Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/acwVSk04MLOT-XRYKx1HCOza8V4.roa
File:                     acwVSk04MLOT-XRYKx1HCOza8V4.roa (raw, json)
Hash identifier:          NK/pGRBEZ99eDBqeLoOp1KJ3d5PiazHBWDb20mr2v5I=
Subject key identifier:   69:CC:15:4A:4D:38:30:B3:93:F9:74:58:2B:1D:47:08:EC:DA:F1:5E
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1222
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/acwVSk04MLOT-XRYKx1HCOza8V4.roa
Signing time:             Wed 29 Sep 2021 02:54:13 +0000
ROA not before:           Wed 29 Sep 2021 02:54:13 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24164
IP address blocks:        119.77.244.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4642 (0x1222)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:54:13 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=69CC154A4D3830B393F974582B1D4708ECDAF15E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a3:ef:ed:0f:22:49:bb:f5:29:be:8f:a3:30:
                    c9:89:93:fa:b5:26:76:17:4c:e6:b0:ec:85:57:18:
                    9a:e7:2a:88:03:57:f8:e1:0b:6d:c3:65:28:3b:52:
                    7d:be:a4:6c:be:0e:c0:39:1e:24:4f:00:4b:f7:15:
                    0b:96:59:90:6c:1b:13:dd:35:87:7f:64:7d:4a:08:
                    d0:bc:f2:2e:79:29:ff:c6:49:be:6c:73:ac:72:c1:
                    2f:1f:2c:d4:64:b4:d0:2e:d4:73:c5:7a:a0:d6:09:
                    48:ca:a4:28:a6:2f:e4:be:fe:a5:16:4d:08:28:d6:
                    bd:cc:61:61:5a:51:ca:91:ee:d1:50:81:91:b3:0a:
                    d3:39:e2:31:7d:83:25:60:7b:47:3e:2c:75:b1:74:
                    f9:cb:45:4c:e7:34:87:d7:c2:28:7a:61:cc:fc:d1:
                    a3:68:a3:ea:eb:f9:89:5b:84:f6:aa:3c:fe:2c:c2:
                    e0:be:c3:a4:d8:ea:50:3a:9c:c0:15:6a:15:22:9f:
                    b0:8e:2c:7b:61:29:0a:99:63:be:7d:59:c5:9f:41:
                    83:e8:ac:fb:8d:41:b6:e0:56:55:a8:32:77:52:87:
                    6a:66:0b:f5:4f:34:b7:07:8c:f7:6f:6b:fb:82:5c:
                    7d:04:17:d9:ce:33:ba:26:97:e9:b2:3f:f1:af:bb:
                    99:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:CC:15:4A:4D:38:30:B3:93:F9:74:58:2B:1D:47:08:EC:DA:F1:5E
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/acwVSk04MLOT-XRYKx1HCOza8V4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.77.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:2b:30:08:88:29:4b:eb:2c:a5:72:ce:00:58:4e:aa:1c:28:
         39:93:b7:48:37:a3:a8:98:5c:8b:6a:54:b4:2b:d3:69:c8:ba:
         d4:26:10:b6:50:36:b6:a9:1a:c3:86:95:61:c5:9d:6c:5c:74:
         3a:77:15:74:9c:9f:0a:27:ce:4e:65:c3:89:9c:10:4e:6f:5e:
         95:54:97:c7:a8:eb:82:41:df:3a:8e:19:7d:6d:1b:cd:68:82:
         ba:ec:5b:a8:ef:b4:b5:7e:8b:ad:fe:c5:09:1b:1b:7e:c8:86:
         e2:0e:94:6a:e0:7b:b0:21:3b:b0:62:f2:0f:fa:2b:c2:53:b1:
         85:51:40:98:48:3b:c4:f3:4a:af:6d:2b:2d:6b:ce:bc:01:6f:
         44:a7:04:54:7c:2c:28:d3:71:a2:58:31:e8:19:72:52:38:31:
         5c:4b:dc:12:e1:82:95:82:ed:f5:b7:e0:fc:b7:f0:0a:85:35:
         35:33:d3:33:1f:0a:94:52:73:6a:c7:00:38:e5:6b:07:17:ab:
         9c:c4:9a:3c:b2:2a:6c:a4:d8:bd:94:6d:52:73:29:b6:c2:07:
         fc:3c:4c:bc:f3:3c:87:01:15:c3:35:bc:89:a7:55:ab:08:4c:
         8c:8f:21:ae:3d:cb:87:b7:c1:f1:86:67:6e:5d:db:49:68:a0:
         00:25:9a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----