Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/u7CID9CVua1AzgKXGsi7KII6z2s.roa
File:                     u7CID9CVua1AzgKXGsi7KII6z2s.roa (raw, json)
Hash identifier:          3TVap9qMA/jwM9IZhufLzcx9OQJimhiDgoGy+JWphx4=
Subject key identifier:   BB:B0:88:0F:D0:95:B9:AD:40:CE:02:97:1A:C8:BB:28:82:3A:CF:6B
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       12FC
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/u7CID9CVua1AzgKXGsi7KII6z2s.roa
Signing time:             Wed 29 Sep 2021 02:55:12 +0000
ROA not before:           Wed 29 Sep 2021 02:55:12 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24164
IP address blocks:        49.158.140.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4860 (0x12fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:55:12 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=BBB0880FD095B9AD40CE02971AC8BB28823ACF6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:9b:1d:3b:8e:cd:00:fe:a8:17:36:19:f2:19:
                    ff:c2:9b:d7:d1:92:81:b7:fe:07:ed:fd:b7:7c:76:
                    b0:ca:93:31:12:f2:9d:2a:46:2b:ae:ea:46:40:ec:
                    99:fd:c3:97:73:d9:5e:65:e5:89:85:cf:a9:6d:09:
                    2d:07:8e:fd:c8:5f:38:7a:d7:2b:85:69:44:d5:fc:
                    cc:e3:b2:65:04:e4:12:bc:30:bb:3c:e0:ca:dd:46:
                    a1:0e:56:1a:15:85:d8:b2:10:c5:40:5b:a0:60:0c:
                    33:59:39:b7:bb:c2:02:0b:32:5e:2e:e6:a6:f3:a3:
                    4e:3d:5e:d1:f6:e3:9a:5d:c9:74:fb:1b:e0:d9:dd:
                    c6:96:39:db:98:14:68:01:f9:d7:fc:c7:8c:57:f5:
                    51:9a:bf:88:0e:b9:9a:be:08:d6:90:21:6d:a2:ba:
                    69:8a:ba:b2:5b:4e:ae:bf:28:e3:7d:e7:04:59:ad:
                    78:b6:10:bb:de:0b:4b:16:82:63:3a:e9:4d:fe:4e:
                    69:33:9c:93:64:ee:11:ad:6c:00:37:2f:90:52:75:
                    99:e7:2a:d2:3c:c3:6d:be:01:1f:9d:a3:d1:15:f8:
                    79:ce:a3:2d:d7:05:65:9e:cd:b1:e5:da:e7:cf:8d:
                    33:80:d1:6b:f3:56:18:ac:cb:64:7c:8d:9f:b0:57:
                    72:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:B0:88:0F:D0:95:B9:AD:40:CE:02:97:1A:C8:BB:28:82:3A:CF:6B
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/u7CID9CVua1AzgKXGsi7KII6z2s.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:64:10:bc:90:87:1c:f3:67:7c:f9:8e:38:e9:94:d8:1a:58:
         f0:95:31:f0:c2:1c:7b:1e:18:0b:fb:18:f4:23:34:26:b4:ee:
         2b:66:65:0a:3f:26:5d:99:d4:48:bb:58:89:53:51:f2:40:4c:
         dd:ae:a2:30:02:3b:d7:6e:eb:f1:d0:c2:9f:a5:1e:41:8f:59:
         40:c7:d9:11:2d:b4:65:06:7a:fc:01:68:00:64:82:22:55:3e:
         a2:e1:a5:95:a7:20:49:d3:56:4e:a7:0d:bc:b7:1f:4d:ea:76:
         20:dc:7b:10:f1:13:aa:9a:ca:49:2a:62:b8:12:fc:80:04:36:
         25:f9:c0:33:16:e3:28:66:a1:56:73:cb:f1:62:d6:1c:92:0e:
         93:4d:8e:87:de:1d:77:27:fe:50:ee:43:b4:54:37:fe:43:9b:
         1e:13:3c:5c:07:09:1b:02:dd:e7:0c:87:d9:1b:7f:b8:ab:5c:
         fb:c2:e0:2e:bc:4e:20:10:a5:33:23:f5:8a:ac:be:77:f7:8d:
         c9:fe:f7:2e:27:5b:96:71:96:4f:88:3e:df:35:ad:d5:9c:d6:
         48:57:39:43:49:29:a7:8c:8b:0e:55:df:22:eb:08:7a:ce:8e:
         91:88:f4:45:b9:de:6b:61:20:58:bb:86:a5:85:a1:6a:e9:de:
         1e:cc:04:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----