Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ca9AjlmJCMEreDFZyQFUABKcJuE.roa
File:                     ca9AjlmJCMEreDFZyQFUABKcJuE.roa (raw, json)
Hash identifier:          af1dOgZBJmDbd/GWSHh52DtSxyIg0DZ7vJac0biUquU=
Subject key identifier:   71:AF:40:8E:59:89:08:C1:2B:78:31:59:C9:01:54:00:12:9C:26:E1
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1474
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ca9AjlmJCMEreDFZyQFUABKcJuE.roa
Signing time:             Mon 06 Jun 2022 13:58:28 +0000
ROA not before:           Mon 06 Jun 2022 13:58:28 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24164
IP address blocks:        2407:4b00::/32 maxlen: 36

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5236 (0x1474)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Jun  6 13:58:28 2022 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=71AF408E598908C12B783159C9015400129C26E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ba:f6:6f:b0:ec:7a:d7:7a:78:81:41:32:95:
                    45:e6:a1:ad:4e:03:b3:b7:8b:8f:80:f2:3f:64:33:
                    8d:1a:d3:34:92:57:8d:6e:b5:6b:ab:99:fc:84:ad:
                    d3:62:87:8c:bc:ea:76:c0:49:73:e1:2b:f6:24:04:
                    2f:ff:de:e8:9d:1c:5c:90:0b:4f:7a:35:53:cd:5b:
                    2b:4e:e5:70:01:43:94:81:22:4c:1a:64:2c:7c:d7:
                    c8:44:d7:d3:b0:70:94:09:49:93:90:ce:44:6b:86:
                    e4:5b:d5:3b:4a:75:a2:ce:59:aa:43:ee:aa:1d:69:
                    33:98:ec:b9:81:4c:63:f8:b1:f5:3c:f9:4c:3c:81:
                    4d:5d:18:bf:9e:7c:52:fc:e8:6e:bd:92:ce:ce:bc:
                    c6:1c:6f:82:fe:64:f9:05:99:0d:d4:bb:ea:45:c2:
                    62:c0:6d:bd:fc:cf:9e:c3:f2:9c:ee:b2:9b:4b:2b:
                    9a:52:bc:87:33:d4:f3:bf:97:d7:fe:74:93:e8:8d:
                    58:f0:91:6d:aa:c3:e5:e1:3d:cf:4e:ec:40:1d:72:
                    34:d8:cf:ac:33:29:c2:44:19:d7:a7:60:97:7d:3f:
                    31:f7:f0:f8:fc:bf:ab:18:a2:6b:d9:a0:73:05:6e:
                    50:df:ed:db:11:c5:7d:39:25:c5:66:84:84:95:ef:
                    c4:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:AF:40:8E:59:89:08:C1:2B:78:31:59:C9:01:54:00:12:9C:26:E1
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ca9AjlmJCMEreDFZyQFUABKcJuE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:4b00::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:61:1d:8f:dd:25:b4:c7:a8:c5:83:44:d0:6d:04:0d:ef:55:
         a4:7d:c6:09:67:69:ee:9c:7a:6a:2c:0b:12:40:92:2f:a8:52:
         07:0c:b2:c9:78:4e:63:a4:69:03:6e:9c:ac:36:04:4d:73:4e:
         c0:5f:a0:e8:9f:0b:b5:26:b7:77:c6:11:b3:86:b4:74:ae:65:
         ba:a7:90:5a:98:c9:f6:2a:76:a1:bd:df:9c:5e:22:1c:03:99:
         8c:85:e3:84:27:f3:86:5c:0b:5f:15:52:fb:3a:8f:c2:0a:3a:
         ef:bc:46:6e:19:92:74:6c:b3:6f:ef:e2:09:5b:17:3f:0c:69:
         18:c3:27:5f:5a:77:49:79:bc:29:ca:54:f7:98:1f:33:56:d2:
         1b:92:36:f5:41:63:e5:24:6a:e0:f7:35:8f:93:99:90:04:c1:
         1e:54:89:0c:ed:9c:40:ce:e0:4d:d6:22:da:12:05:10:3b:fc:
         65:7b:87:69:47:3e:61:c4:8c:a2:26:f9:14:f4:b8:e7:20:a1:
         ab:5e:f4:53:2f:6b:fc:da:30:b1:a0:00:e0:76:64:95:93:79:
         33:52:b5:05:aa:6e:94:78:37:67:cf:ff:1c:97:39:b1:fd:ba:
         42:d1:63:2c:68:ff:3c:8b:4b:e9:db:9a:23:ea:06:03:92:04:
         e1:0c:3d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----