Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tQkHtfcY7os1MpEo8p3rujuCpgc.roa
File:                     tQkHtfcY7os1MpEo8p3rujuCpgc.roa (raw, json)
Hash identifier:          26x0Y3kXxH7Aj8q+jdGo1r0BYlGTn+8Zmp+mBIwv4cQ=
Subject key identifier:   B5:09:07:B5:F7:18:EE:8B:35:32:91:28:F2:9D:EB:BA:3B:82:A6:07
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       12B2
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tQkHtfcY7os1MpEo8p3rujuCpgc.roa
Signing time:             Wed 29 Sep 2021 02:54:51 +0000
ROA not before:           Wed 29 Sep 2021 02:54:51 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24164
IP address blocks:        49.159.136.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4786 (0x12b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:54:51 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=B50907B5F718EE8B35329128F29DEBBA3B82A607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:90:60:fe:35:04:0e:46:37:60:b6:fa:f9:ac:
                    b8:a6:26:4f:34:62:df:66:6d:b8:07:4e:f1:17:79:
                    be:22:57:24:89:f2:ef:f0:13:df:a7:af:9c:9d:3a:
                    27:f5:a8:d8:0c:d9:87:2e:4a:ca:c6:b0:8c:02:31:
                    65:7b:86:ee:de:2e:cc:0f:f5:5d:fa:23:ef:22:88:
                    7a:cd:c8:bb:d0:2c:fd:68:ee:5a:72:c7:61:fe:df:
                    2f:fa:b2:05:57:cd:5d:40:81:f7:40:ad:48:5a:24:
                    42:96:8d:b8:52:2c:b1:64:3a:28:8d:c9:56:9a:73:
                    fa:76:22:bd:75:52:b6:1a:b9:2e:a7:31:2b:c2:46:
                    1a:47:a0:26:de:1b:7b:85:6f:df:7f:ce:4c:21:78:
                    9e:6b:1a:fd:1e:2a:0b:f6:18:44:88:47:a7:13:fb:
                    93:c2:da:42:5b:8a:e8:da:b7:21:85:4a:38:a2:10:
                    37:88:43:19:ef:d1:d9:17:41:d1:14:af:74:74:ca:
                    de:4d:9d:7d:b3:38:1f:7d:0c:08:b1:a0:08:44:1c:
                    77:bc:13:31:15:a7:5b:79:eb:4b:ed:11:70:e4:68:
                    3a:24:f7:7c:f9:06:84:24:33:21:fd:d2:c2:e1:fd:
                    f2:3c:ea:ae:a1:f7:15:9f:e9:d5:33:27:ed:f7:e1:
                    86:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:09:07:B5:F7:18:EE:8B:35:32:91:28:F2:9D:EB:BA:3B:82:A6:07
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tQkHtfcY7os1MpEo8p3rujuCpgc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.159.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9c:50:ae:cc:ad:2d:bd:bc:a5:72:09:f5:53:b1:c0:57:04:d8:
         27:d0:48:50:1f:f4:85:2a:ed:39:19:52:29:fc:87:31:58:51:
         a5:40:fe:02:28:a8:cf:ce:1e:72:f4:b2:5f:b0:92:f2:77:11:
         02:87:90:81:20:98:58:72:58:3d:3c:3f:11:9c:09:da:0c:43:
         7d:21:38:79:90:63:7b:ea:da:b3:27:aa:e8:7d:72:fe:02:c1:
         00:a4:be:24:78:5e:5e:ab:d3:f3:fc:1c:f6:a7:6e:7e:18:4e:
         ee:bd:16:82:e7:e9:36:58:64:95:f7:ba:17:ad:b9:33:a9:c4:
         e7:85:66:be:c7:21:95:4c:f6:8c:73:48:98:38:02:f6:ba:8b:
         1a:32:f4:3b:cf:4f:15:ff:03:6a:af:0d:7f:04:15:bb:36:70:
         cc:7d:3f:73:af:e6:18:27:b5:45:8a:28:c3:c2:ec:e4:6f:09:
         48:05:ce:2c:61:df:c6:8f:45:59:e7:c1:05:5c:84:3a:40:cd:
         31:22:06:87:c8:e8:ac:4d:d3:f6:d4:f7:e1:3f:d0:b0:31:b6:
         a7:16:24:b7:8d:5f:92:dd:70:45:7e:2b:06:0c:58:08:74:e8:
         a0:9e:a1:60:46:a8:1f:f8:d7:b6:6d:c6:09:9d:ba:9c:cb:94:
         54:05:ff:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----