Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6OEeqFw4eSW1joq0JfYRfg-8K7M.roa
File:                     6OEeqFw4eSW1joq0JfYRfg-8K7M.roa (raw, json)
Hash identifier:          GGwFNORjLd11tlFF5Dz5CZ/RFFXd9X0rW5x7qJ+Xtkc=
Subject key identifier:   E8:E1:1E:A8:5C:38:79:25:B5:8E:8A:B4:25:F6:11:7E:0F:BC:2B:B3
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0AB7
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6OEeqFw4eSW1joq0JfYRfg-8K7M.roa
Signing time:             Tue 29 Sep 2020 10:07:32 +0000
ROA not before:           Tue 29 Sep 2020 10:07:32 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24165
IP address blocks:        49.158.128.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2743 (0xab7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:07:32 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=E8E11EA85C387925B58E8AB425F6117E0FBC2BB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:86:1a:e3:46:f8:a4:85:9d:24:c3:4c:ec:4e:
                    a4:84:d0:70:9c:5f:e7:3d:02:e2:8d:b7:11:67:65:
                    b8:84:89:a9:8d:e2:fb:61:15:65:3d:c3:32:a6:1d:
                    3b:09:fe:87:5d:08:01:ef:9a:40:cb:16:00:3a:50:
                    1d:63:d8:5f:05:0b:a4:1f:99:68:d5:77:da:4d:07:
                    30:22:58:30:ea:c7:cb:f4:0c:cd:60:d1:03:fb:54:
                    73:d7:58:85:ed:8b:ae:ab:16:52:dd:09:8c:b6:b8:
                    fd:2c:f1:b2:78:23:53:73:ad:0e:6e:da:7e:e2:87:
                    ad:05:b3:3e:91:76:fa:cf:f7:02:cb:b0:16:2e:4f:
                    64:fb:a5:0c:63:81:2c:92:ff:b5:16:e5:bd:b5:5e:
                    a0:6a:73:03:a5:f6:b3:12:0b:7b:5e:39:8e:a9:36:
                    96:9d:8e:f2:d1:cf:ac:10:93:2e:07:4e:d5:c6:a4:
                    fd:f3:41:67:05:30:7a:d9:1d:db:82:2e:0f:34:e1:
                    40:30:d9:05:f5:7a:a7:12:ea:90:62:be:04:45:05:
                    bd:4e:a6:c1:46:23:31:3c:fa:1f:3f:c0:bb:ad:cd:
                    0f:30:9a:da:5b:73:b4:ef:8a:18:bc:00:c6:ca:d9:
                    04:80:90:4f:13:62:7e:e1:22:cc:5f:ef:ae:7a:4a:
                    81:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:E1:1E:A8:5C:38:79:25:B5:8E:8A:B4:25:F6:11:7E:0F:BC:2B:B3
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6OEeqFw4eSW1joq0JfYRfg-8K7M.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7f:d7:8c:56:40:97:be:d6:66:ba:ca:c3:55:f2:8d:08:0b:b3:
         f8:97:98:18:ef:4a:48:40:3a:fd:96:da:5b:bb:50:00:03:f1:
         8a:8f:db:4c:0f:e9:2c:cb:5a:a9:77:67:ab:1d:10:68:db:7e:
         8f:be:45:4d:eb:30:68:c0:e9:c0:e5:9f:71:d7:c5:87:88:c1:
         5a:74:2e:cc:e5:46:b1:2d:b6:02:41:9c:30:70:be:5c:94:44:
         4e:7f:f0:e5:be:bb:97:8f:37:f4:fa:df:a3:76:20:e4:b5:c1:
         be:fc:88:21:f1:88:f2:52:a5:18:00:a3:15:70:dd:e8:78:ff:
         56:2e:ee:7f:92:64:dd:2e:64:bb:be:11:8a:5d:00:5b:bf:ca:
         eb:04:31:dc:2f:43:c0:ae:0e:f8:3e:78:36:7b:84:28:ee:1d:
         ff:a7:81:20:94:28:43:f3:72:05:f9:3f:8d:6e:4c:ca:ce:e4:
         9f:d7:00:80:32:b5:76:13:2d:c4:b3:b1:cc:13:f0:5f:79:21:
         e2:35:0e:b3:e8:d9:54:a1:8e:25:f8:4a:42:c6:82:d0:ac:b5:
         1f:53:fa:83:3a:89:4b:d1:cc:1a:a6:fc:7e:06:43:fd:3c:99:
         ca:8b:c6:3e:57:c2:b4:2a:a6:11:71:f0:01:47:1d:b2:bb:18:
         bd:3d:0b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----