Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/bYGBvoRrCdRekHGo4z_tfY0QZCA.roa
File:                     bYGBvoRrCdRekHGo4z_tfY0QZCA.roa (raw, json)
Hash identifier:          EGymlXtWkoKgNG3FMdGMIZn1sFYb/vz0EqGvfU55lYg=
Subject key identifier:   6D:81:81:BE:84:6B:09:D4:5E:90:71:A8:E3:3F:ED:7D:8D:10:64:20
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1246
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/bYGBvoRrCdRekHGo4z_tfY0QZCA.roa
Signing time:             Wed 29 Sep 2021 02:54:24 +0000
ROA not before:           Wed 29 Sep 2021 02:54:24 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24164
IP address blocks:        114.198.188.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4678 (0x1246)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:54:24 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=6D8181BE846B09D45E9071A8E33FED7D8D106420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b9:1b:24:27:5e:bc:97:a6:98:79:91:88:e6:
                    67:ad:2f:d4:6d:82:e9:4e:cb:3f:8c:f0:ed:b5:a9:
                    4e:6b:ee:cb:e6:5a:d5:67:06:92:1d:97:39:bc:11:
                    7b:e2:e9:7d:41:1c:49:b5:28:03:20:4c:24:84:1a:
                    2d:96:0d:b2:30:3a:93:51:b8:3d:00:b9:d7:b9:9e:
                    fd:76:81:63:eb:79:80:16:e1:1c:d9:ce:e8:b8:12:
                    d5:c1:d6:54:2d:ce:7c:41:b9:18:19:85:33:81:6c:
                    6e:14:59:36:ab:51:55:73:22:99:5b:a3:78:ef:9a:
                    ee:56:75:1f:fd:cf:cd:4e:45:94:27:bf:14:a2:19:
                    46:8e:78:74:6d:49:3f:71:a8:98:ba:79:ca:28:51:
                    c4:16:31:a5:b0:ea:38:89:f2:03:1a:58:eb:25:e8:
                    3a:17:3f:54:9e:fc:3a:c2:53:14:ee:e4:7f:f3:a5:
                    48:45:55:bd:a1:45:be:7b:44:8a:d3:e9:de:8c:bc:
                    e5:98:ef:e7:ce:63:22:17:54:17:12:10:f3:da:e9:
                    ae:47:90:be:83:f6:09:e8:04:98:ee:87:27:ba:fe:
                    55:fa:79:b3:f6:93:39:08:d6:32:01:d2:22:22:e2:
                    27:4c:7f:9e:cd:05:07:28:d4:bf:1d:f7:8e:85:2c:
                    9a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:81:81:BE:84:6B:09:D4:5E:90:71:A8:E3:3F:ED:7D:8D:10:64:20
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/bYGBvoRrCdRekHGo4z_tfY0QZCA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.198.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:b6:13:cf:45:51:2c:e4:21:22:10:fc:40:bc:c5:f3:07:eb:
         d5:31:6b:fb:48:91:01:68:93:97:c1:62:78:a9:af:3a:6c:b4:
         26:5d:4d:03:ce:6e:39:bf:33:6e:8a:db:23:e9:10:75:22:a6:
         9a:56:b7:f6:90:6a:6f:d8:9b:0f:ed:7b:b7:19:4c:c4:fd:92:
         e4:88:8d:85:d2:17:11:eb:72:88:ce:30:fd:cf:1b:f9:3a:e3:
         92:52:ea:06:04:70:c3:48:a0:79:42:e1:e6:ec:47:b4:49:8b:
         c9:b8:f0:36:e0:c0:3c:47:44:ba:70:af:7b:7e:5a:65:9e:db:
         e4:b6:68:da:e4:4f:15:f0:7f:0b:56:27:73:3e:12:20:d4:4b:
         2c:e7:74:b6:e1:6a:96:fa:86:ed:74:30:e1:d2:e1:3f:17:a5:
         30:09:94:53:33:37:06:db:67:f7:0d:0c:81:58:ec:65:37:5e:
         96:f6:83:1b:67:45:2e:8e:68:54:4d:a9:8e:8c:b9:68:91:d3:
         cc:8b:89:56:ed:a9:6f:2d:fe:d6:6d:3d:6d:eb:a5:a9:01:8f:
         c4:7a:74:a3:72:23:04:94:84:77:95:81:9d:c4:0c:7a:d0:22:
         48:cd:7d:35:27:ce:a4:44:8c:3b:f6:48:75:17:39:1b:bd:03:
         10:08:11:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----