Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_3ZYWAVIRI13XWgMQZtqZy0vB-Q.roa
File:                     _3ZYWAVIRI13XWgMQZtqZy0vB-Q.roa (raw, json)
Hash identifier:          5vJIVHKfSBvo8/RrngRXesWWhfldeejZHEY5JMa3i3o=
Subject key identifier:   FF:76:58:58:05:48:44:8D:77:5D:68:0C:41:9B:6A:67:2D:2F:07:E4
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       122C
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_3ZYWAVIRI13XWgMQZtqZy0vB-Q.roa
Signing time:             Wed 29 Sep 2021 02:54:16 +0000
ROA not before:           Wed 29 Sep 2021 02:54:16 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24164
IP address blocks:        49.158.44.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4652 (0x122c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:54:16 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=FF7658580548448D775D680C419B6A672D2F07E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:16:76:30:1d:2b:84:86:6b:07:26:a1:a9:a3:
                    c3:2b:df:a4:e2:5f:67:81:ac:f7:db:78:aa:38:98:
                    c0:eb:62:18:3e:a5:02:d4:ff:a7:5b:6c:32:47:72:
                    9d:a0:81:07:07:6d:e7:1b:5e:f8:f0:b4:b5:1a:94:
                    a4:5c:73:99:14:b8:63:2b:c4:65:c6:9a:4d:84:d5:
                    14:51:cc:bd:ee:01:4a:5b:70:f3:8d:68:c7:d5:cc:
                    05:e7:b8:8d:ed:c0:52:1f:6b:fe:4a:55:e7:9b:e3:
                    25:3d:e3:4e:e3:6b:b1:bf:60:88:c3:4e:f5:ba:7f:
                    ae:46:2c:5e:8f:22:72:d0:cc:e3:a4:89:bf:65:91:
                    85:23:f5:f1:1e:6a:66:23:c3:1d:1c:5e:cc:2f:a8:
                    7a:f3:67:93:8c:6a:9d:8c:b8:47:be:b9:56:30:cc:
                    c9:1a:ef:66:9b:33:ea:c6:7b:5e:dc:1b:ea:9c:f5:
                    e5:6e:ab:50:24:32:b2:0c:4c:a3:9b:17:78:d0:18:
                    2a:79:2e:61:39:78:20:68:21:6d:4b:30:dc:5b:2a:
                    47:e8:67:56:21:ac:25:ef:24:47:30:32:fe:12:07:
                    ce:8d:39:82:81:28:10:b0:30:03:41:d1:99:05:ec:
                    9b:b8:82:8a:55:91:a2:07:9a:fe:88:ca:45:df:86:
                    77:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:76:58:58:05:48:44:8D:77:5D:68:0C:41:9B:6A:67:2D:2F:07:E4
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_3ZYWAVIRI13XWgMQZtqZy0vB-Q.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:87:7e:75:34:2f:db:fe:b3:ad:41:46:c2:d0:dc:5f:66:0c:
         ae:cf:f8:70:02:35:6b:d0:db:77:63:25:a8:f2:b3:c1:f0:e2:
         71:51:b5:5f:05:bd:9f:0d:8d:10:68:2f:3d:b8:c8:da:46:51:
         8f:06:3d:7f:b0:4a:ab:27:34:aa:64:f0:25:04:58:83:5f:52:
         a8:e1:fa:cd:30:e0:90:d8:3e:a2:03:10:29:f2:a5:83:12:f5:
         6d:41:75:33:7a:9b:88:a0:86:25:d5:52:e5:11:8a:0d:68:9c:
         b0:7e:55:76:43:a2:4a:62:14:fd:5d:d9:46:dd:0e:73:b5:03:
         0f:be:c8:b1:04:67:97:04:79:4d:71:c6:e6:39:bd:c3:70:0e:
         7a:99:ce:d9:bb:f6:07:af:79:36:d0:59:b9:f8:df:4e:5c:ca:
         9f:de:a9:f9:8e:c8:28:b3:74:71:b9:22:5f:9d:5c:6e:66:5e:
         2e:97:d0:61:10:b0:71:5d:e2:46:59:4d:fc:07:56:d1:da:a3:
         f0:66:78:24:e4:0d:36:97:f3:e2:e0:1b:81:2f:35:51:61:84:
         c6:b7:5a:61:f3:8c:85:f7:95:b3:3c:e9:52:f1:18:d8:08:dc:
         b5:00:2d:4b:82:1a:55:86:73:52:31:a5:5d:84:a6:93:23:58:
         6a:b8:6f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----