Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/h9UPx5ePF4b9oUTI8zbgHFC-QR4.roa
File:                     h9UPx5ePF4b9oUTI8zbgHFC-QR4.roa (raw, json)
Hash identifier:          HlcRZDPE1sLZydyzhsCBGKvHIAiVnHUxx8jwwd1aFFU=
Subject key identifier:   87:D5:0F:C7:97:8F:17:86:FD:A1:44:C8:F3:36:E0:1C:50:BE:41:1E
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1233
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/h9UPx5ePF4b9oUTI8zbgHFC-QR4.roa
Signing time:             Wed 29 Sep 2021 02:54:18 +0000
ROA not before:           Wed 29 Sep 2021 02:54:18 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24164
IP address blocks:        49.158.80.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4659 (0x1233)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:54:18 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=87D50FC7978F1786FDA144C8F336E01C50BE411E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:53:b7:8a:cf:53:10:5a:20:17:9f:0e:15:f4:
                    9c:8f:55:b9:34:14:c1:1d:b2:37:a7:74:f7:97:35:
                    28:d8:dc:bf:7d:6e:02:62:c3:c2:33:fa:ef:36:9a:
                    f6:90:a5:9b:75:02:9e:58:e1:87:49:9b:78:40:8d:
                    fc:9b:a5:fc:3e:14:5e:1c:bf:53:24:4c:5a:6f:3b:
                    c3:bd:8a:26:ed:d0:5d:69:cd:43:ea:d4:e8:da:94:
                    a8:49:48:bb:3a:3c:e8:5b:42:ab:68:2e:27:91:e9:
                    4f:d3:a7:ba:0a:e1:9f:21:35:45:a0:30:2d:06:0b:
                    33:78:bc:f3:b2:55:18:bd:50:37:37:8c:e7:90:b3:
                    c3:42:d5:f1:51:2d:b1:df:2f:a8:0f:79:06:2f:a9:
                    85:de:19:10:d0:c0:c6:a7:31:f2:8f:29:63:ac:6d:
                    55:cd:dd:96:83:a6:bb:43:c0:ec:5f:bb:bd:89:62:
                    23:6f:4c:7a:48:e5:51:15:c1:84:b5:27:70:17:c0:
                    fa:32:65:32:ca:d4:d6:f7:71:09:80:48:73:fc:6b:
                    46:05:9d:db:02:f1:14:20:a8:e1:ad:13:f7:7c:68:
                    72:0b:45:aa:fc:52:0a:2e:5d:d7:92:5b:7b:6e:0c:
                    c2:22:a0:e6:a4:85:f4:b3:36:dd:99:12:c8:5c:bf:
                    fb:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:D5:0F:C7:97:8F:17:86:FD:A1:44:C8:F3:36:E0:1C:50:BE:41:1E
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/h9UPx5ePF4b9oUTI8zbgHFC-QR4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         76:70:8b:35:db:ca:51:f7:34:34:0d:33:4c:94:db:e3:9a:9d:
         a3:a7:4d:b6:49:33:ae:67:79:7c:20:bd:b6:69:b8:70:69:f5:
         21:7f:68:79:35:59:a9:04:d9:68:51:92:cc:c7:a5:dc:70:67:
         62:69:e0:9c:a9:b3:bd:49:7f:f9:a8:f6:98:26:5b:0b:fb:fd:
         2c:05:be:29:d0:6e:09:a9:f9:42:e9:95:8a:53:a9:dc:09:67:
         a0:c4:be:49:75:50:22:24:a0:33:36:28:a3:b6:6a:da:ae:0d:
         2c:9a:fb:c5:67:e6:2f:a1:83:2e:16:19:83:e7:25:5d:4a:bc:
         48:21:11:9f:3d:13:a0:66:54:7e:4a:22:29:9c:14:cb:74:d9:
         58:2c:2f:b7:78:5a:bc:e9:62:d8:d4:78:23:80:50:f5:a4:b2:
         af:75:c7:30:5e:8d:98:2a:c7:43:48:45:9a:b8:e4:11:1e:d4:
         29:3d:42:74:03:cf:85:43:f5:49:05:0e:b7:99:7b:1c:e7:90:
         16:86:ae:91:8a:78:bf:b2:4d:5e:58:e0:46:61:ba:d6:c5:db:
         d5:0e:01:d5:3a:87:46:f3:be:ec:98:af:95:c1:b3:3d:1d:c7:
         97:45:e3:89:9c:f5:c0:37:a3:41:69:56:4d:aa:63:96:7b:51:
         17:e9:c1:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----