Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/U26vu9q-KwGMnFkYddqHsnpE9Kg.roa
File:                     U26vu9q-KwGMnFkYddqHsnpE9Kg.roa (raw, json)
Hash identifier:          EpZ9ef8NXBhO7mZY7ym9KvWLsdHLoutNdTjmYZZBDTY=
Subject key identifier:   53:6E:AF:BB:DA:BE:2B:01:8C:9C:59:18:75:DA:87:B2:7A:44:F4:A8
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       123F
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/U26vu9q-KwGMnFkYddqHsnpE9Kg.roa
Signing time:             Wed 29 Sep 2021 02:54:22 +0000
ROA not before:           Wed 29 Sep 2021 02:54:22 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24164
IP address blocks:        114.198.164.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4671 (0x123f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:54:22 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=536EAFBBDABE2B018C9C591875DA87B27A44F4A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f9:56:8e:bd:7d:7e:8d:c7:ad:7c:93:8d:b2:
                    dd:cb:16:55:10:1e:02:42:35:26:3f:39:d3:66:ce:
                    33:d6:82:a5:58:94:56:cc:c6:51:6c:80:c4:e2:70:
                    14:71:3a:29:4d:1f:91:cb:d9:5e:18:b6:18:40:8e:
                    9e:cf:cb:dd:1c:4e:a6:32:78:98:28:6f:68:d7:a4:
                    57:dd:0c:18:81:ad:f4:bb:b2:99:c2:97:86:b8:24:
                    e9:5c:66:2e:ac:ed:46:c2:46:bc:35:2c:10:24:c4:
                    00:db:01:6e:11:b0:e3:8a:3b:eb:41:7f:3a:51:0f:
                    68:37:46:63:4d:39:ad:33:5b:02:ac:c3:71:85:d4:
                    3b:5e:63:0e:ac:7e:b0:00:5a:0e:8b:9b:65:2b:34:
                    dc:ce:df:2e:79:65:78:6b:80:f8:c3:22:20:1c:49:
                    a4:64:4d:29:eb:b8:8a:39:5a:6e:f6:eb:96:19:62:
                    fd:d6:c5:ce:a4:63:e9:e4:75:d0:52:5f:b9:60:54:
                    d4:11:04:25:c1:34:97:29:3b:bb:fd:60:65:e4:51:
                    d2:0c:0e:b6:b7:40:f5:91:dd:4c:de:57:6f:56:96:
                    98:b6:3b:ab:e7:98:cd:37:dd:49:9e:1e:da:2a:14:
                    05:dd:8f:5e:f9:04:c2:3e:46:0b:53:b7:7b:fc:48:
                    3c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:6E:AF:BB:DA:BE:2B:01:8C:9C:59:18:75:DA:87:B2:7A:44:F4:A8
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/U26vu9q-KwGMnFkYddqHsnpE9Kg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.198.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:f3:51:50:7a:2a:73:19:34:35:e5:cb:c9:b3:8c:4a:fe:f1:
         95:37:12:eb:e5:22:b3:9a:88:c0:29:61:30:8b:7f:2d:44:c7:
         f9:76:a8:37:6d:6a:17:ae:57:af:cf:15:33:92:98:23:68:f5:
         48:11:74:52:f1:b4:47:9a:5c:5d:ef:15:3e:48:51:d7:a3:cb:
         59:e1:e3:90:ce:2d:8f:cf:33:84:a5:3c:0a:19:8c:d0:a9:e8:
         62:60:a9:6f:a2:64:d7:37:22:0d:b9:58:11:97:b6:2d:30:5d:
         38:2e:d2:71:86:1c:5d:17:21:40:01:3e:95:2b:d8:4e:f8:2a:
         41:0d:3d:a4:a0:2b:2f:15:90:5a:65:f7:9c:3e:31:45:8c:30:
         95:b3:34:ca:c3:b4:47:7c:7b:23:f4:1f:05:59:ed:20:af:b4:
         f3:65:e8:a9:b3:f4:40:38:f6:15:23:83:70:f4:cb:75:29:28:
         a5:2f:6c:19:aa:a7:b7:3c:dc:98:5b:1c:ed:10:3a:13:84:79:
         11:e2:06:9c:0e:c3:e4:24:09:5c:88:6e:07:92:1a:df:94:01:
         69:df:37:83:76:c3:68:8e:be:76:e6:5c:66:5f:04:2c:d2:70:
         b8:9e:53:8c:92:c7:4a:66:fa:b7:20:f2:94:bc:a4:db:fe:b4:
         2c:f8:ed:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----