:7b:35:d9:f3:
                    fc:18:07:84:77:49:19:00:a8:ba:b8:22:2b:b7:44:
                    85:eb:7b:b8:0e:7d:19:6e:6c:16:2b:41:a4:12:a8:
                    17:98:0b:66:e3:37:0d:01:77:77:28:20:00:e9:8d:
                    b4:77:9c:64:db:fe:ce:18:60:b7:64:76:0c:45:6d:
                    01:30:f7:3e:b1:e6:f9:34:26:a2:1e:3c:96:a0:06:
                    42:e4:29:b3:da:05:83:d7:1d:8d:8c:c0:52:9d:0d:
                    e2:ea:84:45:01:5f:75:0e:cb:52:46:39:4c:48:0b:
                    76:ef:37:62:85:5c:bd:4d:2a:03:bf:09:f6:ea:93:
                    a6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:26:23:D6:C5:F7:8D:53:FA:CF:DB:C4:6C:8F:B8:9D:E4:C9:76:C8
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/SCYj1sX3jVP6z9vEbI-4neTJdsg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:ae:2a:0b:49:d2:e7:e8:7b:48:a4:53:a1:f7:e3:ae:95:6e:
         a5:16:8a:8c:71:75:40:14:d6:60:7b:f8:cd:7b:c0:86:ec:ad:
         51:d0:10:c3:13:00:a5:95:4f:d0:5b:33:7a:73:89:7d:7b:69:
         d8:73:c6:3a:a0:29:ff:ab:e3:f8:ac:00:fe:88:26:28:fb:ce:
         e9:4c:85:0d:27:75:81:6b:4e:2f:25:ec:98:f1:05:e7:48:c9:
         ae:9c:f0:58:f6:08:94:74:89:77:c5:05:14:4d:3f:5e:8b:e8:
         94:ba:28:68:ef:c3:c0:be:a4:99:92:ee:b8:1d:f8:e3:dd:0f:
         b0:d2:11:2f:04:a5:96:50:70:f7:d8:e3:20:9c:3e:c1:62:2e:
         a9:f6:98:7a:b5:42:a2:93:74:50:a9:6b:3f:47:79:24:43:bf:
         62:2e:74:27:dd:e1:35:8b:37:99:cc:0f:3b:a1:81:08:55:6f:
         cc:e3:73:d5:5f:e6:02:10:1b:83:f6:10:10:45:60:1c:79:4f:
         3f:48:a5:c9:4c:60:22:ac:92:9c:9f:51:cb:a1:33:7a:c8:cb:
         d0:21:91:2d:f2:22:f1:59:bb:a3:04:39:29:de:d8:2c:12:e5:
         ae:a8:da:1c:4d:89:ac:a4:2c:9f:2c:63:2a:29:86:4f:e9:04:
         93:77:24:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----