Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/YgaP4cZgF_iJTKZMJXWeW2hh-y4.roa
File:                     YgaP4cZgF_iJTKZMJXWeW2hh-y4.roa (raw, json)
Hash identifier:          HS4LXIKyIFbXga4/jkA+SajBSQCQQMm7afEnotJOu5Y=
Subject key identifier:   62:06:8F:E1:C6:60:17:F8:89:4C:A6:4C:25:75:9E:5B:68:61:FB:2E
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       14B7
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/YgaP4cZgF_iJTKZMJXWeW2hh-y4.roa
Signing time:             Wed 24 Aug 2022 04:01:59 +0000
ROA not before:           Wed 24 Aug 2022 04:01:59 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24164
IP address blocks:        2407:4b00:fd01::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5303 (0x14b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Aug 24 04:01:59 2022 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=62068FE1C66017F8894CA64C25759E5B6861FB2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:19:d3:20:c5:51:79:1e:9f:51:c3:4e:c3:62:
                    9b:80:00:2e:a6:27:c2:1e:42:20:d6:17:4e:85:2d:
                    89:31:74:c2:08:b1:f4:6d:68:28:89:a7:6e:72:a4:
                    12:63:61:b4:f0:24:c9:a1:91:f7:d4:12:4e:93:f7:
                    86:6d:4a:94:0e:62:89:fa:ca:15:5b:f3:71:7f:0a:
                    dc:29:6f:ad:0f:3a:dd:eb:42:a9:44:85:d3:45:7f:
                    46:e5:09:94:af:52:ad:c0:1f:bd:47:56:28:33:46:
                    5a:25:52:86:6b:48:d7:34:ad:9e:7e:c4:c4:0f:f7:
                    03:6a:05:ce:e8:10:52:41:bb:9a:b2:53:0e:0f:a9:
                    ec:09:fd:de:b4:85:9d:a8:d9:d6:97:e3:f5:d1:60:
                    9e:70:0c:89:8c:9c:23:ec:b2:15:50:78:12:ee:e1:
                    e1:52:7c:a0:1e:59:74:e8:75:fa:66:cd:94:cd:60:
                    21:c7:08:ff:41:99:f3:52:51:f9:6f:ee:88:57:97:
                    e1:e9:63:ec:65:21:db:a3:0c:dd:cf:92:c2:43:32:
                    77:43:93:c1:c0:eb:de:19:c8:40:b4:fb:ef:d8:2a:
                    1c:22:b0:67:17:e6:1b:38:84:81:8d:16:80:6b:5e:
                    fb:86:46:6f:86:8f:3d:35:fc:e4:75:c8:8f:2a:92:
                    be:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:06:8F:E1:C6:60:17:F8:89:4C:A6:4C:25:75:9E:5B:68:61:FB:2E
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/YgaP4cZgF_iJTKZMJXWeW2hh-y4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:4b00:fd01::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:fb:c6:47:61:e0:f8:76:cc:eb:a7:86:f2:58:df:c2:a2:53:
         8c:f4:01:35:2e:e6:f8:98:20:7e:7e:6b:dd:fd:63:b1:bd:a0:
         f3:5b:83:e9:12:9d:c8:d7:90:e7:01:00:0f:b4:9c:1b:ba:94:
         7f:3b:9d:49:75:fc:88:53:2d:83:39:78:68:6d:3d:35:99:15:
         d1:39:77:29:c3:d2:a8:66:0f:0a:0e:13:4b:5b:82:59:6c:37:
         54:72:23:22:ab:89:e6:9e:38:4c:d2:37:7c:05:e6:cf:02:34:
         a0:a5:83:69:0e:e7:a8:bb:8d:b3:48:8b:a9:30:a1:36:f4:88:
         bb:56:66:b4:0f:13:e8:d8:7b:2b:0b:a8:7e:9e:02:0e:58:f8:
         e2:69:dd:ce:56:36:42:74:30:ef:dd:4d:45:96:63:6c:f0:74:
         73:38:f7:69:24:59:fe:41:af:fc:50:d0:f3:08:2e:ae:88:bd:
         1b:a1:38:5c:23:99:4d:54:9a:8c:82:aa:cd:17:12:cc:c9:8c:
         4b:dc:fe:f4:fe:ce:a3:32:eb:24:16:7e:02:8d:ad:31:7c:f8:
         b8:e4:24:df:aa:57:34:1f:4a:14:05:40:ea:1d:2e:de:55:36:
         25:96:13:db:37:f6:3c:5e:8d:a6:eb:bb:8e:56:64:c4:d2:24:
         1f:9e:72:35
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICFLcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjA4MjQw
NDAxNTlaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDYyMDY4RkUxQzY2MDE3
Rjg4OTRDQTY0QzI1NzU5RTVCNjg2MUZCMkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDiGdMgxVF5Hp9Rw07DYpuAAC6mJ8IeQiDWF06FLYkxdMIIsfRt
aCiJp25ypBJjYbTwJMmhkffUEk6T94ZtSpQOYon6yhVb83F/Ctwpb60POt3rQqlE
hdNFf0blCZSvUq3AH71HVigzRlolUoZrSNc0rZ5+xMQP9wNqBc7oEFJBu5qyUw4P
qewJ/d60hZ2o2daX4/XRYJ5wDImMnCPsshVQeBLu4eFSfKAeWXTodfpmzZTNYCHH
CP9BmfNSUflv7ohXl+HpY+xlIdujDN3PksJDMndDk8HA694ZyEC0++/YKhwisGcX
5hs4hIGNFoBrXvuGRm+Gjz01/OR1yI8qkr5rAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUYgaP4cZgF/iJTKZMJXWeW2hh+y4wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL1lnYVA0Y1pnRl9pSlRLWk1K
WFdlVzJoaC15NC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk
B0sA/QEwDQYJKoZIhvcNAQELBQADggEBAAT7xkdh4Ph2zOunhvJY38KiU4z0ATUu
5viYIH5+a939Y7G9oPNbg+kSncjXkOcBAA+0nBu6lH87nUl1/IhTLYM5eGhtPTWZ
FdE5dynD0qhmDwoOE0tbgllsN1RyIyKrieaeOEzSN3wF5s8CNKClg2kO56i7jbNI
i6kwoTb0iLtWZrQPE+jYeysLqH6eAg5Y+OJp3c5WNkJ0MO/dTUWWY2zwdHM492kk
Wf5Br/xQ0PMILq6IvRuhOFwjmU1UmoyCqs0XEszJjEvc/vT+zqMy6yQWfgKNrTF8
+LjkJN+qVzQfShQFQOodLt5VNiWWE9s39jxejabru45WZMTSJB+ecjU=
-----END CERTIFICATE-----