Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qpHV2dU677ruTbtdmrQ2hPTrpIE.roa
File:                     qpHV2dU677ruTbtdmrQ2hPTrpIE.roa (raw, json)
Hash identifier:          3//iykRRiH2tGail5OlGzfyuemOAVTVcPzJ6mE0Rr4Q=
Subject key identifier:   AA:91:D5:D9:D5:3A:EF:BA:EE:4D:BB:5D:9A:B4:36:84:F4:EB:A4:81
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1253
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qpHV2dU677ruTbtdmrQ2hPTrpIE.roa
Signing time:             Wed 29 Sep 2021 02:54:27 +0000
ROA not before:           Wed 29 Sep 2021 02:54:27 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24164
IP address blocks:        119.77.246.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4691 (0x1253)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:54:27 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=AA91D5D9D53AEFBAEE4DBB5D9AB43684F4EBA481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a5:6c:25:1e:1c:60:39:63:ec:d7:93:6b:0c:
                    14:d1:59:3d:41:b3:19:e5:66:39:55:aa:25:ce:2e:
                    98:c1:64:2b:d0:d5:75:36:49:7d:91:e7:f7:6b:4a:
                    52:b3:bd:62:a4:bb:48:37:a1:dd:35:d1:44:11:39:
                    d3:a3:6d:1f:50:f6:84:4a:00:f4:71:7e:4c:42:bf:
                    39:d8:8c:f6:5b:35:77:ae:b8:a2:e0:a8:05:42:24:
                    66:fa:f3:61:68:e8:44:2e:aa:11:11:54:2c:e6:ba:
                    b5:ae:ab:53:ed:3a:52:f5:b8:1d:cc:44:ab:f9:4b:
                    df:77:79:22:46:8c:5f:e1:61:8e:7d:9a:ba:28:53:
                    c6:1a:86:59:1b:fa:dd:10:a6:ac:8c:66:7a:fb:ee:
                    15:4f:df:da:63:c6:4d:54:c0:31:3b:b1:87:52:ed:
                    b6:bd:35:a3:8c:e7:15:a7:51:f8:fe:9e:d2:c2:43:
                    92:aa:9b:d7:9d:34:cd:18:06:53:86:11:a8:6b:b3:
                    6c:dd:12:d4:25:bb:f7:f8:ed:13:2b:cd:19:b1:cf:
                    2d:d5:62:f3:5e:57:3e:f3:c2:2a:62:2c:3e:09:33:
                    68:2d:ec:a5:7d:62:e5:68:fc:25:53:0d:e7:86:0a:
                    c4:46:6c:b4:4c:56:fa:ec:eb:67:75:e8:a2:97:c1:
                    6f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:91:D5:D9:D5:3A:EF:BA:EE:4D:BB:5D:9A:B4:36:84:F4:EB:A4:81
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qpHV2dU677ruTbtdmrQ2hPTrpIE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.77.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         83:d9:f2:57:07:4b:4b:df:d3:48:75:cf:5c:e9:41:a5:3d:94:
         a3:d6:39:73:34:d2:62:5b:06:9d:71:cb:f2:db:df:a9:f8:e7:
         5f:fe:26:db:d7:bb:15:68:9f:21:0b:ac:15:a3:35:46:0d:6c:
         6f:a6:f8:b1:42:95:94:8a:02:c2:74:82:13:39:9b:9d:44:20:
         ac:00:44:8b:5e:8d:2c:d6:6c:6c:be:6c:e8:8f:11:30:27:eb:
         f4:d6:b3:19:33:10:ca:da:4e:e6:5b:a6:40:a4:93:02:a3:31:
         7b:fe:df:91:3a:e3:0d:cc:de:99:0f:16:1e:41:26:3e:ce:65:
         44:58:c2:8b:05:b9:3f:7b:cd:15:e0:e5:22:40:bc:e2:c6:04:
         ac:58:40:c0:8e:c1:f1:b6:f6:c5:4c:ef:f8:2e:ee:48:6c:59:
         f7:55:3b:05:11:b2:17:ba:94:d0:04:5a:2d:e9:62:2f:f2:a6:
         bc:8e:f4:c5:ff:59:80:33:eb:db:70:ba:e9:91:65:f5:92:fb:
         4c:5d:ab:d1:aa:cc:1f:7e:8b:80:e3:d6:d3:fc:a5:88:b5:fa:
         18:0d:69:8f:92:86:eb:03:44:47:74:63:20:17:bd:56:6c:5b:
         83:86:29:2b:fe:35:70:35:24:5d:f9:d6:6f:37:08:4b:4d:57:
         b8:99:b9:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----