Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/e0x95QrlfOUrqPIxxGZxwwo3cU0.roa
File:                     e0x95QrlfOUrqPIxxGZxwwo3cU0.roa (raw, json)
Hash identifier:          LBx4IsTjJAWEuMcXHbdH0RDnuxM44A8fODZ7cO8AdPs=
Subject key identifier:   7B:4C:7D:E5:0A:E5:7C:E5:2B:A8:F2:31:C4:66:71:C3:0A:37:71:4D
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1290
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/e0x95QrlfOUrqPIxxGZxwwo3cU0.roa
Signing time:             Wed 29 Sep 2021 02:54:44 +0000
ROA not before:           Wed 29 Sep 2021 02:54:44 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24164
IP address blocks:        49.158.144.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4752 (0x1290)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:54:44 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=7B4C7DE50AE57CE52BA8F231C46671C30A37714D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:81:e1:ed:3b:23:61:db:63:42:fc:9c:35:76:
                    b1:71:ab:af:b1:61:7a:cc:11:ca:7b:51:7e:fd:72:
                    cc:e6:07:46:0e:11:af:a9:fd:fe:28:25:2a:36:35:
                    1d:33:fb:24:b7:e0:fe:3e:8c:26:1a:aa:88:40:dc:
                    95:cc:c9:7c:c7:da:b6:5b:fe:18:53:37:4a:e5:4f:
                    f9:0c:1b:ed:a4:91:be:c7:3d:5b:64:07:d5:6e:2c:
                    43:46:aa:57:98:0c:2f:83:ca:f4:51:21:a7:4c:ba:
                    64:ff:b0:bd:0b:c0:64:9e:b9:55:72:7f:8e:ae:27:
                    bb:73:80:cd:60:9b:de:7d:e5:46:8c:f3:43:58:80:
                    c7:fe:c2:57:ef:cd:f6:5d:a6:21:c5:f2:c2:f7:f6:
                    c9:87:cc:23:ed:d0:13:ef:3f:37:1a:f6:94:4c:0b:
                    54:a1:6e:b4:b0:aa:e1:1d:1d:d9:5a:9d:3f:20:ec:
                    22:1a:cf:cd:7c:17:b3:e7:1a:86:3c:f2:a5:72:ff:
                    2f:f3:4f:72:a8:6c:0a:79:4b:42:c7:c6:c2:a7:05:
                    9c:7e:23:f5:06:e1:31:dd:58:82:77:1e:55:a7:ff:
                    12:70:cc:0c:83:82:0e:55:e7:97:c4:56:b2:ed:f4:
                    3f:75:8d:ea:96:d6:49:56:ef:ff:7c:23:6b:01:60:
                    c0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:4C:7D:E5:0A:E5:7C:E5:2B:A8:F2:31:C4:66:71:C3:0A:37:71:4D
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/e0x95QrlfOUrqPIxxGZxwwo3cU0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:17:ca:b3:14:15:1b:a3:df:4d:54:0b:a7:d7:5a:03:87:80:
         de:4c:f5:da:31:92:64:9a:0c:af:ba:bf:5e:c5:f0:c6:e6:76:
         bd:21:69:04:c6:f2:7b:d4:de:82:92:a4:5a:51:3f:06:62:b1:
         27:b8:e4:a6:d7:26:8b:86:13:42:71:e5:fb:a8:46:dc:bb:2c:
         49:11:23:68:0a:0c:5d:a8:30:64:dc:64:42:dc:b0:7c:fb:5b:
         ca:93:ff:1a:a0:72:d8:47:71:86:a1:35:62:a7:11:48:53:9a:
         bc:24:2a:aa:62:c6:7f:cb:ad:76:6c:c0:77:ed:f6:4c:f0:00:
         94:e8:bc:35:70:93:c5:d5:a1:4a:70:77:86:09:f6:88:da:b6:
         b7:37:91:77:08:f3:81:08:39:48:ea:12:ea:84:e6:94:87:87:
         ec:6b:b7:21:47:3a:e3:5c:74:eb:70:f0:13:3f:6f:b4:b0:5e:
         69:12:e1:cf:c0:72:f1:18:4b:e7:8f:aa:62:83:17:a7:fe:08:
         d9:43:5d:0d:d8:00:99:6f:c6:d7:bb:e7:53:98:aa:ce:fa:be:
         84:83:87:05:ea:20:32:c8:49:bf:72:a8:b4:ac:5b:8e:f2:db:
         46:c4:2b:bc:31:38:80:9e:c2:b2:24:c2:e9:88:f9:0e:e3:61:
         82:9c:d1:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----