Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/cmHxta4KJaYsPI5RJDYhJJluwtE.roa
File:                     cmHxta4KJaYsPI5RJDYhJJluwtE.roa (raw, json)
Hash identifier:          5WFe/SxkOYYo0oejc37lcG2ORWEmVCL3686H6sEyGrU=
Subject key identifier:   72:61:F1:B5:AE:0A:25:A6:2C:3C:8E:51:24:36:21:24:99:6E:C2:D1
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       12BF
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/cmHxta4KJaYsPI5RJDYhJJluwtE.roa
Signing time:             Wed 29 Sep 2021 02:54:56 +0000
ROA not before:           Wed 29 Sep 2021 02:54:56 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24164
IP address blocks:        49.159.232.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4799 (0x12bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:54:56 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=7261F1B5AE0A25A62C3C8E5124362124996EC2D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ef:e3:d8:1b:7c:36:8e:aa:28:bb:db:1f:60:
                    e7:63:24:35:05:86:b3:60:e4:09:24:f4:40:03:27:
                    40:c6:9e:0b:e4:91:9d:f7:48:4a:db:ca:24:80:3b:
                    be:27:90:fe:2d:63:41:74:9b:b8:de:b6:9e:1b:fd:
                    98:76:95:2e:1f:2c:3f:65:83:8e:a9:98:db:04:bc:
                    0e:fe:cf:17:87:c9:b4:51:50:4e:4b:e8:68:6a:ea:
                    93:88:ae:da:b3:a4:9e:39:56:14:36:10:ce:cd:89:
                    87:e7:a4:2f:a3:c6:a3:45:83:d9:f2:ec:da:e4:eb:
                    0a:00:2d:3a:6b:e8:52:bd:b5:15:94:fe:00:fb:ac:
                    87:14:2e:06:65:d1:9f:47:3d:b7:6f:56:41:cd:a9:
                    ea:17:0e:44:45:08:71:f2:e6:e7:19:79:99:9c:44:
                    15:74:d5:80:9f:27:e3:74:f5:a0:09:da:bc:24:73:
                    fb:b4:f0:9c:46:ed:3b:df:36:c0:1f:61:b6:f4:09:
                    31:ef:75:5c:ea:db:e6:23:10:2e:a3:e7:16:68:20:
                    29:70:01:2c:14:05:3f:cd:2a:95:c5:bd:41:3b:e8:
                    1b:59:ff:44:89:44:80:70:a6:d1:11:df:4b:b9:22:
                    94:25:10:0e:79:99:de:3b:2a:80:cf:f6:70:0b:38:
                    ef:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:61:F1:B5:AE:0A:25:A6:2C:3C:8E:51:24:36:21:24:99:6E:C2:D1
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/cmHxta4KJaYsPI5RJDYhJJluwtE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.159.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3a:1c:ee:4c:5d:d6:05:44:52:f5:bc:b7:af:e8:1a:17:3d:06:
         9f:e6:a2:0a:16:5d:c2:bd:67:25:dc:f3:95:ea:d8:0a:48:ae:
         d3:4c:5a:92:f2:73:db:8d:aa:07:55:dd:e9:10:64:6d:68:ce:
         21:a3:75:fb:4f:b1:4b:2b:5c:86:2c:70:7b:ea:08:0d:f0:30:
         8f:ce:6c:1f:aa:3e:88:4c:d3:82:8f:45:68:9f:44:3e:67:19:
         fd:2d:f8:86:77:e0:ea:5d:57:1d:2b:7c:fb:2c:1f:02:16:aa:
         a2:7d:a3:eb:85:24:5b:36:6a:8d:ba:f4:05:f8:8b:4e:1c:82:
         78:e5:67:61:62:1c:13:e6:24:df:88:a5:a2:74:5f:2a:27:0a:
         5f:de:cf:43:b4:0d:21:ff:a4:a9:5b:ed:76:8e:a5:07:12:e6:
         c4:49:71:ea:52:05:fa:d7:02:82:23:0a:4a:f7:f8:8b:29:3a:
         ba:77:f6:8d:fd:ac:31:72:3e:f2:c3:ed:35:01:bd:b6:da:af:
         42:bb:c7:9d:b1:eb:49:37:08:af:96:ef:23:37:35:7d:04:00:
         61:ce:cf:45:f5:aa:49:a1:da:2e:fa:89:12:13:ee:86:61:f7:
         74:2f:a6:e9:5c:d1:6f:b8:98:09:a2:39:36:6a:93:6f:de:cd:
         15:96:17:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----