Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/42cAtIlqeNfRS1w-tRG1mhsC42U.roa
File:                     42cAtIlqeNfRS1w-tRG1mhsC42U.roa (raw, json)
Hash identifier:          CyS/3CHZMQR7BhKBO7SHzRE6t90v0a0XD4r23gTGidE=
Subject key identifier:   E3:67:00:B4:89:6A:78:D7:D1:4B:5C:3E:B5:11:B5:9A:1B:02:E3:65
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0AEB
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/42cAtIlqeNfRS1w-tRG1mhsC42U.roa
Signing time:             Tue 29 Sep 2020 10:07:47 +0000
ROA not before:           Tue 29 Sep 2020 10:07:47 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        49.159.32.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2795 (0xaeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:07:47 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=E36700B4896A78D7D14B5C3EB511B59A1B02E365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:98:50:2c:a1:1a:9c:f2:ca:63:0b:7b:db:a2:
                    74:90:b4:00:88:c1:60:8e:5e:d4:66:fc:6c:d7:0a:
                    1f:b2:94:2a:c9:04:4e:99:18:76:da:06:b6:2e:21:
                    dc:59:87:d2:cf:8d:13:6d:99:1a:27:b0:74:6c:06:
                    88:36:e7:b0:8a:2f:18:61:32:ac:35:25:ed:8e:3f:
                    16:51:9d:ce:71:9d:a9:46:b1:fc:cb:e9:bd:48:9d:
                    27:a5:d4:5c:e0:9e:78:d6:af:aa:12:dc:03:91:9a:
                    76:bc:55:b5:d9:f7:bb:4e:d4:73:14:07:14:50:fb:
                    71:02:7d:09:9d:3f:98:ad:98:f6:96:70:3e:17:00:
                    d6:ae:01:e6:be:27:1a:8b:3b:50:34:34:19:cf:e7:
                    70:91:2e:3b:0e:01:f7:21:cf:f5:80:52:1a:b4:35:
                    0b:90:32:f7:3a:9e:d1:83:c7:4c:dc:c4:7b:d4:ed:
                    8c:4a:3d:90:9e:97:07:37:ea:4b:5f:04:ff:bd:67:
                    e9:5d:57:d4:98:89:9d:01:09:18:a4:c6:d8:29:7a:
                    76:82:ed:b5:9d:f5:25:f1:6f:df:28:43:bb:7c:fe:
                    37:2b:8f:45:88:8a:09:a6:48:b5:50:c4:15:35:85:
                    c5:98:a0:1c:ea:40:37:de:fc:5b:8c:42:86:5e:dc:
                    4d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:67:00:B4:89:6A:78:D7:D1:4B:5C:3E:B5:11:B5:9A:1B:02:E3:65
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/42cAtIlqeNfRS1w-tRG1mhsC42U.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.159.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         14:cb:1e:2c:8c:82:64:94:56:73:fe:ea:79:64:c5:e0:3c:41:
         08:03:74:cf:a4:c3:1b:6b:8f:da:b5:c0:0d:6f:88:b2:27:d0:
         d4:de:3e:d0:ee:2b:23:6a:a6:64:4b:29:0f:05:82:51:10:41:
         b0:c6:cf:04:9d:7a:26:5c:e0:9a:44:3b:cb:10:77:e6:a5:63:
         67:ee:7f:a4:31:71:a3:72:ca:d5:41:60:35:ab:bf:ec:5f:bf:
         85:73:83:18:58:ac:a6:28:5e:6b:63:c5:46:e0:57:f0:16:6c:
         60:95:01:23:e0:46:90:ff:53:43:e8:e1:3c:b8:0f:4a:e9:62:
         bb:81:16:be:3a:d7:bc:bb:d6:03:47:30:ea:fc:5b:02:77:50:
         d5:fb:21:6b:e1:77:d4:92:0d:3a:b8:0c:b4:c5:ee:42:1b:bd:
         dc:4a:64:72:d8:24:6a:8c:96:7a:93:30:c0:e1:2a:3c:98:5b:
         2f:08:82:6e:40:ec:28:ed:9a:60:c3:d8:f3:18:5a:8e:ff:b0:
         45:c7:69:36:eb:22:8d:26:a8:0c:f2:8b:10:57:4e:14:57:ed:
         72:20:88:31:2c:fe:f7:08:e6:63:83:8e:d9:21:19:33:49:6f:
         4f:b2:a0:bb:f2:bf:b4:70:e8:25:9e:7e:d7:ed:59:23:b9:8b:
         07:5a:87:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----