Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/9AZT_Gt-pbsHehIC509njvqlbl0.roa
File:                     9AZT_Gt-pbsHehIC509njvqlbl0.roa (raw, json)
Hash identifier:          1aDTpnYtnvnosuoImJmfKLhGhjp6kWzogI1dvwFDG14=
Subject key identifier:   F4:06:53:FC:6B:7E:A5:BB:07:7A:12:02:E7:4F:67:8E:FA:A5:6E:5D
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0AA1
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/9AZT_Gt-pbsHehIC509njvqlbl0.roa
Signing time:             Tue 29 Sep 2020 10:07:26 +0000
ROA not before:           Tue 29 Sep 2020 10:07:26 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24165
IP address blocks:        122.254.8.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2721 (0xaa1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:07:26 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=F40653FC6B7EA5BB077A1202E74F678EFAA56E5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ac:c8:ee:0a:46:4a:35:07:4e:48:03:21:bb:
                    50:c9:5b:e1:65:6d:80:9f:6c:36:b9:67:3e:bd:21:
                    be:8c:aa:0e:96:90:30:26:7a:4b:fc:15:f0:7b:e9:
                    62:4d:e5:b0:fd:d0:55:c5:b2:0e:6b:13:f6:25:9b:
                    f0:33:c3:7a:4a:d6:74:94:c8:c1:dd:fe:92:57:46:
                    24:97:2d:de:0e:e4:65:cf:c9:36:69:5a:67:e2:2e:
                    97:a9:e4:dc:36:81:8f:6d:b3:04:48:b9:e1:3c:a0:
                    12:2b:39:4f:4b:cf:58:0b:66:d0:fa:f5:17:d5:8c:
                    3f:11:78:95:9e:f2:63:e6:7d:89:09:1e:7d:fe:0b:
                    75:88:5b:8a:6a:09:76:fa:3c:fe:82:b6:ab:9e:ec:
                    4f:86:13:c0:ab:7f:7b:d7:59:ca:29:14:ff:13:ee:
                    30:16:da:86:16:88:68:d6:9e:f4:e6:70:29:c1:b4:
                    78:51:0c:4b:02:74:9d:b6:86:bc:b6:cf:e2:ce:50:
                    24:13:79:80:b0:50:06:0c:a5:cb:0e:4c:9c:bb:29:
                    24:78:db:4a:74:75:43:f8:23:a2:6a:a4:b7:3f:a2:
                    51:d5:3f:d5:a4:b9:61:2e:46:eb:ec:c2:87:4b:7f:
                    03:2d:45:37:fb:4c:59:63:b6:7e:50:21:d3:07:82:
                    0f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:06:53:FC:6B:7E:A5:BB:07:7A:12:02:E7:4F:67:8E:FA:A5:6E:5D
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/9AZT_Gt-pbsHehIC509njvqlbl0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.254.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a1:7a:87:dc:97:4f:fc:af:87:eb:7c:82:6e:48:22:83:f8:2f:
         3b:16:f8:b8:3a:36:2b:1e:9c:db:73:1e:1c:72:57:31:41:66:
         3f:2b:4c:a1:55:66:ce:e0:d9:dd:4c:26:ef:f5:41:c1:cb:cd:
         87:18:7b:61:13:17:ff:89:ad:94:5d:62:c3:a3:79:63:f3:72:
         23:8c:e6:24:83:a1:b9:db:48:3e:0e:6c:d3:04:23:08:42:91:
         eb:04:f0:00:44:9a:3f:ff:ca:3b:75:c6:fb:fe:e5:8a:ca:70:
         e5:10:ac:61:37:cb:22:11:b5:32:bb:14:b9:fc:75:b7:70:15:
         fd:13:ce:59:13:c9:a8:25:6d:ad:6f:f5:92:fa:50:d2:0e:26:
         dc:d5:ce:1f:92:df:98:1a:dc:7c:5b:b1:9a:3d:98:3d:f1:84:
         0a:e2:26:ca:14:b8:b8:d4:fe:3a:96:aa:a3:3a:40:33:40:47:
         9d:aa:90:47:39:eb:8b:ea:d1:08:b6:92:6b:15:f4:ac:b7:1b:
         a1:c4:33:df:f2:88:08:5d:43:0c:e0:ea:4d:a2:3e:95:09:44:
         c5:ca:f7:f7:84:54:57:f9:8f:86:fa:5a:73:2f:32:fa:1b:46:
         fb:2e:63:f6:02:06:55:3b:df:a4:da:93:13:a8:dd:67:a1:c4:
         e4:eb:85:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----