Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mnbzRk1a9ts9DbDEgI7OM7StcaA.roa
File:                     mnbzRk1a9ts9DbDEgI7OM7StcaA.roa (raw, json)
Hash identifier:          55AAOh534UpNmMZYDBcs5zZvOkqKFHVAhGZ6hxAx6js=
Subject key identifier:   9A:76:F3:46:4D:5A:F6:DB:3D:0D:B0:C4:80:8E:CE:33:B4:AD:71:A0
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       122B
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mnbzRk1a9ts9DbDEgI7OM7StcaA.roa
Signing time:             Wed 29 Sep 2021 02:54:16 +0000
ROA not before:           Wed 29 Sep 2021 02:54:16 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24164
IP address blocks:        49.158.40.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4651 (0x122b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:54:16 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=9A76F3464D5AF6DB3D0DB0C4808ECE33B4AD71A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ca:f7:32:dc:b3:d3:1d:81:9a:46:cc:8b:88:
                    a9:76:3f:9a:a4:fe:f6:c4:89:07:2c:a5:f4:7f:77:
                    13:b1:09:d9:7d:6e:bf:53:97:91:55:dd:4f:8d:7a:
                    ab:2f:f7:65:48:c4:e7:30:25:ac:8f:ec:ef:87:cb:
                    9f:e6:99:f6:58:08:15:68:09:14:a5:0e:dd:44:3b:
                    10:13:87:77:43:f1:4e:ab:f1:51:fe:c2:79:1c:e3:
                    43:3d:7c:0b:d0:76:ca:0d:bb:b4:49:ed:1e:d0:6f:
                    8c:7b:e5:1b:46:a1:3c:09:34:12:1a:b6:66:4e:65:
                    92:ae:a9:24:8f:7d:1e:9e:0b:96:41:5c:3d:ab:4f:
                    64:bd:1e:ac:de:10:13:98:c4:48:9d:4d:ee:26:93:
                    c3:0c:18:b7:d8:2e:16:ce:ed:a4:62:e2:60:ef:48:
                    e0:88:77:43:0e:2b:14:99:b9:a4:f0:c1:2d:2b:5d:
                    48:1f:9d:3e:be:29:e3:f5:33:88:8a:96:27:61:a0:
                    dc:bc:7b:47:17:13:6e:7e:3c:ec:33:62:58:59:4f:
                    d9:99:d1:55:4e:0c:81:24:73:e2:90:66:b0:5a:d1:
                    74:96:3f:07:6b:36:22:51:89:ac:fd:e5:66:cd:d5:
                    45:52:25:dd:e5:c7:10:43:9b:fb:e4:30:45:d8:c2:
                    86:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:76:F3:46:4D:5A:F6:DB:3D:0D:B0:C4:80:8E:CE:33:B4:AD:71:A0
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mnbzRk1a9ts9DbDEgI7OM7StcaA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         57:8b:e2:15:bb:96:0d:5c:18:5a:20:d9:db:99:d0:3f:96:f6:
         96:90:25:85:af:8b:71:1b:20:35:5c:19:69:87:09:6d:a6:a6:
         67:5b:46:92:7c:d5:c2:1a:a1:3c:ec:03:18:57:43:be:22:cc:
         01:6f:46:3e:12:07:e8:d3:83:cb:c2:17:52:1a:d9:0d:02:96:
         22:5d:99:6e:6a:71:43:58:72:fc:e3:e7:e8:ea:41:33:a3:fc:
         83:82:c7:41:1f:c8:9b:77:f5:a1:29:c8:72:e3:8d:50:9c:be:
         36:1f:0d:96:2c:86:4b:42:75:c3:da:5d:32:e0:19:b1:79:54:
         66:66:c1:a9:40:b9:20:58:ba:aa:b9:bc:b3:15:90:aa:71:08:
         0f:ee:00:14:73:e1:3d:c9:1a:18:69:3b:81:75:3a:dd:0e:09:
         da:d5:23:08:9e:de:d3:0c:88:5f:66:07:d8:30:0c:21:37:ca:
         e0:1d:63:61:75:e4:bc:89:9c:0c:1d:23:4d:4c:7b:d8:74:dc:
         c0:c3:d5:03:24:72:45:e2:56:9c:80:d7:b2:ef:c0:d9:03:c5:
         9f:2d:a6:e3:8a:51:63:0c:f8:31:6f:b6:2c:24:a9:43:bd:1f:
         d7:9c:98:ae:40:35:94:43:7b:b5:22:9e:aa:e3:7b:d8:c8:48:
         a8:18:84:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----