Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/9ZID_8iJ_Eujp3Nd3srtvfMzXH4.roa
File:                     9ZID_8iJ_Eujp3Nd3srtvfMzXH4.roa (raw, json)
Hash identifier:          JqqOcl52O9SpoR2AobRy2INp4KGDNxh+fwBb9AWvMYI=
Subject key identifier:   F5:92:03:FF:C8:89:FC:4B:A3:A7:73:5D:DE:CA:ED:BD:F3:33:5C:7E
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0AD9
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/9ZID_8iJ_Eujp3Nd3srtvfMzXH4.roa
Signing time:             Tue 29 Sep 2020 10:07:42 +0000
ROA not before:           Tue 29 Sep 2020 10:07:42 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        49.159.16.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2777 (0xad9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:07:42 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=F59203FFC889FC4BA3A7735DDECAEDBDF3335C7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:40:ad:2d:33:a8:ac:f9:3f:3d:a0:bf:d1:11:
                    49:c6:f8:01:28:62:45:88:5a:b3:c1:e4:68:65:06:
                    26:7f:94:6e:ac:97:e3:4b:42:37:88:84:a5:b8:e1:
                    09:0a:60:64:12:ec:c8:a4:ed:c8:79:f8:33:26:61:
                    01:03:75:4f:17:14:b2:17:8c:ad:b1:58:98:c5:c6:
                    95:39:19:ac:6e:83:49:82:dc:fd:f2:0a:25:09:7f:
                    3d:1a:9f:b9:a8:fe:84:2c:83:75:cf:63:b6:df:6a:
                    65:62:ca:2a:d5:8c:3e:33:0e:44:2c:d9:ff:a1:87:
                    97:79:8d:ac:27:24:0d:0d:57:ad:ba:11:50:a3:02:
                    64:f3:49:19:f6:ae:bd:30:06:cb:12:11:6a:01:f1:
                    92:00:8d:4d:b7:9b:b4:72:57:e8:eb:d5:0a:a7:74:
                    57:89:bc:67:7c:f9:5f:68:97:19:8c:36:d3:e5:be:
                    2a:6a:1d:c3:d5:4c:15:ce:2d:f8:35:57:a1:05:98:
                    cb:11:20:7f:fe:31:7b:ee:c3:0d:a6:b9:26:f3:2e:
                    13:3e:d5:24:5f:35:84:3b:eb:68:59:1b:b1:02:7e:
                    e7:98:0f:2a:e6:b5:a5:e0:11:f9:91:3a:66:82:f1:
                    f1:96:81:e3:b7:84:93:aa:f3:47:1e:34:60:6d:cd:
                    ed:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:92:03:FF:C8:89:FC:4B:A3:A7:73:5D:DE:CA:ED:BD:F3:33:5C:7E
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/9ZID_8iJ_Eujp3Nd3srtvfMzXH4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.159.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2c:ad:0b:a6:e7:96:3f:c1:24:d5:78:76:e9:d1:96:51:90:42:
         33:27:dd:43:15:07:27:29:2c:00:e9:7a:ca:8b:f5:df:ad:0d:
         de:04:84:27:ac:7f:af:b4:af:92:d6:6a:58:87:43:36:a3:3e:
         2d:c7:9b:dc:28:35:a8:24:a0:8f:ce:33:e4:65:f9:eb:06:b1:
         52:b2:9f:b9:8f:3c:1a:b8:a7:c6:be:fb:f5:21:bf:93:96:36:
         43:80:a5:91:86:b9:a0:d2:0b:8c:b7:a6:65:e7:3c:60:e1:c6:
         cb:cb:d7:ec:1f:1f:59:8c:d9:6e:a1:96:42:4e:64:c5:43:fc:
         50:23:8c:e5:b0:88:60:06:cc:13:7b:bd:b3:9c:d8:33:5e:a6:
         99:a8:3a:54:b2:4a:14:d8:d0:f9:1a:ca:8c:c7:92:f6:19:9d:
         a2:02:11:6a:a6:31:50:d8:c8:53:48:33:62:9d:d0:9e:8d:f2:
         24:9c:1f:6b:0b:fd:eb:a9:e5:e4:86:46:b9:32:1e:0a:79:56:
         4f:e6:0a:98:53:af:9d:af:d7:0c:83:0c:ae:22:3e:74:df:75:
         04:51:cf:4c:97:0d:18:cb:fd:16:80:43:2f:db:08:71:29:9e:
         2d:7a:51:82:36:72:6e:92:a0:d2:dc:42:0a:db:65:a9:12:57:
         70:9e:9c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----