Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/n2LWBnKjdDiI2ca5QS9wuTnSMTk.roa
File:                     n2LWBnKjdDiI2ca5QS9wuTnSMTk.roa (raw, json)
Hash identifier:          UdxI7dw+ceyDXGx3JuC6lCy2W9A25LssSiP+6aE4PfQ=
Subject key identifier:   9F:62:D6:06:72:A3:74:38:88:D9:C6:B9:41:2F:70:B9:39:D2:31:39
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       14B9
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/n2LWBnKjdDiI2ca5QS9wuTnSMTk.roa
Signing time:             Wed 24 Aug 2022 04:02:11 +0000
ROA not before:           Wed 24 Aug 2022 04:02:11 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24164
IP address blocks:        2407:4b00:ff01::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5305 (0x14b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Aug 24 04:02:11 2022 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=9F62D60672A3743888D9C6B9412F70B939D23139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:41:8b:e2:1f:15:02:12:a7:9f:65:86:69:76:
                    45:6f:ad:9f:5d:97:64:5c:37:e3:47:2b:1c:a9:a0:
                    20:0f:5e:d4:62:52:00:ff:b9:bb:4e:8a:b0:a9:67:
                    09:cc:7a:7b:1a:3b:cb:d6:b6:dc:1f:cb:24:65:0d:
                    bd:3c:75:13:d6:8a:0a:0e:38:ba:4e:1e:a5:1e:46:
                    be:c6:c7:43:fd:7d:49:2f:ff:88:75:5f:21:40:3d:
                    90:43:f7:a7:c6:95:4e:51:9f:c1:3e:07:b5:b3:c5:
                    fa:3a:ef:84:fb:45:d6:dd:04:bc:7e:41:1c:82:97:
                    a2:41:5d:a9:ef:a2:72:16:c9:4f:b5:2b:b9:07:56:
                    9e:56:b2:2e:35:27:89:61:c1:8f:7f:de:41:1a:86:
                    26:af:65:d6:ed:11:17:ba:58:85:14:d3:43:bc:fa:
                    5b:f3:60:db:f9:96:32:b1:81:28:e1:29:d1:10:2d:
                    ed:09:df:2e:ca:90:af:43:86:f9:54:d5:01:1e:5d:
                    80:5a:8f:9f:75:1b:2c:a2:5b:31:d6:95:3c:5b:47:
                    b6:85:7f:4b:6c:e1:17:c5:ee:34:43:14:81:20:b2:
                    40:99:6d:23:47:36:4f:58:b0:ef:ee:d7:27:ab:a1:
                    ff:c3:bb:18:c9:4e:60:b6:cd:b0:99:56:ff:c1:0a:
                    5d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:62:D6:06:72:A3:74:38:88:D9:C6:B9:41:2F:70:B9:39:D2:31:39
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/n2LWBnKjdDiI2ca5QS9wuTnSMTk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:4b00:ff01::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:de:ab:60:f3:a7:e5:2d:af:a6:fd:8f:b7:5e:3e:bc:00:b5:
         84:13:0b:83:c0:15:b8:d6:62:b2:24:b5:ad:1d:72:1c:00:4c:
         e4:3d:c8:10:18:60:cd:40:ef:fe:91:eb:a8:66:78:47:30:2b:
         5a:21:1a:d4:16:ca:d2:61:a4:60:07:37:c6:9d:8a:e6:39:37:
         f5:bc:71:7e:4e:ef:20:b0:77:30:9b:b6:05:3d:0f:bd:2c:95:
         31:fd:fa:7f:45:3b:ea:ea:e9:01:76:84:48:d0:f2:2b:42:51:
         56:ea:fa:44:b6:bf:6f:7a:89:a8:00:32:87:7f:01:04:15:32:
         a1:49:ab:88:e6:5f:b0:dd:2c:36:b5:2c:db:39:3f:78:aa:80:
         67:ec:f4:b6:d0:33:45:15:bc:9b:b8:6a:c3:34:ee:e9:6d:ee:
         ea:ca:ee:84:7a:e6:84:0a:c2:af:15:d9:b5:16:49:2b:44:d9:
         73:8b:e8:5c:b7:f9:1a:0a:9b:cc:92:5d:ea:7b:e9:67:c5:ee:
         43:ba:70:9d:74:df:c9:aa:13:43:f4:0c:38:2c:35:f1:07:a1:
         a6:9d:ee:ad:f0:a7:25:37:25:2e:7f:8d:b2:40:76:48:ed:b8:
         1d:ce:50:b3:22:c8:d7:3f:f0:2e:6c:3b:0c:58:af:73:fd:bd:
         2a:e4:0a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----