Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ocppchVmVVWEPLu043xZ1bfyV5M.roa
File:                     ocppchVmVVWEPLu043xZ1bfyV5M.roa (raw, json)
Hash identifier:          z1TZAG+ZFRImUVeDhUFtMnDj9zWPjNruk7uZBzXs/Vw=
Subject key identifier:   A1:CA:69:72:15:66:55:55:84:3C:BB:B4:E3:7C:59:D5:B7:F2:57:93
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1091
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ocppchVmVVWEPLu043xZ1bfyV5M.roa
Signing time:             Sun 07 Feb 2021 12:46:15 +0000
ROA not before:           Sun 07 Feb 2021 12:46:15 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        49.158.48.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4241 (0x1091)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb  7 12:46:15 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=A1CA697215665555843CBBB4E37C59D5B7F25793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b9:ec:bd:7a:dc:a0:ab:f9:46:e7:27:b3:55:
                    19:4a:09:96:69:5f:00:1a:e2:2c:53:f8:dc:0c:fa:
                    6a:c5:0d:2d:d6:ab:97:c9:6e:fd:dc:b8:4a:e5:a2:
                    cf:05:5e:ce:ca:60:6f:4f:c4:41:f9:2a:32:a6:16:
                    ab:96:bb:ac:99:c3:e2:03:57:cc:6e:9a:e6:ed:15:
                    6a:28:69:80:43:9d:49:dc:c7:8d:da:c8:45:42:c8:
                    6e:2e:68:84:3e:b7:c7:da:4f:db:e5:bd:57:45:87:
                    54:8f:07:8e:f0:0f:0d:b1:77:f8:a5:b1:f5:88:2c:
                    6c:81:32:38:56:e1:2d:94:71:11:0d:0a:8b:60:f7:
                    38:64:51:e0:50:33:b4:ab:8b:2e:86:8b:9e:99:ec:
                    66:6d:d6:ff:da:22:ba:70:8a:c5:c4:ef:d9:4c:2e:
                    e0:2e:c6:4f:b6:51:90:eb:66:43:d6:85:fa:ae:6b:
                    57:16:b3:5e:66:a4:d5:d5:5a:e4:28:66:ea:a8:f9:
                    9d:e4:4b:dc:65:b0:f3:65:55:06:20:fe:f9:ab:68:
                    52:c9:bd:ab:ee:20:ff:8e:6a:aa:68:ef:3b:47:46:
                    44:e7:32:73:3a:cf:03:4d:c4:67:27:79:03:6e:af:
                    69:92:5f:10:68:a3:bb:57:e2:66:c5:42:4f:e2:f6:
                    f1:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:CA:69:72:15:66:55:55:84:3C:BB:B4:E3:7C:59:D5:B7:F2:57:93
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ocppchVmVVWEPLu043xZ1bfyV5M.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         09:ac:20:7a:ce:96:ff:cc:ba:a6:11:7a:0a:b2:22:9f:8c:f1:
         72:a9:01:2d:be:a0:e8:0e:df:d9:17:11:db:62:a1:79:7a:43:
         be:b1:46:37:d3:6f:6c:c6:5f:06:2a:3f:a2:29:a7:e8:54:0e:
         8e:73:77:47:34:15:da:d4:32:5f:27:86:6e:90:ac:94:a7:66:
         92:c2:fd:0b:13:b9:02:c9:ce:af:83:35:ba:1a:b8:90:c1:df:
         59:fb:dc:ff:fe:af:0f:bf:45:23:15:94:70:c3:c6:ca:fc:46:
         8e:74:f5:7f:e2:e4:02:9b:be:70:4a:f1:54:d0:70:78:ec:f5:
         b6:d5:a0:f3:fd:8c:42:31:74:02:29:3c:8d:4d:39:bc:b2:7f:
         21:cf:44:33:9e:6c:68:65:c5:c6:ec:71:24:97:ac:c0:18:98:
         90:51:48:46:b3:6c:04:97:84:a7:71:6e:23:98:93:93:c9:76:
         3e:18:15:7e:f8:54:cb:62:f5:15:5f:fc:63:2b:d9:29:12:a1:
         0c:f4:d8:fd:b0:8c:82:58:e2:71:0c:fb:57:55:c6:7b:82:2b:
         2c:37:24:dc:05:ff:6e:34:76:de:00:c9:6a:fd:0d:15:1e:1c:
         9c:7a:5b:42:14:b1:f3:df:14:8b:b9:21:25:77:9a:cb:1a:01:
         42:f7:42:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----