Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/svKgtEvOSlPQQpPR2kBgYpQpwhU.roa
File:                     svKgtEvOSlPQQpPR2kBgYpQpwhU.roa (raw, json)
Hash identifier:          olDoN7n+pze0jonu0pI92HUnCAmkp3fBNOWPd1CVDVA=
Subject key identifier:   B2:F2:A0:B4:4B:CE:4A:53:D0:42:93:D1:DA:40:60:62:94:29:C2:15
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1275
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/svKgtEvOSlPQQpPR2kBgYpQpwhU.roa
Signing time:             Wed 29 Sep 2021 02:54:35 +0000
ROA not before:           Wed 29 Sep 2021 02:54:35 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24164
IP address blocks:        211.76.43.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4725 (0x1275)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:54:35 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=B2F2A0B44BCE4A53D04293D1DA4060629429C215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:20:33:48:ec:db:f7:2f:91:8a:71:47:39:1f:
                    ee:17:4a:cc:15:05:1a:6a:45:cb:b0:04:5e:19:25:
                    27:17:f6:d3:cf:a9:4c:47:e0:88:7b:77:3c:59:04:
                    70:2c:8b:e0:de:ba:f7:e7:a8:ca:f9:34:55:df:69:
                    00:97:63:10:6e:4f:6b:a2:4b:bb:6f:73:eb:dd:bb:
                    59:7b:32:1b:0a:91:a7:e4:1c:51:2c:ee:a4:b1:2e:
                    23:c0:16:24:db:24:f5:a7:05:31:8a:b3:9b:33:e2:
                    e1:d2:d7:9a:e0:7d:34:d7:b3:fe:08:2a:27:c7:d9:
                    85:df:c6:ab:a6:f1:0c:49:42:b2:6e:fb:2f:ff:d4:
                    9b:5e:d4:d9:31:6b:21:7e:23:2a:f0:d5:2a:a9:a9:
                    5e:3b:ff:8d:59:a4:4b:b9:16:18:aa:24:66:7f:36:
                    33:bc:b4:4b:48:cf:73:7f:1f:4d:7c:7c:b3:7e:c2:
                    33:98:5d:b6:f0:33:a5:d5:a7:43:8a:12:52:3d:2c:
                    a1:0d:e9:37:71:59:b0:36:39:27:ff:7c:18:02:3d:
                    8f:6c:91:28:64:44:0d:eb:14:74:ab:5b:54:a7:88:
                    2c:e7:c0:47:b4:68:85:31:11:71:27:0e:78:7a:8b:
                    fb:77:0a:79:2a:3d:da:ee:d8:16:eb:5f:d6:d5:7a:
                    35:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:F2:A0:B4:4B:CE:4A:53:D0:42:93:D1:DA:40:60:62:94:29:C2:15
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/svKgtEvOSlPQQpPR2kBgYpQpwhU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:07:fe:56:45:b4:16:54:76:59:f5:4c:0f:c7:b5:ec:e3:1e:
         58:bc:aa:07:16:54:fa:fe:91:63:f7:82:71:ad:bc:87:e3:da:
         a7:72:ff:b3:78:91:3f:50:33:1a:43:8e:86:58:78:ea:b8:42:
         9b:43:4a:5b:67:61:a5:77:80:16:40:a3:ac:47:50:0d:14:d8:
         56:f5:ff:35:cb:b3:06:db:59:c1:a0:c9:0c:0d:fc:0c:64:b5:
         5b:06:f5:47:ba:60:ce:db:2d:b1:19:4f:23:63:38:ff:ce:3f:
         36:ee:0a:77:0f:8d:e6:82:fd:0f:c3:25:4d:04:ef:59:a9:c0:
         3b:59:0a:bc:a0:18:0c:04:1a:1c:91:37:ae:40:b6:41:28:7a:
         76:17:73:8f:b8:63:70:17:11:92:11:5d:d8:6c:80:a9:3c:6e:
         32:75:2d:bf:e5:4a:34:84:18:55:6a:d7:6a:26:33:64:95:f9:
         30:3e:73:11:c3:c7:56:b6:2f:0f:81:e9:ac:9d:b7:1a:7b:7a:
         bb:9c:4b:b1:39:16:fa:e7:cb:d9:98:ae:2a:74:0f:97:d1:f2:
         f4:34:50:92:86:d8:d7:54:83:87:ec:fe:7c:df:07:a5:34:5d:
         e0:6b:57:21:49:a5:77:4f:a4:23:08:f7:55:f0:c2:69:1c:2c:
         03:e2:10:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----