Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qdbovc5Zf2iubpY1oYaDw4u7f6M.roa
File:                     qdbovc5Zf2iubpY1oYaDw4u7f6M.roa (raw, json)
Hash identifier:          YoNa4sCn3+JAF3NDKghrg5G83I/C+am8wY3FzUdcJo0=
Subject key identifier:   A9:D6:E8:BD:CE:59:7F:68:AE:6E:96:35:A1:86:83:C3:8B:BB:7F:A3
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1241
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qdbovc5Zf2iubpY1oYaDw4u7f6M.roa
Signing time:             Wed 29 Sep 2021 02:54:22 +0000
ROA not before:           Wed 29 Sep 2021 02:54:22 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24164
IP address blocks:        114.198.172.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4673 (0x1241)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:54:22 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=A9D6E8BDCE597F68AE6E9635A18683C38BBB7FA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:98:8c:6d:dc:5b:8e:db:c9:d4:77:0f:7f:b4:
                    34:4b:e2:e6:da:b8:2b:b5:c4:f1:ca:47:4b:3e:de:
                    6e:e4:4c:9c:90:14:67:f4:7f:8f:b0:8e:bb:b6:f5:
                    bd:f0:3b:99:46:15:11:86:f2:49:e3:7c:a7:14:f3:
                    54:55:dd:20:59:c4:bf:00:f4:17:25:0c:89:88:26:
                    e3:cd:e7:12:47:1a:92:e9:d3:63:74:9e:64:8e:12:
                    0d:0b:91:b2:2b:e5:07:bf:0a:0b:98:26:71:fc:45:
                    3d:02:d6:1c:9d:c6:f2:8d:6e:b9:7d:62:c3:fa:c8:
                    54:89:fb:1f:ac:5c:03:e4:83:e4:1e:65:28:0e:88:
                    e5:6f:c6:a3:f5:f4:7f:6f:72:68:a3:35:40:94:9a:
                    80:79:b8:21:22:c5:63:65:1e:5b:2d:ff:3a:e0:f3:
                    7b:76:4a:f6:38:f4:53:90:54:55:9d:c3:a9:2c:e9:
                    85:6e:cd:82:54:0c:ca:38:6d:c8:0e:66:b0:75:72:
                    b4:b3:22:f0:e7:41:a8:2e:f7:31:76:70:29:4d:3b:
                    69:08:40:fe:a1:66:27:ad:09:a4:44:9b:5d:c4:65:
                    f6:56:89:6a:a4:87:93:a4:23:26:28:5f:dc:fc:d6:
                    37:ef:fc:de:ba:26:90:4e:10:31:f7:bc:79:cf:fd:
                    02:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:D6:E8:BD:CE:59:7F:68:AE:6E:96:35:A1:86:83:C3:8B:BB:7F:A3
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qdbovc5Zf2iubpY1oYaDw4u7f6M.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.198.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:3b:0d:e8:28:eb:da:d1:c6:a8:bf:2f:ad:f5:5e:0f:99:28:
         60:a7:24:8a:5d:27:96:fb:fb:b0:87:81:3d:3a:cd:7e:18:27:
         1c:31:31:3f:13:66:f2:d4:23:4d:ad:68:6c:60:fe:d5:f7:12:
         67:0f:37:4b:62:0a:fa:fb:d2:d5:74:d4:3c:75:64:19:97:f6:
         61:53:ae:72:3f:91:cd:ce:86:c1:0b:c8:57:b7:57:02:c6:86:
         b5:25:2b:72:94:87:b8:11:da:69:28:87:ca:56:c9:6f:f9:54:
         c3:04:92:bf:b8:22:07:00:cc:35:5c:86:fc:ec:9f:59:c5:f3:
         1a:6d:5f:92:ac:a3:a5:6a:a5:bf:c9:10:48:45:d1:4d:91:09:
         2a:8c:f6:50:3a:18:b8:a7:1a:19:5d:3f:d2:12:26:78:6e:ea:
         1c:cd:fe:1a:5b:cf:c3:ed:52:7f:a1:23:7a:3f:a4:a0:21:a2:
         4d:f3:62:79:2e:da:4c:30:5e:dc:ed:f8:5e:fe:bc:d3:e2:14:
         bf:a1:83:3b:8a:ca:59:28:36:ca:f2:82:c7:75:65:26:d6:60:
         f4:0f:da:da:0e:14:5b:e1:d2:fc:18:a0:ac:aa:96:f8:60:d4:
         8b:6d:28:13:b2:4b:d4:24:05:79:17:36:01:e2:1a:2e:b6:62:
         c8:58:63:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----