Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/d-WK5H5Q4MuZGCLnIKNLsZwN3IQ.roa
File:                     d-WK5H5Q4MuZGCLnIKNLsZwN3IQ.roa (raw, json)
Hash identifier:          rAb5Niuyb5VuNECq80vz0fl4qCZVGJKp68f2cr6+Xm8=
Subject key identifier:   77:E5:8A:E4:7E:50:E0:CB:99:18:22:E7:20:A3:4B:B1:9C:0D:DC:84
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1001
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/d-WK5H5Q4MuZGCLnIKNLsZwN3IQ.roa
Signing time:             Sun 07 Feb 2021 12:37:04 +0000
ROA not before:           Sun 07 Feb 2021 12:37:04 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        49.159.240.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4097 (0x1001)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb  7 12:37:04 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=77E58AE47E50E0CB991822E720A34BB19C0DDC84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:64:b5:31:71:d3:18:39:1b:3d:c5:d4:1c:68:
                    42:8b:6e:05:4d:73:f1:bf:1f:ea:28:b9:27:bf:be:
                    8c:66:04:77:59:2c:f0:8e:f6:d5:72:f0:bd:0c:e0:
                    0a:10:d8:82:db:a3:eb:be:22:da:8b:b5:22:f3:94:
                    f4:06:9e:51:91:ec:35:8f:3f:1e:c1:29:56:33:91:
                    8f:99:1d:35:5c:60:0e:97:6e:52:09:1f:be:ea:51:
                    bd:d5:bb:b4:e1:75:76:c4:fe:b3:af:9e:0a:cc:ca:
                    24:67:73:a0:6d:61:12:6c:fb:74:31:ca:77:90:c3:
                    1d:9e:39:5e:ee:2c:f7:97:b7:5f:66:50:80:6c:37:
                    3c:31:46:53:f6:ae:9f:fa:d5:48:bc:61:87:70:af:
                    67:15:2f:ca:90:57:a4:74:81:57:57:dc:4a:ed:17:
                    06:c6:cc:c3:80:aa:54:58:8c:01:f4:ec:da:27:ae:
                    a8:47:a8:1d:e7:ec:c4:be:4b:24:4b:f4:43:e5:64:
                    24:0c:c4:ce:5b:3d:67:4b:3b:3d:c9:6c:c9:3e:e6:
                    88:ea:4a:5f:59:df:b4:93:f6:56:ae:4a:ad:df:cd:
                    35:e4:3e:c1:a5:b7:dc:9f:ca:5b:13:7f:73:f1:7d:
                    48:25:e6:5c:f0:ea:80:d4:30:3a:28:61:ab:4c:c8:
                    ea:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:E5:8A:E4:7E:50:E0:CB:99:18:22:E7:20:A3:4B:B1:9C:0D:DC:84
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/d-WK5H5Q4MuZGCLnIKNLsZwN3IQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.159.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         16:d2:39:7f:b3:77:f0:ad:80:6a:cd:9e:eb:85:57:04:9a:11:
         9e:c4:98:26:bf:a5:a6:64:fb:9d:90:c7:7a:cb:ac:39:00:21:
         49:f6:7d:57:18:fc:7d:72:07:28:06:e9:4e:1a:67:ce:53:6d:
         e1:92:3d:79:92:49:2a:b2:2e:31:a9:e4:28:7d:a8:0a:12:7a:
         30:e0:f2:d0:2f:d1:0a:72:33:98:ae:3a:9b:c5:d1:55:90:12:
         d1:d1:7d:3c:d1:3d:56:3a:93:0e:eb:08:ea:57:02:b7:71:bf:
         e1:58:27:7c:b7:5a:86:b7:66:16:46:ae:c4:55:0a:ef:f0:36:
         53:fc:6b:a4:46:60:6d:2e:7e:77:e7:4d:5d:6f:d6:e8:4a:b3:
         31:64:ab:b0:df:68:7a:b7:b5:99:89:a3:3c:74:40:42:e2:eb:
         ad:78:08:bb:58:26:10:8f:54:33:6f:1d:d7:c6:10:4e:2a:76:
         9c:47:a7:dc:ef:88:d1:ae:de:48:e4:b7:f9:44:31:b7:ce:06:
         60:07:c8:29:12:f4:6d:6d:c7:44:c3:16:7b:67:a2:84:d9:8a:
         dc:70:9d:49:4e:8d:85:90:9d:b8:af:f5:32:e5:6c:45:12:b4:
         72:81:8a:3f:27:27:1d:9e:26:f6:bd:2d:eb:05:d2:06:3b:4d:
         85:00:83:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----