Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/2QNHDmb1XijCGXFdpGvbny4Cq04.roa
File:                     2QNHDmb1XijCGXFdpGvbny4Cq04.roa (raw, json)
Hash identifier:          BjuzVAm7ruDFbA/17chfJ1tYPv31cSMcZEkdTZYI3EU=
Subject key identifier:   D9:03:47:0E:66:F5:5E:28:C2:19:71:5D:A4:6B:DB:9F:2E:02:AB:4E
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0D25
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/2QNHDmb1XijCGXFdpGvbny4Cq04.roa
Signing time:             Thu 14 Jan 2021 07:16:06 +0000
ROA not before:           Thu 14 Jan 2021 07:16:06 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24165
IP address blocks:        115.165.218.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3365 (0xd25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Jan 14 07:16:06 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=D903470E66F55E28C219715DA46BDB9F2E02AB4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:95:d9:a1:32:4c:c5:26:20:d2:5e:a2:d8:fd:
                    25:b0:af:98:f9:13:7b:b4:f5:94:d8:bb:f0:91:dd:
                    6f:49:4f:cc:92:8b:da:18:da:ff:a2:4f:b0:7c:35:
                    91:17:07:86:35:ae:fb:35:ad:b4:47:2b:c5:45:92:
                    e8:36:89:ca:dd:3a:4b:30:49:56:3a:91:97:2f:18:
                    ed:f9:71:df:77:44:7b:b6:47:7e:c1:ef:9d:e2:21:
                    37:92:74:c6:95:63:d6:19:cc:c2:bc:25:0a:be:23:
                    90:74:5b:1e:18:e0:52:7d:d4:1f:4e:6f:11:72:7d:
                    35:11:04:f2:a4:80:6a:30:d4:d5:13:ff:86:92:32:
                    9f:07:fd:02:fc:90:30:66:93:7f:36:63:88:0a:39:
                    3b:c8:22:6f:d2:2f:1b:64:09:11:79:e3:25:e2:1d:
                    c1:54:ef:f8:f8:d6:02:46:7f:a6:84:9d:cc:43:fa:
                    50:f1:87:10:84:d6:b3:3a:32:13:de:a4:06:cf:01:
                    8d:8a:27:97:31:4f:63:39:6e:2a:b2:30:74:fa:31:
                    30:0c:0a:3e:b1:30:ee:9c:3c:23:98:6a:b5:df:d0:
                    bc:a1:2f:f1:11:ca:b7:21:bf:b0:f5:37:c8:a8:e1:
                    24:cf:58:93:85:52:0a:45:0c:7b:0c:4b:17:91:09:
                    49:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:03:47:0E:66:F5:5E:28:C2:19:71:5D:A4:6B:DB:9F:2E:02:AB:4E
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/2QNHDmb1XijCGXFdpGvbny4Cq04.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.165.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:2c:7f:71:3a:42:12:3a:2b:c6:77:60:d8:65:26:01:f4:99:
         20:89:57:f6:1e:c9:4e:79:c7:da:72:d5:90:ae:e0:7c:48:b5:
         ce:24:24:93:95:52:f0:16:33:41:f8:03:65:2b:ac:a1:79:bf:
         a1:5f:cb:9d:7b:40:2d:41:cf:ea:c4:f7:ae:5c:f7:f7:3c:ea:
         7d:16:0f:7c:09:7f:71:ee:bd:dd:c1:51:71:de:ee:87:ae:10:
         9e:12:e2:c6:20:04:dd:f2:70:b9:85:ce:a8:36:aa:a2:d3:a5:
         c9:ce:00:0d:7a:f8:d3:5e:3f:21:c0:88:f0:ce:70:92:a3:78:
         75:b5:02:94:cc:d1:1b:4c:6a:59:f5:50:1f:14:66:0e:46:a5:
         7d:05:83:8a:25:39:4f:dc:81:01:b6:cd:b4:2f:50:f7:fe:35:
         33:dc:02:67:a8:d5:d0:88:8f:07:e4:32:db:c2:33:1c:94:96:
         b9:25:c9:91:95:ef:85:e5:8d:f5:d5:de:93:ce:ff:ed:2c:22:
         d5:a1:c4:10:a2:0a:f7:fa:6c:97:aa:df:90:a6:8a:62:94:f8:
         fd:01:cd:50:84:af:83:c2:93:6b:22:f0:eb:28:59:b3:4f:f0:
         49:f4:56:44:95:ed:9c:31:a4:52:15:e4:d6:79:08:4a:8b:30:
         de:c2:7c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----