Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6AUrCgHyZX8539yH3Gg1QNePlZU.roa
File:                     6AUrCgHyZX8539yH3Gg1QNePlZU.roa (raw, json)
Hash identifier:          Rbf3deuQC6/YfNiQeWD93smq8msk1PCeTpCUNTH+Ajw=
Subject key identifier:   E8:05:2B:0A:01:F2:65:7F:39:DF:DC:87:DC:68:35:40:D7:8F:95:95
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0ABA
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6AUrCgHyZX8539yH3Gg1QNePlZU.roa
Signing time:             Tue 29 Sep 2020 10:07:33 +0000
ROA not before:           Tue 29 Sep 2020 10:07:33 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        49.158.144.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2746 (0xaba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:07:33 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=E8052B0A01F2657F39DFDC87DC683540D78F9595
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:58:00:c6:5b:cc:06:e9:84:35:8d:9e:98:43:
                    0b:29:f0:8b:38:ed:a2:0a:5a:ae:51:1f:f8:63:07:
                    6d:1a:1e:7a:ea:ff:93:8d:a4:fe:05:1f:94:4a:d7:
                    31:cd:9a:ea:2d:4d:7b:ff:f3:20:df:48:c4:39:e9:
                    d1:07:66:6e:06:c9:91:52:e5:c1:8e:ef:3c:10:a6:
                    7d:c7:34:38:d3:80:4f:67:75:20:45:7f:d7:28:60:
                    2d:f5:71:8b:75:6b:6d:84:0e:05:30:b5:0c:cc:2f:
                    37:db:1f:fd:1d:17:c5:6c:0c:b3:cd:76:b8:49:9f:
                    42:63:d2:26:c4:72:b6:5a:1d:8c:72:86:4f:1a:c7:
                    1c:7b:03:b5:19:47:4c:2b:c4:de:27:1f:04:91:1f:
                    82:6b:c7:fd:d8:c7:9b:8f:a2:ac:d0:fe:2e:ff:e2:
                    28:43:86:13:35:b7:d6:22:dd:15:28:1e:1f:a1:f7:
                    20:ea:0f:ec:22:10:7c:84:f6:06:18:4c:10:7b:c6:
                    9d:1c:8e:a6:9a:eb:e1:e9:06:19:7f:03:56:47:8e:
                    ae:91:a3:ed:37:b8:96:0a:22:10:35:36:57:20:8b:
                    9e:1c:4a:be:1d:0a:27:fc:02:45:62:24:98:74:fa:
                    2c:b2:17:93:ea:f1:24:17:4c:d5:61:42:38:cc:95:
                    b7:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:05:2B:0A:01:F2:65:7F:39:DF:DC:87:DC:68:35:40:D7:8F:95:95
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6AUrCgHyZX8539yH3Gg1QNePlZU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:7d:4e:dc:27:cf:97:11:07:3c:91:e2:c2:d4:65:cd:83:66:
         07:73:e1:15:4e:7d:14:cc:14:33:4e:ef:1d:6d:99:71:99:7c:
         77:7e:a0:4a:83:3e:17:57:ec:64:e8:b7:39:6f:1a:92:00:73:
         e5:45:04:41:12:34:89:b2:89:d4:3a:72:0b:81:17:6d:6d:31:
         42:15:fc:70:72:3d:1d:af:7a:36:c2:49:7a:bb:b7:7f:d5:40:
         08:fc:23:9f:ad:34:66:44:c6:4a:1f:0f:bc:bd:f2:c3:97:fa:
         5e:df:aa:94:d5:85:30:dd:54:15:2d:c0:2b:34:5f:c5:f3:f2:
         26:be:ef:65:69:5d:ca:7f:21:a8:a5:7d:c8:b9:6f:15:57:32:
         d9:f1:37:b2:f1:da:c2:18:34:87:43:fb:ba:db:d3:9e:f0:d7:
         38:02:6b:78:d8:b5:c6:c9:bc:34:83:e8:dc:24:1a:65:f3:f6:
         58:76:c2:8c:08:2f:85:b1:10:e3:9e:f7:a8:e1:de:90:29:08:
         5a:a0:b6:dd:9b:10:f3:c1:8c:a4:3a:e2:89:2e:04:2d:23:c3:
         aa:50:22:cb:3c:9b:8c:3d:7f:b5:7f:88:f2:74:07:59:b4:5f:
         06:09:ba:60:c5:ae:2f:2f:7b:53:44:63:6b:23:6a:44:c8:18:
         dd:d8:29:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----