Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qdmrqZVFN354rTUhBcBhVJXWjaQ.roa
File:                     qdmrqZVFN354rTUhBcBhVJXWjaQ.roa (raw, json)
Hash identifier:          NkSi5/6lAfex0afWmVdWTFYOq1HMcwXQPIORYbHNsPc=
Subject key identifier:   A9:D9:AB:A9:95:45:37:7E:78:AD:35:21:05:C0:61:54:95:D6:8D:A4
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       120F
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qdmrqZVFN354rTUhBcBhVJXWjaQ.roa
Signing time:             Wed 29 Sep 2021 02:54:09 +0000
ROA not before:           Wed 29 Sep 2021 02:54:09 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24164
IP address blocks:        49.158.216.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4623 (0x120f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:54:09 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=A9D9ABA99545377E78AD352105C0615495D68DA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:55:59:be:02:52:2d:a0:3d:1e:f3:ce:ee:48:
                    24:33:0f:2f:de:81:08:05:7b:8f:f9:80:19:1a:a0:
                    69:99:85:eb:40:17:04:3d:c2:25:c1:b5:d2:1f:b3:
                    ad:f5:29:6a:04:82:97:8c:1e:42:70:56:76:1c:a4:
                    c3:97:d8:4f:f7:78:88:c3:6f:40:22:ff:9e:ac:ea:
                    92:ab:12:06:80:38:61:70:31:1f:9a:b6:b3:82:5d:
                    ae:36:97:91:d1:73:80:a2:24:db:40:37:4b:73:db:
                    f3:c7:b1:d6:4d:34:b9:e0:03:88:4e:be:68:21:fa:
                    7b:5d:82:fd:fe:98:9a:cc:cb:18:d9:fd:fd:5e:87:
                    90:59:7e:55:c1:07:bd:ce:0c:43:06:84:ab:61:49:
                    d9:df:ea:76:d1:91:5d:30:65:73:3e:1e:bb:ed:19:
                    09:c6:fd:7d:f6:81:d0:7b:6f:48:55:ab:1e:ab:5d:
                    35:3d:99:1b:4b:b4:43:7e:ab:43:79:5e:65:23:f2:
                    f0:c2:93:4b:59:81:f4:82:3f:89:ac:f7:3e:bd:e7:
                    1e:cd:ba:79:35:48:91:64:de:36:b8:c1:8a:14:25:
                    4f:04:22:25:82:2c:35:19:11:3e:85:ab:d9:72:b9:
                    22:95:67:3a:80:a8:73:8c:a4:e3:43:9b:30:e1:6e:
                    d7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:D9:AB:A9:95:45:37:7E:78:AD:35:21:05:C0:61:54:95:D6:8D:A4
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qdmrqZVFN354rTUhBcBhVJXWjaQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:2f:97:b0:33:17:8a:89:20:3a:14:83:85:86:7c:19:b6:f2:
         f4:22:72:3a:05:0e:b6:3d:70:4f:f8:4a:43:82:2b:cc:83:25:
         1a:13:ce:7d:d9:70:68:c6:3c:29:f8:81:50:6b:38:4d:2d:20:
         56:29:3f:cc:e3:00:8a:e7:28:5f:db:f7:27:ed:23:d0:27:c2:
         1a:52:52:eb:71:af:a8:8c:84:3b:38:14:e9:f5:34:6e:6e:93:
         2c:5f:23:5b:9d:04:76:7f:f2:17:30:d1:70:91:a1:81:ef:1b:
         14:b3:55:11:fa:f3:28:7e:75:0b:7d:4c:d5:56:a2:fd:6a:c3:
         06:5a:2d:5a:22:e2:44:e3:f2:93:81:59:16:d3:a9:16:c9:8f:
         ca:f1:70:a3:49:78:1b:bf:a3:8c:ab:9a:57:88:f3:c8:3d:2b:
         d9:a3:c4:9e:6d:a1:fe:3b:85:a9:ef:ea:84:3b:b0:bd:56:9c:
         10:44:cc:68:16:3b:ab:a5:bc:5f:b7:15:a9:7f:df:fe:ff:70:
         9e:59:41:e5:f3:a4:f1:52:9f:8e:26:e4:4e:99:a9:f9:29:d8:
         9c:64:93:bf:da:6f:21:62:19:3e:d2:24:bb:d3:41:57:ad:74:
         fd:c0:c3:bf:6f:be:9f:fb:bb:e2:c6:37:aa:50:e9:5b:3c:2a:
         9f:92:cd:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----