Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/9kiSRNZpELarFV9ow6EEBC6dujk.roa
File:                     9kiSRNZpELarFV9ow6EEBC6dujk.roa (raw, json)
Hash identifier:          SKzjeeW2HlV3msgJdF1Cljfw0nv5yhwK8W+a+6V4O10=
Subject key identifier:   F6:48:92:44:D6:69:10:B6:AB:15:5F:68:C3:A1:04:04:2E:9D:BA:39
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0B64
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/9kiSRNZpELarFV9ow6EEBC6dujk.roa
Signing time:             Tue 29 Sep 2020 10:08:22 +0000
ROA not before:           Tue 29 Sep 2020 10:08:22 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24163
IP address blocks:        49.158.156.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2916 (0xb64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:08:22 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=F6489244D66910B6AB155F68C3A104042E9DBA39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ea:6e:00:23:b2:ae:5d:72:4a:6a:55:74:81:
                    35:a8:d8:87:5d:98:2b:32:2c:54:aa:69:90:21:d7:
                    49:3c:9b:9c:6c:c8:5e:8f:84:58:12:7d:8a:90:54:
                    c0:0a:45:34:f4:cf:9e:93:20:9f:5e:c6:e1:90:fe:
                    99:7e:3c:6a:4b:99:b7:43:8d:ab:01:09:95:b8:e0:
                    dd:dd:06:16:44:c9:bf:61:f9:6e:a1:63:aa:6a:88:
                    5f:ce:d7:3d:89:d5:54:c5:3d:c0:46:85:e9:c6:6a:
                    1d:05:b6:b9:53:6d:b8:7d:c6:fc:4d:10:23:60:c3:
                    73:0b:d6:ca:e1:13:18:78:74:73:e1:e4:a9:af:9f:
                    d9:40:71:db:b6:3a:aa:f8:9b:4a:2b:5a:f4:14:ba:
                    d4:63:30:e3:85:ee:f8:0e:33:02:df:b5:5f:a0:49:
                    52:11:91:d9:76:ac:c6:f7:8d:e0:22:6a:89:1f:86:
                    5e:06:b1:4c:8d:d5:5a:3d:f8:ed:c6:56:d7:6e:0f:
                    13:1c:ea:ed:a4:71:99:cd:9a:8f:61:b7:e8:fb:80:
                    a3:09:0a:3a:01:e9:7c:fb:d5:b7:4b:01:23:c1:d1:
                    76:a1:5f:19:c3:d1:f2:b2:44:35:10:71:8c:44:a8:
                    74:5f:be:fe:37:69:33:76:fa:7e:64:fd:9e:ec:07:
                    1b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:48:92:44:D6:69:10:B6:AB:15:5F:68:C3:A1:04:04:2E:9D:BA:39
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/9kiSRNZpELarFV9ow6EEBC6dujk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:ea:49:78:b8:a2:4e:71:55:56:c6:9d:8f:b7:69:36:1c:02:
         a4:1a:cc:35:e5:45:36:9a:ce:fc:2e:64:0a:64:ff:f4:d1:16:
         d5:8d:4c:c1:fb:04:d1:4c:51:90:55:9b:5a:1d:f3:8b:74:e4:
         e8:a0:15:92:4a:6a:f6:f5:39:3e:12:1a:47:6b:8c:31:32:26:
         9d:aa:7e:2e:c2:3a:87:be:ba:57:c0:6b:54:72:a2:b3:f0:86:
         5b:80:25:b3:af:ac:d8:c3:4e:4c:c9:f7:7f:58:07:bc:c3:a1:
         0c:67:95:49:e4:34:7a:d1:c2:2d:b5:94:6b:dd:4a:3c:d4:31:
         f6:d4:a0:01:f3:9b:55:7f:2c:f5:ee:b5:05:27:f8:1b:45:a0:
         e6:05:2b:6b:a9:e3:2c:e8:8e:fb:da:00:7f:a4:2a:7a:80:8f:
         d0:a2:e4:e3:85:7d:ab:7a:6f:f9:3b:88:0e:5f:9a:56:55:13:
         4d:f2:fd:f8:61:be:a8:d9:fa:80:78:e9:16:e1:f0:ca:9f:78:
         1c:0b:32:85:a7:90:ab:60:c7:96:9f:1a:1f:03:c0:a5:f4:d6:
         36:db:8d:02:61:1a:97:3d:3b:0e:3b:fc:95:35:cc:4c:6e:26:
         b4:eb:77:df:eb:a0:b1:9f:63:60:47:b0:6f:5d:32:9e:36:a7:
         81:de:61:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----