Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/vF3ezj0OkORCTT2EVC44a5ELWZM.roa
File:                     vF3ezj0OkORCTT2EVC44a5ELWZM.roa (raw, json)
Hash identifier:          ZidfJ6YTTc1qbbblfWDFvfpbMsBF26AkoqALw10KhcY=
Subject key identifier:   BC:5D:DE:CE:3D:0E:90:E4:42:4D:3D:84:54:2E:38:6B:91:0B:59:93
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       12A7
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/vF3ezj0OkORCTT2EVC44a5ELWZM.roa
Signing time:             Wed 29 Sep 2021 02:54:50 +0000
ROA not before:           Wed 29 Sep 2021 02:54:50 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24165
IP address blocks:        49.158.224.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4775 (0x12a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:54:50 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=BC5DDECE3D0E90E4424D3D84542E386B910B5993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4e:69:d2:f6:8b:f0:b6:70:ba:ca:ef:e0:87:
                    e2:73:32:15:25:41:f6:b5:f0:c9:37:31:53:94:d2:
                    a4:da:15:af:49:6e:99:22:15:a0:09:59:36:3f:86:
                    8b:9b:21:28:80:9f:55:a3:da:3e:14:fc:8c:1d:aa:
                    28:ef:c0:90:fb:59:2c:3f:b9:e1:c3:a6:3e:8b:be:
                    29:04:1b:56:01:98:e2:86:2c:83:28:19:d4:f2:0a:
                    01:e2:21:2e:c1:01:39:29:7c:00:54:02:eb:73:d7:
                    a4:7f:7d:f3:98:01:b1:77:13:51:de:ae:c7:25:42:
                    86:90:3e:6e:37:cb:74:cb:84:b6:87:e7:72:b8:39:
                    61:b6:e8:ca:2f:75:44:c3:f6:58:4f:0c:94:c7:cf:
                    37:c5:bf:7b:41:02:2a:46:f3:2f:54:20:65:08:3f:
                    22:a9:d6:c6:e3:9e:5b:b8:ab:b4:e0:81:5f:fa:ae:
                    07:db:6d:c2:77:52:d6:51:bc:aa:0f:1d:69:55:6a:
                    6c:15:b5:30:43:2f:89:70:bb:e1:8f:72:17:0f:df:
                    46:88:2d:52:fe:c4:6c:17:17:ce:0e:40:b8:22:0e:
                    c4:3a:02:aa:e2:78:43:2c:9e:89:21:70:48:30:47:
                    20:fa:86:ab:b3:80:f8:84:12:50:e7:0b:4b:1c:0d:
                    2b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:5D:DE:CE:3D:0E:90:E4:42:4D:3D:84:54:2E:38:6B:91:0B:59:93
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/vF3ezj0OkORCTT2EVC44a5ELWZM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         80:9f:e8:bf:c3:5a:f9:26:9e:4c:76:75:68:70:6a:12:ae:80:
         22:7d:22:ac:be:cf:82:66:de:4e:72:b7:f3:68:33:70:64:5a:
         98:df:8c:89:92:bf:a6:0f:41:ea:d2:97:75:88:94:35:81:8d:
         22:80:60:fb:c1:77:56:07:33:14:68:3c:22:12:e0:fe:83:3a:
         c9:b5:86:f0:22:ee:7f:0d:03:d6:fa:82:12:aa:c6:eb:e9:24:
         b7:eb:72:86:63:75:97:bf:c3:fc:ec:76:c6:ab:56:93:10:2a:
         be:7d:0d:8a:9f:e9:a1:c4:41:3a:9a:49:e4:78:7e:71:f4:da:
         f5:ed:00:01:01:a8:9a:62:9b:63:16:33:f0:8c:b3:b7:d0:ee:
         8e:ec:00:ce:13:11:4e:9a:80:06:8c:1a:59:80:29:df:ce:52:
         f0:fb:0e:6b:1d:e6:13:f3:64:60:4b:08:24:5a:f8:c5:26:cc:
         a5:f9:b9:48:9e:17:f1:77:49:37:c7:cb:43:ab:9d:7d:2f:f1:
         f9:b7:3a:52:e6:22:4b:f4:14:bf:09:a7:44:60:a2:46:ea:b1:
         01:b4:bd:67:a0:ff:d2:49:bc:9b:1d:70:78:53:94:40:ca:5d:
         5b:39:b5:ea:93:c1:e3:b1:17:2b:17:83:2e:f5:dc:ce:da:87:
         95:6c:38:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----