Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/v7c8mDItIInCKMGJBDl8WawRVBc.roa
File:                     v7c8mDItIInCKMGJBDl8WawRVBc.roa (raw, json)
Hash identifier:          ZSNyRwpuV+qiTruiKRCwN8rTepa1PIHTlBLpyhlpRh4=
Subject key identifier:   BF:B7:3C:98:32:2D:20:89:C2:28:C1:89:04:39:7C:59:AC:11:54:17
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       12D2
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/v7c8mDItIInCKMGJBDl8WawRVBc.roa
Signing time:             Wed 29 Sep 2021 02:55:02 +0000
ROA not before:           Wed 29 Sep 2021 02:55:02 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24163
IP address blocks:        61.61.236.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4818 (0x12d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:55:02 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=BFB73C98322D2089C228C18904397C59AC115417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a3:b8:94:97:22:6d:e9:d6:27:fc:f4:90:97:
                    0e:5c:bf:50:57:e3:20:ab:8b:b2:a4:08:3b:90:ae:
                    fd:9e:37:c7:89:09:d2:9f:41:2a:1c:92:d5:07:38:
                    aa:15:58:5a:b5:31:65:88:79:38:00:87:33:3b:ba:
                    ed:37:da:cd:01:a4:7f:95:a5:3e:f0:c9:05:bc:07:
                    15:76:79:6b:8a:c1:44:d4:2d:2c:d1:7f:fe:ad:0a:
                    df:2e:5f:7c:86:d2:84:15:1a:33:e9:77:95:98:c6:
                    c9:32:53:80:5f:9c:b6:88:be:d0:9a:c0:b4:a3:f4:
                    fe:c1:98:5a:b5:dc:db:55:48:a4:ad:5a:a0:10:a4:
                    cf:64:e1:e2:cc:a8:62:f2:62:2c:af:da:6e:67:28:
                    1c:17:cf:33:40:30:b9:6b:1d:eb:5e:bc:83:d3:f6:
                    a3:3f:fe:5c:a6:02:f2:cc:7d:68:5c:ad:24:4e:ca:
                    4b:1c:40:50:a3:a9:2a:26:18:38:9e:34:47:cc:d8:
                    ce:51:54:a1:7c:84:a9:a7:49:1b:c1:12:0f:ca:cf:
                    d4:ca:e4:e2:c7:80:a3:5f:d7:2f:7f:a7:d6:a3:be:
                    87:90:16:d2:67:80:35:3f:52:50:47:65:af:55:2d:
                    ed:73:7e:60:86:58:84:3c:a0:d0:42:f8:ff:1d:2d:
                    87:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:B7:3C:98:32:2D:20:89:C2:28:C1:89:04:39:7C:59:AC:11:54:17
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/v7c8mDItIInCKMGJBDl8WawRVBc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.61.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:1f:11:50:24:24:c8:68:f6:fe:47:12:9f:4f:45:10:9d:c1:
         f7:cc:b0:3c:fd:90:d8:c6:23:e8:3e:f3:b7:97:e6:5f:5a:67:
         f6:c6:63:10:02:d2:08:60:62:80:25:f7:2a:19:a1:3e:bb:6f:
         95:00:21:58:78:e7:c0:5d:58:84:f3:ab:cd:8b:20:a0:99:40:
         9a:97:66:0c:10:88:5f:54:ab:87:00:12:2a:60:6c:ef:f1:fd:
         eb:1f:8b:e1:96:de:82:8a:4d:93:4b:80:d5:c2:56:98:f9:02:
         cd:d6:44:0c:60:1d:e4:d2:11:09:23:23:ef:79:56:7b:6f:ff:
         d5:99:2c:2f:0d:53:3e:33:cf:3d:82:21:8e:e0:ca:f7:3e:47:
         e6:e0:8f:14:d3:87:d5:d1:99:11:f6:9d:8e:23:ad:e6:2d:dd:
         ac:89:40:3a:a0:8b:e4:6d:e5:7c:16:af:71:d0:d9:e3:6d:7f:
         fc:a9:e7:43:b0:06:8c:b4:45:b1:39:de:1b:a9:1e:d5:9f:09:
         79:d7:54:fc:93:4f:2c:d1:c4:f6:23:7e:a5:7d:f5:5b:1c:24:
         dc:21:c2:5a:af:a6:ff:c3:c8:17:92:ea:75:92:df:5a:ea:b7:
         ed:6c:30:ba:86:9d:42:e2:4b:3c:6c:07:ee:d4:d1:b7:13:64:
         30:b0:ea:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----