Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lBrITJWe4fhPaYgmVK_0XRGmjuk.roa
File:                     lBrITJWe4fhPaYgmVK_0XRGmjuk.roa (raw, json)
Hash identifier:          x3ImxDz5NHJ5Pykf9/bq57caejfKYDTq3Y85nhK38MI=
Subject key identifier:   94:1A:C8:4C:95:9E:E1:F8:4F:69:88:26:54:AF:F4:5D:11:A6:8E:E9
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1113
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lBrITJWe4fhPaYgmVK_0XRGmjuk.roa
Signing time:             Sun 07 Feb 2021 13:03:28 +0000
ROA not before:           Sun 07 Feb 2021 13:03:28 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        124.6.28.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4371 (0x1113)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb  7 13:03:28 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=941AC84C959EE1F84F69882654AFF45D11A68EE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:08:dc:ab:9f:93:e4:f2:5d:c7:a3:b2:87:27:
                    5a:76:dc:55:00:49:43:2d:f4:5a:e8:79:dc:42:0d:
                    fc:3e:1c:cb:f9:c9:7d:c6:e7:a6:91:91:f5:d2:56:
                    93:13:b0:fa:55:fd:94:03:d3:54:d9:97:f5:05:31:
                    a2:74:59:e9:48:60:a8:e3:a0:ec:85:a0:c1:93:44:
                    4c:23:b3:75:77:eb:68:e2:ec:c8:b3:6c:84:f3:72:
                    f6:d8:db:aa:e2:40:fc:08:fd:83:5d:84:b7:c9:ed:
                    2b:b5:24:84:76:2e:10:8b:4c:4d:3b:a1:47:23:37:
                    d9:24:73:32:db:4a:36:71:39:ea:50:99:c0:df:4b:
                    f8:0f:9a:56:f8:bc:36:16:9d:f1:2a:84:a3:bc:62:
                    57:7a:94:7b:07:c5:57:e4:e6:07:b4:1f:42:40:86:
                    cc:6e:de:c6:eb:aa:15:f3:5a:63:8b:67:e5:0b:7a:
                    b9:40:01:70:23:7c:dd:12:24:75:b8:33:a9:09:8c:
                    5d:17:3c:a0:cd:0a:f5:ee:a4:1d:72:85:2d:05:69:
                    6f:d9:3f:d9:72:22:8b:38:7d:58:ba:e3:68:fc:f8:
                    52:c8:32:92:a6:65:c3:5d:5b:56:64:7b:79:7e:1e:
                    cc:f5:f9:2e:63:17:5b:07:49:34:9c:c1:98:95:6b:
                    13:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:1A:C8:4C:95:9E:E1:F8:4F:69:88:26:54:AF:F4:5D:11:A6:8E:E9
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lBrITJWe4fhPaYgmVK_0XRGmjuk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.6.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:3d:0b:0f:87:60:32:54:06:48:01:cf:52:8c:b7:73:c1:8a:
         a2:57:cd:ce:f2:18:1b:1d:83:c8:73:b4:4b:9b:69:87:d4:ad:
         fd:ad:d6:6d:39:d6:2e:b2:95:2a:76:01:72:cb:2d:23:cd:48:
         f6:a2:a9:96:53:63:49:c7:ad:c2:b6:00:54:c7:ff:03:d3:41:
         8f:8c:ca:a0:6a:b7:7c:08:37:c4:0e:02:9c:20:da:68:73:83:
         44:1d:56:09:2a:58:31:67:42:fa:55:c3:49:5a:8a:f5:96:92:
         cd:fe:64:8f:e6:33:cc:8e:0c:73:69:d2:4f:e8:15:49:aa:92:
         11:35:3c:2d:23:b3:32:7a:fd:ac:25:cc:1f:83:ae:4e:29:48:
         02:d4:e5:10:bc:0f:3c:5c:81:34:5d:3f:6b:8f:9a:3d:21:a7:
         66:43:b6:b4:54:26:a1:41:60:a8:14:fb:b0:aa:6f:d1:2f:9c:
         ec:91:1b:45:ed:5c:a0:f2:c1:e2:76:51:bd:12:88:65:23:cd:
         a8:84:62:2c:0f:0f:69:c9:8e:14:26:7f:57:a6:5b:9d:ec:43:
         d7:48:f3:8b:91:ef:9c:ed:10:36:d5:dd:20:39:eb:3d:83:b6:
         ad:fe:61:ac:bf:70:80:7c:65:f3:d5:4c:5f:c0:d7:d3:a7:9e:
         80:5d:b4:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----