Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/2k6pghsBP0NVttETLT_iVngNJHg.roa
File:                     2k6pghsBP0NVttETLT_iVngNJHg.roa (raw, json)
Hash identifier:          PxW6qVgHURVimlD3nA+iJwOCtZdq+3igBhorOKekTDA=
Subject key identifier:   DA:4E:A9:82:1B:01:3F:43:55:B6:D1:13:2D:3F:E2:56:78:0D:24:78
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0AF0
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/2k6pghsBP0NVttETLT_iVngNJHg.roa
Signing time:             Tue 29 Sep 2020 10:07:48 +0000
ROA not before:           Tue 29 Sep 2020 10:07:48 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        49.159.80.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2800 (0xaf0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:07:48 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=DA4EA9821B013F4355B6D1132D3FE256780D2478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:67:c5:ed:07:ca:c6:58:cc:fb:cf:6b:dd:b6:
                    a8:8e:28:11:31:17:ea:99:82:4f:c0:96:f8:57:07:
                    bb:24:ba:53:25:aa:64:e4:4b:85:e3:1b:f7:04:a1:
                    de:4f:11:12:52:87:7a:8c:c5:a6:46:a0:c5:70:ff:
                    eb:3d:9d:67:3f:bb:f6:73:e0:40:49:35:27:c2:4a:
                    96:9f:db:b9:24:b1:b3:21:05:fc:a6:c3:b3:a9:c3:
                    7a:99:6e:06:54:6b:39:e5:c3:2f:9d:83:d3:b5:35:
                    0a:e4:fb:de:2c:e5:7f:89:d0:27:f6:31:19:64:51:
                    0d:73:f4:4c:fc:b0:a9:be:22:b4:fc:80:74:78:aa:
                    ff:83:26:8e:60:0e:97:8e:ce:1e:bf:fa:3e:b9:08:
                    ef:96:79:ac:89:c7:0a:2e:bd:58:0c:06:aa:15:21:
                    a9:ae:4a:29:21:89:50:d5:2f:08:e9:c9:75:1d:49:
                    13:a9:e7:76:5a:98:ee:39:04:e7:74:79:9c:09:70:
                    3b:c5:41:f6:58:bf:a4:d9:fc:26:3f:37:6e:3c:ea:
                    e6:d6:36:24:40:5b:7c:48:ff:ce:f2:f6:0a:bc:54:
                    de:e7:df:11:ca:56:f0:04:68:23:9d:0f:80:f7:f6:
                    53:78:45:6f:f3:1b:8c:1f:ed:29:75:0c:8a:6f:a3:
                    55:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:4E:A9:82:1B:01:3F:43:55:B6:D1:13:2D:3F:E2:56:78:0D:24:78
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/2k6pghsBP0NVttETLT_iVngNJHg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.159.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3f:b8:c4:2b:33:21:f0:a7:ad:08:c1:ed:07:21:bb:59:66:2f:
         bb:a9:19:0a:0f:dd:53:21:6d:2f:96:6c:f5:67:88:bb:0f:c2:
         0d:04:e4:9a:59:89:75:c9:63:47:64:27:f8:e1:ec:41:f6:a0:
         b8:2e:83:2d:07:ed:4a:01:c6:ca:ba:ed:4b:c7:c5:d7:50:aa:
         86:d5:8a:fb:e3:5a:ea:86:74:19:1c:1b:a8:da:8f:79:55:dd:
         be:a3:5b:1d:f1:88:5b:d3:83:3e:97:8d:dc:67:9e:d2:3b:65:
         95:47:1a:5a:fd:d1:bf:e5:39:37:44:8b:aa:4d:6e:b7:0b:da:
         49:7a:fd:e3:b7:d1:08:d5:9b:b3:d8:09:72:3e:58:80:34:d0:
         95:3b:c4:68:ef:72:08:6a:d5:9e:43:03:6b:eb:b3:ba:ac:09:
         a4:8e:b7:ee:26:0c:27:b8:4f:fd:00:69:61:68:27:43:1c:25:
         bc:af:41:d7:2a:c7:62:16:fe:df:11:bd:cf:3c:1d:c6:05:3b:
         6f:b0:3c:a9:3a:ae:ec:b4:d0:4f:cf:d5:a0:eb:ff:c9:b4:9f:
         b0:4f:68:f2:26:e3:41:6b:b0:d2:5c:65:2f:ee:fa:ce:6e:d9:
         59:24:d2:f8:9c:5d:65:81:4f:f0:e7:9f:67:9b:30:f3:0f:b6:
         9e:c9:00:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----