Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/3LX1joN3U51ermdqudw18X-KUUE.roa
File:                     3LX1joN3U51ermdqudw18X-KUUE.roa (raw, json)
Hash identifier:          rvVbhw4LEeQChGxNfH4GneCTJTqVZSWhPhGIOzbvQYY=
Subject key identifier:   DC:B5:F5:8E:83:77:53:9D:5E:AE:67:6A:B9:DC:35:F1:7F:8A:51:41
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0B74
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/3LX1joN3U51ermdqudw18X-KUUE.roa
Signing time:             Tue 29 Sep 2020 10:08:26 +0000
ROA not before:           Tue 29 Sep 2020 10:08:26 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24165
IP address blocks:        180.218.120.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2932 (0xb74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:08:26 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=DCB5F58E8377539D5EAE676AB9DC35F17F8A5141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d6:44:f6:0d:05:28:d2:c7:d7:26:37:c5:92:
                    9f:11:f8:1f:da:8e:57:17:82:d5:e8:ce:55:f1:d9:
                    dc:08:b1:71:f5:bc:41:73:7e:9e:ad:89:9c:c9:ca:
                    66:8d:d2:da:9f:96:5e:9c:85:3f:78:2d:c4:6f:24:
                    41:a2:f0:6b:95:66:06:d3:bb:46:be:f2:11:97:2b:
                    71:05:2d:c1:3a:a9:52:db:45:d6:57:d7:96:4d:b1:
                    2f:68:74:53:34:04:ef:21:35:56:4a:f5:70:8f:fc:
                    c3:bd:f4:a9:c5:a8:9e:eb:ab:30:97:4d:26:3b:3c:
                    c9:b5:26:33:d8:9b:d7:91:91:6d:3c:5f:f6:c3:e4:
                    ee:4b:4b:9b:47:8d:bc:ad:ea:01:a1:5e:03:f1:38:
                    15:50:34:a5:be:38:93:5c:01:d5:dd:cf:65:8e:fc:
                    cf:e6:04:3f:1c:44:b3:0a:6f:33:da:f9:54:35:04:
                    bd:1a:82:3e:4a:55:b1:13:a0:bd:c7:2d:31:4b:17:
                    5a:2b:c8:2f:bc:73:dd:fb:f2:41:2c:d9:8f:25:bd:
                    68:2d:10:b4:cb:2c:85:a5:bc:c9:61:87:67:ac:6d:
                    e6:19:99:77:90:b5:87:90:96:4a:13:b6:38:79:9e:
                    6e:65:4a:56:c9:16:e3:22:4c:66:56:8a:2f:7b:ca:
                    2c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:B5:F5:8E:83:77:53:9D:5E:AE:67:6A:B9:DC:35:F1:7F:8A:51:41
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/3LX1joN3U51ermdqudw18X-KUUE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         40:c9:76:8f:22:1d:95:84:f2:52:b7:1a:7b:3f:3c:cb:93:8d:
         24:ff:0c:76:c1:c4:ae:a3:4b:8e:59:23:b2:b3:a0:e9:88:c3:
         5d:0c:18:dd:64:9b:f2:87:84:c0:36:fc:12:49:34:8e:23:1f:
         68:6c:8d:26:9a:fd:e4:1f:75:0f:0a:6e:60:45:8d:0a:dd:8c:
         d9:18:45:b7:5d:ea:10:dd:f2:28:2b:5a:8e:99:5c:18:1b:f5:
         9a:8d:13:c2:ae:8b:6b:0c:10:93:2c:68:c6:13:c8:d8:19:11:
         80:8e:56:b9:96:c8:04:2b:cd:5d:26:4c:5f:2d:a0:ae:4e:57:
         44:37:99:9e:82:f4:03:b4:b4:81:f5:d9:62:7d:26:3d:1f:8e:
         12:02:2e:20:27:cf:8f:5d:07:d9:e8:2a:81:34:5f:38:18:db:
         45:3b:42:e4:d6:67:1e:2d:07:1f:b1:b5:f2:85:63:21:42:ba:
         01:72:c3:03:7c:80:04:16:11:5b:7b:e4:89:01:39:fd:4b:d4:
         6e:f7:fa:5a:03:fb:43:43:6f:68:f0:06:ea:e9:bb:85:98:ee:
         10:40:84:79:f8:04:ab:e6:ca:49:4f:5a:95:c2:4d:5c:78:b7:
         e0:c2:9d:ca:1d:0f:95:c3:03:7a:24:a9:15:c2:4b:45:3c:c0:
         e8:73:01:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----