Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/GcneCVXDtbH9WUhwsrFRWY5nPcM.roa
File:                     GcneCVXDtbH9WUhwsrFRWY5nPcM.roa (raw, json)
Hash identifier:          iAf7xGFpMJlmH9HuxCfTXMILk6dWs3VzAwBcTJ2cmWc=
Subject key identifier:   19:C9:DE:09:55:C3:B5:B1:FD:59:48:70:B2:B1:51:59:8E:67:3D:C3
Certificate issuer:       /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Certificate serial:       0790
Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/GcneCVXDtbH9WUhwsrFRWY5nPcM.roa
Signing time:             Tue 29 Sep 2020 10:06:26 +0000
ROA not before:           Tue 29 Sep 2020 10:06:26 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24158
IP address blocks:        115.80.0.0/14 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1936 (0x790)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
        Validity
            Not Before: Sep 29 10:06:26 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=19C9DE0955C3B5B1FD594870B2B151598E673DC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1f:67:ce:67:d9:74:1c:e2:f1:00:6d:15:b6:
                    7a:42:bd:5c:49:4e:9f:fc:bc:80:33:2f:2a:3e:ed:
                    54:cb:51:2f:70:c3:c6:81:ee:8b:d9:a4:fd:f3:8d:
                    d4:77:b0:98:f0:99:60:3b:74:5c:f1:5f:a9:e1:a0:
                    f1:66:74:ba:3e:90:90:ae:ab:c4:21:80:de:af:46:
                    f5:12:6f:f7:5e:09:2d:dc:a2:42:1e:ef:b4:c8:b4:
                    59:b0:1f:87:e0:ea:11:7e:bd:51:d1:c9:2f:fe:00:
                    82:b2:e8:d1:7a:4d:f2:66:42:bb:37:38:dd:b8:18:
                    17:c0:ca:e0:d3:ca:44:dd:47:5f:c4:1a:d4:ea:41:
                    32:de:56:5f:89:d0:1a:ee:fc:10:f3:88:88:53:f8:
                    92:6f:fe:08:73:6d:0c:9d:e8:d3:5f:91:f5:34:3a:
                    89:dd:20:f3:8a:16:5b:aa:99:8c:e3:8c:9c:7e:5f:
                    13:b0:d9:f0:43:91:73:24:a4:d5:b6:4d:1c:55:bc:
                    1b:ce:43:a5:20:1b:6d:9d:c5:85:12:d2:84:bf:8d:
                    c5:56:11:5e:9b:44:8a:e7:22:e9:93:a7:a5:67:d0:
                    1d:f6:b2:9c:f6:24:27:71:65:2e:3e:a0:7f:37:b6:
                    69:bb:b5:e5:49:e4:70:cd:0e:4e:1a:71:08:d0:92:
                    ec:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:C9:DE:09:55:C3:B5:B1:FD:59:48:70:B2:B1:51:59:8E:67:3D:C3
            X509v3 Authority Key Identifier:
                keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/GcneCVXDtbH9WUhwsrFRWY5nPcM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.80.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         9a:b7:ca:ff:0a:29:6d:e0:a6:e9:9d:27:30:cf:89:b7:4b:c4:
         2d:bc:a8:1a:44:ab:cf:3b:a8:db:84:e5:5e:f0:fb:92:04:e2:
         fd:89:24:3a:dd:bf:d0:ff:6d:1b:2d:a3:83:ff:a5:2b:b9:82:
         4e:29:30:6c:df:a6:ac:40:21:63:d5:18:d8:ee:91:1f:76:11:
         32:83:9b:bb:b3:10:dc:6b:13:b6:69:f9:53:47:43:9f:10:5d:
         09:f4:56:21:48:0e:6e:7b:18:eb:a1:ee:c9:19:e0:41:05:2b:
         a9:c0:9a:bd:9f:19:31:22:44:9e:34:d5:5f:bc:09:58:0e:37:
         fc:fa:88:42:d1:72:70:fb:8d:8c:58:26:c3:45:7f:6a:cd:ce:
         b4:4a:27:04:15:2c:1e:50:2c:75:35:3c:03:16:02:13:69:1e:
         e8:01:98:71:99:d6:d5:8c:52:ed:a8:e4:69:9f:63:e6:4a:6b:
         d5:32:6c:6c:10:20:40:13:06:1f:cc:31:12:76:50:35:0e:02:
         cb:15:b9:c4:0d:74:6e:b3:68:3d:4f:92:03:01:e1:a8:67:c7:
         82:79:6b:af:52:97:86:65:5f:15:f3:bb:de:44:ae:d0:fd:1b:
         61:f8:9f:35:f3:d1:3d:08:4b:71:9d:36:f6:f6:ad:81:1c:93:
         71:40:ee:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----