Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fKbmwZKug4ZUYRjy-7i0jrIg57k.roa
File:                     fKbmwZKug4ZUYRjy-7i0jrIg57k.roa (raw, json)
Hash identifier:          Fzt58zg3zfrXx2edxtx/B6od7bnsCj5HK9pv94f/NBU=
Subject key identifier:   7C:A6:E6:C1:92:AE:83:86:54:61:18:F2:FB:B8:B4:8E:B2:20:E7:B9
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1257
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fKbmwZKug4ZUYRjy-7i0jrIg57k.roa
Signing time:             Wed 29 Sep 2021 02:54:29 +0000
ROA not before:           Wed 29 Sep 2021 02:54:29 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24164
IP address blocks:        122.100.126.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4695 (0x1257)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:54:29 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=7CA6E6C192AE8386546118F2FBB8B48EB220E7B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:88:bb:60:8c:a0:96:df:5e:c7:58:71:ab:2e:
                    65:69:ca:2c:5a:82:ae:0a:05:94:3b:b6:ac:d5:45:
                    bf:2d:53:b2:4a:6f:1e:f6:72:25:43:b3:c8:6a:77:
                    39:2b:53:3d:d1:bc:24:6e:11:89:f9:eb:f7:74:59:
                    20:76:89:d7:8c:0c:19:5e:07:ca:86:93:21:00:4e:
                    e2:9a:c5:18:30:d0:22:12:b1:4c:c2:a8:d3:90:f7:
                    57:ed:5a:5e:5c:8c:54:6f:2d:d8:5c:de:19:75:81:
                    4e:8c:35:a8:84:9f:74:f9:80:89:0f:2f:7c:38:9f:
                    a0:f3:43:40:fd:7d:84:28:8c:7d:9a:29:50:eb:cd:
                    18:9d:3a:56:2e:4a:3d:a3:bb:43:46:40:85:a7:63:
                    0c:9a:0e:f8:18:ff:a5:61:f7:43:bd:53:42:63:19:
                    67:56:d3:c8:a3:a5:4f:71:b2:62:8c:9f:75:03:51:
                    07:76:94:70:35:b1:00:5a:46:95:6b:d0:bb:ce:55:
                    4d:ed:80:d0:c7:87:41:84:56:94:cc:3f:f7:eb:19:
                    79:77:d1:3f:07:c7:03:16:06:54:6d:96:c1:d0:a0:
                    e9:71:f6:2e:04:cc:91:b3:2e:5d:8e:2c:9b:98:0e:
                    81:3d:0a:95:91:b1:7b:09:19:7b:f4:79:c0:ca:80:
                    0a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:A6:E6:C1:92:AE:83:86:54:61:18:F2:FB:B8:B4:8E:B2:20:E7:B9
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fKbmwZKug4ZUYRjy-7i0jrIg57k.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.100.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:37:cb:86:09:7b:be:bc:22:e8:70:61:31:1d:f5:65:21:a6:
         80:64:df:22:ea:81:6e:d1:59:c0:f3:d8:5e:0e:5c:f5:71:9c:
         8b:9e:cc:47:f5:a7:22:67:4b:da:9c:be:4d:fd:a4:2b:c1:21:
         d3:8d:0a:8b:f1:81:6e:09:9f:a6:e9:3c:75:8e:f2:8c:65:c8:
         95:15:89:b5:6b:cb:fb:f0:f5:68:1f:4a:a8:8c:d8:f4:2a:de:
         68:0e:b0:8e:79:3c:75:d6:ba:b7:23:3b:9b:be:a4:65:c8:ab:
         9e:eb:3a:80:07:30:db:58:98:95:d3:79:5f:59:e9:a3:dc:84:
         de:96:aa:95:32:68:ef:81:8f:ff:51:06:71:96:1a:ab:64:62:
         a0:e8:17:de:c8:9a:30:4d:48:dd:cc:5d:85:00:5c:08:aa:1e:
         5b:e7:af:34:84:bf:cb:23:f8:bd:24:b6:01:5a:2b:ff:33:2a:
         67:db:57:1f:56:5e:3b:b0:93:cd:da:6f:9d:9e:a7:85:db:f9:
         b3:0f:d4:68:09:bc:d2:e8:63:a9:82:03:ee:09:2b:c5:b5:4b:
         39:77:69:f0:a7:a2:44:bd:0d:3b:c0:70:38:4f:94:a5:7f:17:
         9c:20:51:8d:bf:6e:03:af:3e:a6:67:dd:af:06:e8:b3:7c:b8:
         90:8a:37:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----