Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/68kCD9L2c5iBIe1BUm3G9CP9BXk.roa
File:                     68kCD9L2c5iBIe1BUm3G9CP9BXk.roa (raw, json)
Hash identifier:          /1jnNRJec7x5jRo/PMhPvQwFbAsh8u/y/jGEbaWncj4=
Subject key identifier:   EB:C9:02:0F:D2:F6:73:98:81:21:ED:41:52:6D:C6:F4:23:FD:05:79
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0F2D
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/68kCD9L2c5iBIe1BUm3G9CP9BXk.roa
Signing time:             Sun 07 Feb 2021 12:33:09 +0000
ROA not before:           Sun 07 Feb 2021 12:33:09 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24165
IP address blocks:        115.165.200.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3885 (0xf2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb  7 12:33:09 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=EBC9020FD2F673988121ED41526DC6F423FD0579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:fb:e7:99:16:84:76:80:39:25:5d:e7:fb:d8:
                    0a:e7:1c:7a:49:f5:28:25:19:11:fc:dd:d6:fe:4c:
                    f5:da:38:96:cb:ae:41:ba:95:16:35:91:0c:85:b5:
                    5e:85:34:b8:b3:a5:44:47:05:11:7e:95:38:b1:a6:
                    90:1f:cf:39:7b:41:b3:a9:31:e8:de:43:eb:c3:d7:
                    23:45:3f:27:21:01:8b:74:e6:e7:c1:51:69:76:04:
                    77:a1:23:31:d7:33:7b:80:a1:f7:77:40:3a:f5:a4:
                    9d:be:4f:1a:cf:13:d6:b4:e4:87:1d:68:02:61:d6:
                    68:9a:05:bf:ec:cd:d3:2b:99:5a:5b:83:71:8d:4c:
                    17:cc:1f:50:8d:69:d7:f6:e2:44:b1:a9:36:c3:a5:
                    f4:b0:7b:e7:79:22:b1:79:1f:62:be:bc:c7:99:7c:
                    35:bc:92:49:e3:fd:46:69:e7:5c:6d:61:bf:d2:3f:
                    aa:18:3f:29:4e:aa:6f:5f:48:97:80:ca:76:4d:c7:
                    a9:96:60:45:e1:25:6b:e5:58:eb:e3:38:bc:b3:af:
                    7f:51:0d:cd:15:28:5d:af:e7:7c:54:27:a9:c5:ac:
                    57:6d:c8:8b:19:1a:67:2a:62:e0:de:32:70:47:61:
                    7a:25:08:3a:6a:c5:42:b8:a7:a3:0f:8d:a5:0b:66:
                    63:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:C9:02:0F:D2:F6:73:98:81:21:ED:41:52:6D:C6:F4:23:FD:05:79
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/68kCD9L2c5iBIe1BUm3G9CP9BXk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.165.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6d:52:bb:6f:e9:52:89:c0:75:76:9d:f8:6c:60:e6:e2:c0:af:
         a7:43:00:da:91:fd:c7:78:19:9a:37:cc:6c:d9:99:46:a2:42:
         61:0c:8d:ff:15:74:00:c3:2d:3d:a9:d5:bd:ef:50:c5:11:e0:
         8d:57:1a:34:b8:01:39:61:05:7a:4a:ef:d7:d1:c1:09:18:35:
         4c:c0:2d:54:10:c6:e0:91:d9:c5:98:41:22:a6:b7:a3:29:dd:
         32:de:6f:b4:31:4b:3f:1b:53:da:a7:e3:5f:51:de:f6:98:d5:
         76:26:6c:0f:0b:7c:f6:a2:10:d7:0b:12:7a:49:86:17:dc:64:
         80:e5:ca:15:8c:87:d3:56:3d:94:3c:03:52:fa:16:1e:43:12:
         c4:4b:5e:56:a4:69:3a:91:b0:75:4e:03:ac:fd:b6:31:5c:f8:
         f3:0e:df:69:b8:2f:36:e3:16:43:b8:93:04:12:ef:81:2a:9c:
         8b:c4:5d:e2:ab:93:5c:c0:41:df:21:5a:61:4b:98:e6:ea:54:
         2d:e0:ac:e8:21:1d:5b:7d:44:fb:79:7a:d0:42:2f:14:3d:ff:
         ba:5b:56:e0:ea:c9:54:9a:ef:58:4f:bf:d8:80:ac:8a:a2:2f:
         6c:09:b4:7d:ab:5d:c1:79:13:ee:46:fb:c6:ca:ff:a9:1b:0a:
         ad:77:ba:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----