Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tGEOKM7p8cFQnZd03nYO4VzkfPU.roa
File:                     tGEOKM7p8cFQnZd03nYO4VzkfPU.roa (raw, json)
Hash identifier:          mIPKfBzaGUv4oS5xEt3FGbwBgqFX7s7ACGLJUQW+enY=
Subject key identifier:   B4:61:0E:28:CE:E9:F1:C1:50:9D:97:74:DE:76:0E:E1:5C:E4:7C:F5
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1396
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tGEOKM7p8cFQnZd03nYO4VzkfPU.roa
Signing time:             Fri 03 Dec 2021 10:18:30 +0000
ROA not before:           Fri 03 Dec 2021 10:18:30 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24164
IP address blocks:        122.254.40.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5014 (0x1396)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Dec  3 10:18:30 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=B4610E28CEE9F1C1509D9774DE760EE15CE47CF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e8:5f:13:23:ac:73:06:c1:f7:e5:4c:ea:7b:
                    2d:52:ce:cf:dd:43:f7:a5:3f:d2:37:c6:1c:08:0c:
                    bb:98:1e:02:d5:72:89:98:84:af:ab:d7:a6:e6:f3:
                    eb:11:38:c8:af:4b:e0:1c:a8:bd:6d:09:09:e9:90:
                    0b:04:91:93:80:55:b9:30:09:58:2d:2d:75:17:ae:
                    e8:2a:76:58:74:10:2f:6e:78:cc:c9:bc:6a:0a:db:
                    42:75:e0:9c:65:b1:dc:e2:33:6a:6e:f8:67:2d:d6:
                    19:33:03:2c:c3:b0:3f:84:d0:f4:1d:bd:35:5e:c9:
                    2d:ed:34:fe:4e:b8:dd:0f:a7:5e:b4:a5:d4:cb:9d:
                    20:5c:8f:36:e8:da:37:6d:a2:f4:02:38:1a:99:5d:
                    e8:53:ee:73:7a:00:0c:84:33:17:a1:fa:ce:8c:9d:
                    86:5d:e3:ef:ea:22:11:29:e5:0b:46:1c:8f:7a:d9:
                    4f:ab:00:32:ed:86:f6:e2:ff:f6:ec:46:70:49:22:
                    e8:f4:a8:d8:7c:5f:d2:a9:71:b1:e4:95:74:16:7c:
                    08:cd:90:81:f5:17:5b:e6:ea:97:61:59:18:c4:b5:
                    9b:89:07:38:5a:c4:f4:e2:b3:01:6b:33:e4:a7:06:
                    72:57:e1:89:22:b0:46:56:5d:13:98:5a:3e:e4:73:
                    d5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:61:0E:28:CE:E9:F1:C1:50:9D:97:74:DE:76:0E:E1:5C:E4:7C:F5
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tGEOKM7p8cFQnZd03nYO4VzkfPU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.254.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1b:88:b7:f2:48:26:9f:97:09:b3:56:f1:e8:b8:dd:ac:8d:a3:
         28:1c:0f:a0:29:f7:f6:2c:f3:30:cb:74:40:e8:ff:52:de:45:
         39:9e:51:5b:a4:e9:2b:92:74:0b:45:a9:39:9f:4b:f4:b3:31:
         ee:79:ef:36:55:a7:b4:d7:0e:c2:dd:c9:bc:e3:13:e0:ac:22:
         67:26:ac:eb:6c:b2:85:8e:8e:8a:15:99:e8:fb:da:e1:2d:4f:
         0c:05:02:33:6b:80:64:d0:0b:fc:da:c7:c2:5d:c5:d4:68:2a:
         25:8f:ca:83:40:a4:5d:fa:07:96:76:5c:8b:b6:d9:83:ea:e3:
         8d:c1:ae:10:be:32:b2:74:d5:54:33:91:b7:6c:6f:3a:3f:1c:
         ea:28:56:2e:28:e0:b0:96:66:bc:12:94:db:d6:ec:37:d2:09:
         5e:0a:08:79:0b:17:13:28:79:05:25:c7:f5:76:1b:f2:8a:a4:
         02:d3:89:f4:6d:5f:f0:c1:fd:a9:02:03:93:32:46:34:65:ff:
         57:a5:95:43:00:f4:fe:22:61:6d:c9:ac:7f:81:43:65:db:1e:
         91:81:8f:87:c0:68:8c:90:aa:72:fc:64:e4:f7:5c:58:8c:5f:
         59:6e:e5:dd:6a:78:bf:35:dd:50:45:13:fc:ca:d3:7d:08:94:
         0c:f8:ee:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----