Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/uh6qqOwEinjG4b_BWaA55cf8NZo.roa
File:                     uh6qqOwEinjG4b_BWaA55cf8NZo.roa (raw, json)
Hash identifier:          Bl7zfG9ri4db0gbQ1C2Of5IKojPoNbO3y/BJlUUaO0w=
Subject key identifier:   BA:1E:AA:A8:EC:04:8A:78:C6:E1:BF:C1:59:A0:39:E5:C7:FC:35:9A
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0F6F
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/uh6qqOwEinjG4b_BWaA55cf8NZo.roa
Signing time:             Sun 07 Feb 2021 12:34:09 +0000
ROA not before:           Sun 07 Feb 2021 12:34:09 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24165
IP address blocks:        124.6.0.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3951 (0xf6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb  7 12:34:09 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=BA1EAAA8EC048A78C6E1BFC159A039E5C7FC359A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e1:89:cf:33:54:75:15:8d:7f:5c:7e:99:13:
                    67:9a:d8:df:11:16:c5:ac:7c:53:93:4a:55:6a:99:
                    f3:69:90:5d:04:75:85:2c:1f:e9:64:78:03:00:df:
                    7d:99:63:20:25:a7:02:64:4f:fd:d7:6e:25:12:a0:
                    fa:79:44:5c:d7:35:51:d5:57:36:11:e0:f3:b1:00:
                    6d:84:75:01:09:ac:1f:b9:8b:c9:59:8b:46:81:33:
                    cb:bb:1c:ec:5e:40:e8:a4:ea:8d:8d:f3:10:c9:17:
                    53:4a:ae:a5:50:01:e5:97:a3:c1:ad:cd:78:03:73:
                    cb:13:df:95:ea:ad:b7:ab:01:49:ce:88:9d:96:08:
                    45:e7:6e:09:d9:e9:df:76:9d:03:3c:f2:c0:8c:e7:
                    e8:72:ea:98:96:3a:52:6d:fa:3b:b4:40:1f:75:fc:
                    67:17:1d:43:de:96:ca:70:a6:f1:79:13:5e:f9:28:
                    b3:c6:ea:a4:0e:45:cf:49:ef:3f:52:f7:42:30:ce:
                    48:11:e1:06:93:af:9a:98:3b:92:3c:75:0b:39:2c:
                    34:92:4e:14:c0:eb:0c:70:39:dd:2b:9b:16:f5:bc:
                    5b:46:cd:fb:a9:36:2d:62:06:48:b1:04:4c:3a:23:
                    b1:19:85:d8:3e:1a:a0:ef:16:d8:69:66:d9:bb:56:
                    c9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:1E:AA:A8:EC:04:8A:78:C6:E1:BF:C1:59:A0:39:E5:C7:FC:35:9A
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/uh6qqOwEinjG4b_BWaA55cf8NZo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.6.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4d:89:ec:13:42:b2:cf:f3:02:c7:ae:97:5b:ac:19:78:70:c3:
         1d:d9:4a:3c:50:f2:f1:c3:03:e8:08:61:69:d0:94:11:3e:a3:
         f3:b4:88:22:c7:75:4c:24:5f:8f:f4:9c:ca:24:49:1a:1a:80:
         99:c2:3c:69:1d:04:4b:e3:88:bb:7a:0c:05:8a:bd:d6:3e:84:
         a6:bb:d3:9f:9b:99:b3:6f:5a:39:1a:a1:5d:32:28:e7:27:bc:
         2a:95:f4:0d:39:13:56:90:b1:fe:47:d1:e3:8e:a1:e1:07:15:
         7d:b6:88:a4:90:6f:a3:7a:d6:6a:3e:9d:60:4d:55:6e:0f:69:
         f7:60:f7:21:e3:93:d4:1a:b8:0b:c1:bb:2c:bf:a4:bb:79:1a:
         aa:ef:d3:dc:7c:6d:19:76:55:f9:a3:f0:db:11:90:7d:ed:89:
         16:e2:b6:2d:59:ac:54:ab:d2:d7:e2:41:2f:cf:76:76:8b:46:
         a1:ed:a8:ec:78:94:78:82:23:5f:7a:7d:50:43:55:20:97:c8:
         93:2b:38:18:c8:d2:fd:31:68:e8:de:77:39:06:fd:0c:11:54:
         06:90:af:88:f7:5c:cb:bd:25:bc:44:cb:20:c2:db:cc:62:a5:
         d6:cb:b9:99:87:e7:96:0e:19:d8:40:35:49:26:b6:f0:84:4f:
         f8:22:a5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----