Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8nS9oRoeIa_1trCmihPY5-SDMnU.roa
File:                     8nS9oRoeIa_1trCmihPY5-SDMnU.roa (raw, json)
Hash identifier:          tZBIRPR89lh0LOvG4PmeHbhJcCt1KR1qwT2J0EPunvA=
Subject key identifier:   F2:74:BD:A1:1A:1E:21:AF:F5:B6:B0:A6:8A:13:D8:E7:E4:83:32:75
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0D7F
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8nS9oRoeIa_1trCmihPY5-SDMnU.roa
Signing time:             Wed 27 Jan 2021 06:02:31 +0000
ROA not before:           Wed 27 Jan 2021 06:02:31 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        49.159.232.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3455 (0xd7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Jan 27 06:02:31 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=F274BDA11A1E21AFF5B6B0A68A13D8E7E4833275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:94:0a:01:2c:62:50:0a:26:9b:b1:6d:81:72:
                    af:0d:42:97:c5:b2:ec:6d:45:c9:ff:b6:ac:15:68:
                    59:55:12:d2:fe:03:c1:6f:27:f5:8c:50:c5:2f:4c:
                    39:73:01:a5:5c:08:ae:f2:d9:d0:1c:77:85:2c:fe:
                    29:a6:48:8b:48:72:c4:eb:1f:70:dc:da:33:c5:ed:
                    ff:4d:de:43:d5:ed:55:2c:97:03:c6:de:6c:85:af:
                    4a:b7:dc:ef:7d:dc:88:47:ce:0b:fe:a1:95:98:7a:
                    21:da:2c:ad:c1:cd:c7:7b:5b:2b:1b:b5:03:b3:18:
                    da:9c:9b:41:d6:51:f1:b5:3a:93:e2:51:88:7b:de:
                    49:f5:34:9d:2b:3a:b0:99:c3:78:25:2c:65:70:b2:
                    aa:19:c5:ea:bb:a2:d2:ae:ef:2b:08:d1:4e:64:8a:
                    f2:f6:a8:eb:f3:e6:f1:6b:20:28:58:98:1c:0c:9c:
                    c5:fa:e1:8a:bf:65:3d:9c:78:e4:b5:33:5c:3c:45:
                    27:cd:cd:17:aa:f2:02:4c:b7:53:97:27:77:e3:de:
                    20:15:42:d6:d5:b3:8b:cd:55:55:19:d6:e4:bb:3f:
                    fc:e1:fc:72:0f:09:13:8f:5a:0b:a5:bd:0b:98:b3:
                    22:5b:78:6f:93:03:d0:d2:89:b1:e4:56:0f:78:6b:
                    5f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:74:BD:A1:1A:1E:21:AF:F5:B6:B0:A6:8A:13:D8:E7:E4:83:32:75
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8nS9oRoeIa_1trCmihPY5-SDMnU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.159.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a1:22:40:c8:9a:c1:39:f8:1d:4d:0d:0c:19:7c:a7:d9:30:1c:
         11:d2:b9:c5:73:04:60:7e:2a:34:6a:0a:0e:e0:ba:44:0a:58:
         fb:39:0a:8a:81:90:21:d7:c2:00:51:36:85:da:d4:9f:00:7e:
         69:82:63:89:42:ec:70:84:39:47:73:06:8c:f5:88:1e:a5:e3:
         ac:d2:2c:7a:12:77:84:55:c1:91:c1:d3:4e:ec:24:56:4b:f6:
         f4:a1:32:2f:3e:80:90:7f:6f:0f:db:49:79:d2:59:47:be:f4:
         3e:74:ad:52:d1:99:5d:b6:b1:7d:07:ce:3e:e5:8b:05:e9:40:
         6e:d5:91:cb:49:72:51:1d:b9:48:9f:f3:2d:50:37:66:6c:2f:
         ab:87:b9:a2:86:d5:ef:00:78:11:4e:6e:b9:cf:f2:6f:ef:1a:
         9f:90:20:c9:df:6b:fa:9b:87:47:a0:9a:e8:a8:4e:74:e6:b2:
         38:6a:37:aa:dd:e6:38:80:e2:9d:06:74:66:14:80:8a:d0:ea:
         79:17:e4:6a:75:eb:9c:2b:f2:ee:6b:a0:c0:50:a0:82:7b:64:
         66:92:c9:d5:49:77:24:ff:cf:96:cf:55:97:22:60:b6:ee:77:
         64:20:f6:42:2a:de:00:e4:58:6a:ff:f2:bc:b7:21:b4:90:9f:
         59:2b:e3:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----