Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/w5f20LjyoZ6liBalzFoscwu2SRM.roa
File:                     w5f20LjyoZ6liBalzFoscwu2SRM.roa (raw, json)
Hash identifier:          ZS+tu00QlX7v2T4iDPFCB0g0Cnbjm7ppxezZYY+fNCQ=
Subject key identifier:   C3:97:F6:D0:B8:F2:A1:9E:A5:88:16:A5:CC:5A:2C:73:0B:B6:49:13
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1407
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/w5f20LjyoZ6liBalzFoscwu2SRM.roa
Signing time:             Fri 29 Apr 2022 03:42:07 +0000
ROA not before:           Fri 29 Apr 2022 03:42:07 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24164
IP address blocks:        114.198.162.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5127 (0x1407)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Apr 29 03:42:07 2022 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=C397F6D0B8F2A19EA58816A5CC5A2C730BB64913
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:03:6e:4b:3b:77:a8:4d:ae:39:7c:08:cb:8f:
                    e9:d0:cf:69:3f:ff:e5:95:bb:70:3b:7d:00:0f:74:
                    cd:3d:01:97:17:16:75:5f:c1:9f:cc:30:7a:81:81:
                    b7:18:cd:95:30:3e:f0:27:68:b6:37:c8:8f:d8:63:
                    11:30:4e:69:93:83:f4:c6:63:09:2f:46:2d:92:1f:
                    9e:d5:cf:84:0b:90:b4:15:c3:ed:e4:1a:17:9f:69:
                    3d:11:ef:b3:70:75:ad:16:ae:ec:1d:c9:ac:da:7b:
                    9d:66:0f:b9:db:f3:9b:47:37:75:e6:9d:55:b4:02:
                    87:66:d8:dd:0d:a7:a0:26:96:f0:4c:fa:cb:f5:70:
                    f9:dc:03:7e:43:a1:ea:87:39:8b:63:18:8f:02:14:
                    ac:9f:8b:fd:11:f8:03:cb:b3:e6:f2:13:d3:12:c1:
                    dc:86:d2:23:45:23:37:97:26:47:dc:68:41:12:39:
                    5b:59:8d:16:24:36:14:ba:4f:45:85:7e:3c:b9:0e:
                    97:6e:c0:39:3d:ea:f9:43:32:e2:d3:fe:40:0e:88:
                    c8:be:f8:ac:41:3e:4a:c5:ee:27:49:7d:f0:ec:2f:
                    45:82:ab:50:5c:4f:47:7e:30:8c:2a:57:3d:70:e4:
                    82:a5:c6:03:1e:fd:b9:d1:3c:69:64:ed:31:a9:a3:
                    d7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:97:F6:D0:B8:F2:A1:9E:A5:88:16:A5:CC:5A:2C:73:0B:B6:49:13
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/w5f20LjyoZ6liBalzFoscwu2SRM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.198.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:7e:c6:09:23:36:d4:9d:6a:cb:ef:80:e7:1a:16:9e:41:c3:
         e2:84:81:47:99:11:29:61:7a:3a:ef:a9:21:b7:c5:7a:ac:9d:
         55:26:40:7b:a5:09:bc:6a:f9:6f:e3:91:50:3a:62:6c:9d:5b:
         1e:a4:aa:c5:28:5b:be:2c:ee:4c:3a:fc:18:a7:85:e5:3b:01:
         cd:ef:3d:c6:ad:87:eb:e9:f8:29:3a:03:73:d3:1f:f4:97:64:
         a0:60:b4:25:47:fb:9e:51:25:57:f6:3d:35:1d:12:66:f0:4f:
         3f:b7:bf:77:a7:e4:18:8d:f4:85:b5:02:fd:9c:fb:a1:61:bf:
         a3:04:5c:b9:91:ee:49:e2:ad:ca:0e:32:2a:f9:60:67:1e:51:
         a2:aa:66:6d:cb:4d:ba:bb:cf:8a:df:5b:65:3f:ab:93:33:26:
         0a:26:7b:53:94:aa:ef:e4:78:b5:65:32:bc:83:73:b2:6f:ad:
         ce:75:b7:e5:af:92:76:e1:3a:a9:0d:01:31:6f:1f:08:12:f3:
         9a:a6:7d:9e:39:d9:9a:9d:6d:9d:f5:ae:5c:c0:00:66:af:e7:
         b8:1e:b4:07:7d:31:e3:f6:f4:14:59:40:bc:e5:58:f5:66:5b:
         1e:f6:bf:21:da:e6:1d:59:41:33:24:3c:2b:84:38:e0:e7:a8:
         5a:9d:77:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----