Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/bI2GzlUwrFoi00Rdw1wWCGIeok0.roa
File:                     bI2GzlUwrFoi00Rdw1wWCGIeok0.roa (raw, json)
Hash identifier:          6aVB3FfFkqlbLDkTdP4Q+iEMwZcpynXsHXe/1V8YK+w=
Subject key identifier:   6C:8D:86:CE:55:30:AC:5A:22:D3:44:5D:C3:5C:16:08:62:1E:A2:4D
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       133B
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/bI2GzlUwrFoi00Rdw1wWCGIeok0.roa
Signing time:             Wed 29 Sep 2021 02:55:30 +0000
ROA not before:           Wed 29 Sep 2021 02:55:30 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     4662
IP address blocks:        124.6.0.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4923 (0x133b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:55:30 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=6C8D86CE5530AC5A22D3445DC35C1608621EA24D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:7b:45:62:10:f4:14:9a:b2:16:70:a2:af:d6:
                    0c:b4:6c:3b:e6:dd:c6:ab:81:5b:5c:a6:59:f5:77:
                    26:0b:b6:ed:5a:5e:63:d3:45:ed:2d:06:c7:7b:66:
                    5f:ba:b9:56:1a:75:72:8e:f5:49:f8:f0:05:a3:f3:
                    1f:aa:99:db:85:ab:03:e0:23:3f:ff:11:4f:59:19:
                    10:dd:12:2b:c4:35:f9:a1:2c:f3:6f:3e:23:4e:24:
                    28:4a:7c:23:b3:33:d5:3d:66:3a:f5:52:7e:ff:4a:
                    8e:8d:c4:de:aa:18:ca:fc:21:33:65:1d:ab:45:67:
                    eb:74:b5:06:a3:3c:a7:46:dd:7e:7e:cd:ca:25:8b:
                    d5:66:d4:0e:18:53:ac:90:02:e6:9f:2f:89:58:9e:
                    56:cf:7e:1d:47:71:12:c4:4e:56:dd:35:b3:0c:0d:
                    76:8c:a0:92:56:9c:14:ea:4d:ae:ab:5f:4d:18:16:
                    87:26:bf:fc:57:f9:90:c3:b2:71:16:85:bd:93:ac:
                    c0:3e:f0:71:26:b0:da:6d:0e:35:fa:d0:cc:e1:96:
                    a1:28:a6:7e:1c:fb:5c:0a:56:dc:c2:e2:05:24:5b:
                    ad:03:a2:22:66:60:0b:52:33:f2:f9:7e:4f:07:2c:
                    03:64:f1:df:c9:11:90:2f:2a:de:75:9b:45:f6:b1:
                    ad:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:8D:86:CE:55:30:AC:5A:22:D3:44:5D:C3:5C:16:08:62:1E:A2:4D
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/bI2GzlUwrFoi00Rdw1wWCGIeok0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.6.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a1:92:a0:de:39:78:a4:2c:e7:6f:8d:03:3d:3b:3f:6f:60:89:
         62:9b:44:63:46:aa:0a:44:fb:68:85:3c:b6:d3:13:cc:1f:0b:
         41:12:b4:d9:94:57:09:95:09:97:18:6a:ca:7f:59:19:cb:94:
         06:8c:b2:4d:e4:42:3b:6b:7d:b6:52:cb:c2:5d:df:19:ed:ec:
         0a:64:09:a6:c0:b0:64:f4:c7:d7:47:33:20:ce:a8:10:30:52:
         e8:53:53:82:7d:e9:d5:03:6a:e7:dc:c9:69:78:51:a7:5d:9c:
         cc:fb:7e:15:db:33:2e:cc:b4:e5:32:9f:68:49:54:7d:4e:74:
         4c:30:65:5e:c0:d6:f1:08:5b:7e:85:f3:51:94:09:81:81:15:
         ee:ba:33:4e:aa:78:1d:38:a8:4c:11:26:48:37:99:ce:25:57:
         a0:47:24:99:60:ac:6a:c8:bd:eb:2d:3c:18:2b:d3:a9:5f:e5:
         02:af:00:8f:9a:ae:68:08:7b:69:3a:4c:54:3d:71:fd:a4:3d:
         25:a5:ec:8f:66:31:a8:6b:f1:b2:fd:d1:28:92:40:49:0e:4e:
         a2:26:ef:0b:a8:52:7f:8a:d5:83:6e:be:ec:9f:4d:72:48:9a:
         70:82:26:9f:99:7a:c8:4e:0a:6b:da:96:a3:49:78:40:3f:87:
         65:d2:36:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----