Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ntyhK5MHB8GdVpwt_R-lI3bV7IM.roa
File:                     ntyhK5MHB8GdVpwt_R-lI3bV7IM.roa (raw, json)
Hash identifier:          d+2+5JuIABJot9yqgBuO3/RwQl3vr8bZCRRiE9kXfUk=
Subject key identifier:   9E:DC:A1:2B:93:07:07:C1:9D:56:9C:2D:FD:1F:A5:23:76:D5:EC:83
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       126E
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ntyhK5MHB8GdVpwt_R-lI3bV7IM.roa
Signing time:             Wed 29 Sep 2021 02:54:34 +0000
ROA not before:           Wed 29 Sep 2021 02:54:34 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24165
IP address blocks:        124.6.0.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4718 (0x126e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:54:34 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=9EDCA12B930707C19D569C2DFD1FA52376D5EC83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:42:80:84:a4:29:92:e6:97:27:f0:9c:da:6f:
                    98:23:15:7e:da:f1:29:71:8b:d7:c1:99:9e:09:b1:
                    d7:10:b0:77:df:58:2a:07:e4:42:7b:e1:8d:a5:0c:
                    69:aa:69:35:16:74:bb:07:bf:7d:ae:d8:a9:63:df:
                    20:1e:79:0c:68:7c:8f:ac:f0:3d:59:d8:32:0f:06:
                    54:c6:af:d9:e3:88:8f:e3:21:bc:a4:66:1d:1a:83:
                    82:ea:55:25:47:56:55:26:0a:55:83:28:f7:b2:94:
                    27:96:b4:9b:77:f6:9e:81:40:42:3c:dc:78:ba:cb:
                    fa:af:68:13:df:55:a6:db:ea:eb:20:b5:10:07:53:
                    1c:34:32:e5:07:b4:80:5c:76:b0:4c:a9:da:65:2e:
                    9d:3f:00:e6:cb:3c:0b:03:f4:bc:0d:af:7b:84:09:
                    de:09:d0:78:60:27:ea:bd:eb:1f:ae:94:d5:64:4a:
                    07:45:42:55:aa:74:1f:16:1b:17:32:ba:62:3a:eb:
                    ab:8d:44:39:9a:0c:91:74:13:3e:67:02:49:81:4a:
                    40:c9:8f:e4:30:1a:c7:15:93:2d:0b:05:44:64:40:
                    a5:ab:fd:be:ea:d8:36:d7:b3:fc:1b:f4:d5:3f:51:
                    b5:af:ef:02:0c:90:08:05:78:b6:0e:b0:ac:4a:bd:
                    f7:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:DC:A1:2B:93:07:07:C1:9D:56:9C:2D:FD:1F:A5:23:76:D5:EC:83
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ntyhK5MHB8GdVpwt_R-lI3bV7IM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.6.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         66:b5:d2:1f:7e:03:18:5a:3a:f4:3c:a9:cd:d9:af:81:e1:0b:
         ad:4c:9c:7c:a7:84:21:55:70:5c:2a:6e:57:2a:c7:2b:0a:8d:
         b7:3c:6e:12:3f:19:7e:02:be:c3:9e:1b:98:43:05:10:06:ac:
         8d:2f:4b:3f:29:04:49:48:9b:69:8b:01:d5:c0:a8:36:6a:e5:
         79:34:8c:90:d5:97:5f:1a:70:5c:a7:40:1a:b3:a0:64:ac:b5:
         3d:63:cf:33:91:08:eb:2f:10:9b:d7:45:65:ed:89:84:de:e0:
         db:4b:71:59:5d:a2:98:3a:70:a9:57:96:0a:6f:7c:bc:cd:66:
         76:e0:63:b7:fe:40:3f:d1:3a:a4:50:8a:99:f4:cd:ca:0d:92:
         f7:b8:82:42:d7:f7:3a:3c:b2:23:1c:87:76:aa:f3:04:af:bc:
         3c:79:62:19:2d:39:b6:42:c8:ac:b4:cf:30:dd:55:69:e7:16:
         ac:33:af:e2:ee:50:d6:b3:63:8a:ec:a1:17:f5:77:c8:8f:87:
         93:a7:fd:e8:38:78:97:14:c0:a8:7c:fb:cd:aa:6f:8b:c7:8b:
         6a:39:8a:3d:2d:d4:ce:17:da:7e:bc:75:4f:70:79:ff:88:9d:
         d1:58:cd:48:12:06:0b:42:8b:7c:cc:fb:04:78:29:f5:6c:09:
         72:76:6b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----