Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/b1sz_B0ZtSGMCLjYvJ-nb1Au2s8.roa
File:                     b1sz_B0ZtSGMCLjYvJ-nb1Au2s8.roa (raw, json)
Hash identifier:          AxlxPLVImVkCubI7Pb9GXFAJAxgn7gPd2MqvAfhzE8g=
Subject key identifier:   6F:5B:33:FC:1D:19:B5:21:8C:08:B8:D8:BC:9F:A7:6F:50:2E:DA:CF
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       14C2
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/b1sz_B0ZtSGMCLjYvJ-nb1Au2s8.roa
Signing time:             Wed 31 Aug 2022 02:29:17 +0000
ROA not before:           Wed 31 Aug 2022 02:29:17 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24165
IP address blocks:        122.100.96.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5314 (0x14c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Aug 31 02:29:17 2022 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=6F5B33FC1D19B5218C08B8D8BC9FA76F502EDACF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:5d:b1:15:eb:3e:e8:bc:02:db:d4:59:02:50:
                    1b:2e:bc:66:fd:0c:c9:b9:16:d5:ef:44:26:36:45:
                    3a:ee:01:ee:17:ba:9f:75:9b:ff:4c:56:7c:14:e6:
                    48:23:92:bd:88:a3:e0:85:bf:1e:7e:74:5a:68:1c:
                    17:0c:0b:97:28:b9:35:d9:0a:fe:90:bf:0d:aa:f1:
                    5e:14:20:53:dc:83:f7:f0:0b:56:df:ea:83:ff:f9:
                    82:d5:38:ce:85:da:a1:ee:68:bc:f6:86:a9:43:0b:
                    b2:53:97:8d:02:95:97:3b:dd:7a:7a:74:3e:8f:ba:
                    ab:45:50:11:6e:74:98:85:c5:ec:a3:f8:9a:be:4d:
                    48:1b:07:cc:c3:ee:76:20:e3:4a:45:2e:ff:05:60:
                    4e:69:6a:17:f9:8c:5b:42:ea:6b:23:66:cc:dd:eb:
                    b4:36:ca:78:39:de:6a:e0:92:01:8f:df:18:da:fe:
                    a8:93:28:cd:89:82:e7:30:77:6d:45:6d:63:09:4c:
                    ae:ef:1c:fe:59:54:7a:54:d3:90:ca:75:82:c5:60:
                    3d:fb:1f:b0:5c:dc:5a:f4:ac:b0:81:ad:b6:b7:44:
                    0d:17:e2:b8:4c:fa:d9:76:29:43:81:d8:a1:41:ff:
                    3f:1c:6a:70:c8:19:d2:24:69:65:9e:22:8a:0b:19:
                    4a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:5B:33:FC:1D:19:B5:21:8C:08:B8:D8:BC:9F:A7:6F:50:2E:DA:CF
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/b1sz_B0ZtSGMCLjYvJ-nb1Au2s8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.100.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         92:92:e1:71:83:f2:26:a6:77:b2:7a:eb:88:da:df:a6:41:70:
         54:2f:84:aa:dd:e8:87:52:17:a9:b7:fd:cf:b3:4f:db:57:1b:
         76:a2:bc:36:32:26:a6:0d:40:9c:e7:f3:8d:49:28:fa:f7:9c:
         00:7a:58:ec:24:17:a6:4d:17:c4:b6:9c:34:56:d5:2d:97:30:
         61:80:61:7b:96:e7:a0:bf:89:3e:db:6b:81:c5:ef:98:d8:2d:
         25:4f:ff:4d:2a:42:04:43:52:2d:0c:a6:30:d5:24:3a:49:ea:
         2a:26:3f:90:fd:23:53:db:f2:05:7d:2a:44:9a:e3:6f:90:41:
         03:49:01:7e:d1:6e:1e:f8:35:c9:e7:f5:0c:35:b6:4e:a9:39:
         55:84:d4:a0:17:65:24:a6:bd:0a:24:4f:c1:58:f4:94:0e:65:
         52:a9:4f:40:76:19:8a:5d:7a:f9:02:32:19:80:bd:98:12:ac:
         1c:f8:5f:83:5f:ce:da:e4:9e:97:ff:c1:7b:22:76:e7:e2:dd:
         49:7e:f5:48:3c:9e:20:c9:73:79:03:65:6e:dc:61:5d:ad:9d:
         1d:af:5c:38:88:6c:cd:9e:df:21:5d:9b:98:56:2d:43:87:f1:
         94:c2:86:0d:35:56:bb:d3:1d:cd:f2:be:a2:e3:e5:43:a8:ef:
         94:09:59:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----