Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gQlsTAbHcEYGbuoO9TTqVsWo6J0.roa
File:                     gQlsTAbHcEYGbuoO9TTqVsWo6J0.roa (raw, json)
Hash identifier:          m2wYYOUoBx54iKQMHJNk0z1e6G3JeO0oH7sUrkF8O80=
Subject key identifier:   81:09:6C:4C:06:C7:70:46:06:6E:EA:0E:F5:34:EA:56:C5:A8:E8:9D
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1293
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gQlsTAbHcEYGbuoO9TTqVsWo6J0.roa
Signing time:             Wed 29 Sep 2021 02:54:44 +0000
ROA not before:           Wed 29 Sep 2021 02:54:44 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24164
IP address blocks:        49.158.147.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4755 (0x1293)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:54:44 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=81096C4C06C77046066EEA0EF534EA56C5A8E89D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ea:4a:f8:11:14:1b:39:7f:25:95:a2:b6:1e:
                    6a:38:3b:3a:34:b1:d7:9f:aa:ad:f7:36:f7:15:91:
                    4e:16:c1:4e:6a:c2:c3:6d:1a:9e:9e:f1:2a:ab:bc:
                    b2:b1:32:65:1a:53:ac:1d:dc:99:70:2b:39:ba:f1:
                    18:c2:55:fa:27:7e:c2:1d:59:6e:34:de:9b:46:f8:
                    45:ea:a7:4d:91:b4:21:16:20:18:98:bb:f2:5d:d0:
                    7d:a6:ff:5b:3e:d8:d0:80:7f:03:7f:e0:aa:03:bb:
                    f6:6b:f5:ac:1c:92:a9:e5:6e:47:55:61:d8:7c:7a:
                    ee:66:e1:30:04:d5:ef:eb:40:fd:fc:eb:91:58:d9:
                    67:6d:93:66:44:d0:4d:77:f3:e9:4a:e0:9e:ed:ca:
                    d7:92:fa:c9:aa:85:98:ce:4b:9d:9c:51:0b:2e:e0:
                    2a:9f:eb:12:17:30:13:9d:f4:2f:13:69:a0:dc:67:
                    6f:db:21:d8:2a:6d:8f:4a:98:97:e5:32:20:81:fc:
                    ad:e1:ba:a4:ba:67:d6:12:e7:74:05:d9:67:e5:37:
                    ed:b4:56:13:5e:61:9c:2c:9e:2a:70:87:30:29:cf:
                    f2:00:08:40:4f:4e:1f:a3:8b:e4:02:d5:6f:ec:95:
                    80:fc:15:bc:b1:ca:1e:47:a2:5a:30:75:84:a2:90:
                    72:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:09:6C:4C:06:C7:70:46:06:6E:EA:0E:F5:34:EA:56:C5:A8:E8:9D
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gQlsTAbHcEYGbuoO9TTqVsWo6J0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:6d:24:d2:42:16:71:a9:f5:2d:83:49:42:28:57:38:ad:da:
         b1:d5:0b:80:8f:ea:fd:cb:8d:1c:e7:9b:61:2d:66:c4:23:d2:
         ed:56:13:3f:f6:ed:23:24:ee:b5:1b:36:54:f0:54:a1:0a:d0:
         ac:0b:29:ca:7f:73:b1:84:18:17:2a:46:9e:6d:32:1b:09:98:
         30:cd:7a:4e:51:7d:73:7d:5d:87:59:40:fb:dc:20:64:18:65:
         b0:dc:6f:7f:36:4d:c2:ee:fb:88:bc:98:95:17:9e:ef:f0:e2:
         f9:25:7e:55:8d:5d:2d:d7:90:ea:a7:2a:1e:1f:9c:82:7f:b9:
         14:6d:02:9e:cb:a6:c4:be:59:61:07:e9:82:c8:27:fd:fe:a0:
         f8:64:4c:29:d3:99:83:0f:0d:3d:16:b4:c8:22:26:95:62:2f:
         83:3a:9b:c6:46:d7:12:b7:b5:3b:2d:1f:20:e9:c1:ca:86:41:
         ec:19:11:57:be:77:42:47:d5:f3:f8:70:63:dc:48:3c:54:4f:
         30:65:77:c9:f0:89:e5:b1:85:bf:16:ba:74:30:f5:2a:b5:41:
         27:75:cc:86:2e:ed:30:6c:89:3e:a2:23:fd:0b:2a:86:67:88:
         80:02:f2:72:2f:9c:2f:86:c7:c1:11:95:7f:b4:1b:2c:e5:79:
         90:3e:f9:29
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICEpMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTA5Mjkw
MjU0NDRaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDgxMDk2QzRDMDZDNzcw
NDYwNjZFRUEwRUY1MzRFQTU2QzVBOEU4OUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDW6kr4ERQbOX8llaK2Hmo4Ozo0sdefqq33NvcVkU4WwU5qwsNt
Gp6e8SqrvLKxMmUaU6wd3JlwKzm68RjCVfonfsIdWW403ptG+EXqp02RtCEWIBiY
u/Jd0H2m/1s+2NCAfwN/4KoDu/Zr9awckqnlbkdVYdh8eu5m4TAE1e/rQP3865FY
2Wdtk2ZE0E138+lK4J7tyteS+smqhZjOS52cUQsu4Cqf6xIXMBOd9C8TaaDcZ2/b
IdgqbY9KmJflMiCB/K3huqS6Z9YS53QF2WflN+20VhNeYZwsnipwhzApz/IACEBP
Th+ji+QC1W/slYD8Fbyxyh5HolowdYSikHIxAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUgQlsTAbHcEYGbuoO9TTqVsWo6J0wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2dRbHNUQWJIY0VZR2J1b085
VFRxVnNXbzZKMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAx
npMwDQYJKoZIhvcNAQELBQADggEBABltJNJCFnGp9S2DSUIoVzit2rHVC4CP6v3L
jRznm2EtZsQj0u1WEz/27SMk7rUbNlTwVKEK0KwLKcp/c7GEGBcqRp5tMhsJmDDN
ek5RfXN9XYdZQPvcIGQYZbDcb382TcLu+4i8mJUXnu/w4vklflWNXS3XkOqnKh4f
nIJ/uRRtAp7LpsS+WWEH6YLIJ/3+oPhkTCnTmYMPDT0WtMgiJpViL4M6m8ZG1xK3
tTstHyDpwcqGQewZEVe+d0JH1fP4cGPcSDxUTzBld8nwieWxhb8WunQw9Sq1QSd1
zIYu7TBsiT6iI/0LKoZniIAC8nIvnC+Gx8ERlX+0GyzleZA++Sk=
-----END CERTIFICATE-----