Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/VS32u7qVUshZ_fyEQa-eElaKdjE.roa
File:                     VS32u7qVUshZ_fyEQa-eElaKdjE.roa (raw, json)
Hash identifier:          ACAKkGWSiQl79auvZY1YepdG5jFxz4uvoA75jPKNRak=
Subject key identifier:   55:2D:F6:BB:BA:95:52:C8:59:FD:FC:84:41:AF:9E:12:56:8A:76:31
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       124E
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/VS32u7qVUshZ_fyEQa-eElaKdjE.roa
Signing time:             Wed 29 Sep 2021 02:54:26 +0000
ROA not before:           Wed 29 Sep 2021 02:54:26 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24164
IP address blocks:        115.165.240.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4686 (0x124e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:54:26 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=552DF6BBBA9552C859FDFC8441AF9E12568A7631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e0:8c:d5:65:20:e8:63:2d:d0:a1:75:01:86:
                    19:b1:64:55:94:94:82:f8:7d:94:8e:76:02:3b:50:
                    e9:a1:3c:41:df:c0:29:50:d0:22:25:6c:8c:e0:ea:
                    ff:37:51:84:0f:05:f5:4e:a4:04:30:7f:1f:fd:18:
                    f4:86:e5:4d:8c:ce:86:a3:77:84:63:88:e9:57:0f:
                    5a:31:91:7d:30:6f:c1:95:17:a5:1e:a0:3d:6d:b8:
                    2c:25:9e:03:d7:dd:b9:b2:33:f7:7f:df:7e:6f:4c:
                    5c:63:fc:58:4a:f6:36:74:57:e7:26:d7:5d:17:0b:
                    fc:2c:be:30:93:d2:b8:6e:93:c9:e5:22:be:b7:d2:
                    da:62:b5:5c:bb:d6:e1:bf:d4:48:f7:f1:3a:7a:60:
                    ab:3b:9c:aa:f5:16:83:f9:df:bd:b4:ed:59:31:8c:
                    0d:0e:f9:44:fc:40:7b:c9:0e:d4:06:24:7f:ff:4f:
                    8f:06:e5:4e:cd:f2:01:69:04:85:ad:f5:81:2e:de:
                    8e:2a:13:5a:f9:a4:7b:23:49:be:a5:98:a5:20:76:
                    22:96:6a:8f:de:c9:15:ac:fc:53:e6:11:5b:db:86:
                    85:f6:c8:0c:c5:21:44:a6:22:75:98:9e:1d:32:22:
                    21:34:6c:11:a5:66:6f:31:85:94:38:d9:b9:67:c5:
                    5f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:2D:F6:BB:BA:95:52:C8:59:FD:FC:84:41:AF:9E:12:56:8A:76:31
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/VS32u7qVUshZ_fyEQa-eElaKdjE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.165.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2a:db:43:85:52:01:27:d4:74:b8:e5:de:9c:3f:36:92:7b:63:
         06:0c:be:57:44:da:d6:e8:82:a2:3e:13:53:11:bb:9c:2e:39:
         b4:32:7e:96:aa:67:12:07:c2:50:4b:25:7a:90:d2:f1:19:fc:
         b5:b5:fd:59:02:a9:5b:b3:74:7e:47:cb:ad:2c:34:1f:fc:98:
         76:c4:0a:4e:82:08:0a:d5:35:46:aa:63:fd:2a:d4:f1:cf:67:
         da:4f:73:85:cd:a8:59:26:c0:9b:64:20:c8:73:21:40:82:bf:
         ed:71:c2:48:7a:61:2f:2a:e8:52:1c:94:90:5e:21:14:c4:0a:
         d9:1f:28:18:d3:d1:05:93:d7:49:ad:fb:19:92:6c:fb:9b:58:
         e8:18:fb:d5:66:a4:0f:01:f5:9c:ee:2d:6a:80:75:ca:87:30:
         18:0c:6f:f6:e0:bf:07:9b:87:9c:c6:ba:8b:6f:91:d8:29:a7:
         3d:d8:fb:6d:9e:63:12:c6:53:85:06:70:2f:4a:0c:b2:85:23:
         85:4e:b9:f4:ff:d0:a7:c4:c6:6e:6e:f0:89:10:15:e6:f9:9b:
         ac:f9:b0:a2:de:8a:0f:d9:0e:87:2c:0a:6a:46:45:9a:aa:a0:
         8f:ad:bd:33:99:57:eb:d5:fa:26:c7:3b:b1:b2:ac:3b:da:0f:
         76:32:63:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----