Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/V0ZX_5pkXaFt7J37Yen32_es_0o.roa
File:                     V0ZX_5pkXaFt7J37Yen32_es_0o.roa (raw, json)
Hash identifier:          sJD5I4sGZAZA9NAcTLvBNAJZrdOEhjkyGVsOQ+jxptM=
Subject key identifier:   57:46:57:FF:9A:64:5D:A1:6D:EC:9D:FB:61:E9:F7:DB:F7:AC:FF:4A
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       130A
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/V0ZX_5pkXaFt7J37Yen32_es_0o.roa
Signing time:             Wed 29 Sep 2021 02:55:17 +0000
ROA not before:           Wed 29 Sep 2021 02:55:17 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24164
IP address blocks:        211.76.46.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4874 (0x130a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:55:17 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=574657FF9A645DA16DEC9DFB61E9F7DBF7ACFF4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:31:30:80:cd:34:46:7b:c3:e3:50:1e:d4:bb:
                    eb:ed:c8:77:88:8a:c3:83:00:36:66:97:c9:0e:47:
                    4b:da:ff:f1:f5:42:8f:12:fa:e2:7c:6d:db:3b:48:
                    41:eb:cf:02:ca:cb:81:09:b6:3b:1e:2d:6f:fd:7a:
                    58:80:90:72:03:bf:aa:a4:39:99:b0:57:58:59:22:
                    d7:56:68:10:20:af:db:33:4c:95:b4:f4:4e:99:0e:
                    02:e1:4f:20:fb:18:23:06:7e:05:85:d4:df:43:79:
                    bd:65:ea:79:1e:eb:1d:53:ac:e4:58:d1:23:9e:31:
                    39:d9:92:42:16:2f:fe:b3:78:2f:2f:fe:10:3f:25:
                    36:ac:df:59:c2:36:aa:69:ce:a4:c2:0c:5a:ab:95:
                    b8:ce:89:d3:bf:93:7b:b9:e8:0e:18:cb:85:73:2e:
                    dd:0c:83:34:e3:2f:30:85:ff:e5:1b:aa:0a:91:f5:
                    af:b3:29:e6:96:bb:84:90:55:07:f3:01:54:b8:68:
                    03:3a:14:46:42:0d:9e:dc:8e:32:3e:9b:84:63:59:
                    f9:00:de:7f:4c:da:06:d9:88:c6:3d:9d:31:87:c1:
                    0c:94:70:54:8d:87:cd:f9:8e:53:5e:49:c2:b5:75:
                    f2:14:f2:1c:fe:1f:25:03:66:46:08:6b:06:10:df:
                    39:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:46:57:FF:9A:64:5D:A1:6D:EC:9D:FB:61:E9:F7:DB:F7:AC:FF:4A
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/V0ZX_5pkXaFt7J37Yen32_es_0o.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         70:28:1b:75:aa:0d:6b:29:bb:40:a4:82:af:34:fb:c9:d2:24:
         29:c3:ad:39:81:78:a9:38:e9:18:56:02:f8:88:f6:bf:b0:a1:
         69:5b:93:79:b6:0f:79:2a:27:e9:14:7a:b5:87:9f:e7:cc:7b:
         96:50:6f:ee:6a:6c:86:72:36:7d:16:26:47:ff:34:85:15:65:
         27:79:3a:7d:54:e7:82:6f:b7:c0:31:b3:07:43:d6:2b:cd:5a:
         04:08:6f:dd:a1:8a:c7:83:4d:f8:9f:49:cf:4a:53:71:58:ff:
         1c:87:98:09:68:e8:c8:53:29:78:13:e7:01:19:0e:42:ad:95:
         19:d6:e3:9d:79:37:d4:b1:9c:eb:76:41:e7:8e:40:b4:7b:d6:
         cb:e1:85:13:03:70:40:bb:1f:e5:bd:90:10:03:46:64:d6:97:
         c6:d5:a5:48:27:3c:2b:ca:b8:a1:82:73:55:3e:9a:b4:e9:2f:
         80:7f:7e:67:e3:c0:ac:57:5a:17:af:f3:ca:18:7c:63:b7:71:
         d2:d6:d0:e1:25:2f:27:65:e8:98:8c:14:68:49:b5:19:ed:bb:
         de:8e:93:c3:4a:2b:73:4f:46:24:9f:c6:b2:50:86:34:b0:59:
         06:cd:e8:4c:1e:c4:8e:f9:08:25:f3:6c:39:a0:a8:7c:96:a2:
         0d:e0:f0:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----