Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ASFWr5UIxNtDvUWwIGeqp5U-fto.roa
File:                     ASFWr5UIxNtDvUWwIGeqp5U-fto.roa (raw, json)
Hash identifier:          Yz/V1SHDog6bRDfh0mNpNKB5U8Vla4z2SsHDpfNqicM=
Subject key identifier:   01:21:56:AF:95:08:C4:DB:43:BD:45:B0:20:67:AA:A7:95:3E:7E:DA
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0B84
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ASFWr5UIxNtDvUWwIGeqp5U-fto.roa
Signing time:             Tue 29 Sep 2020 10:08:31 +0000
ROA not before:           Tue 29 Sep 2020 10:08:31 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24163
IP address blocks:        211.76.72.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2948 (0xb84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:08:31 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=012156AF9508C4DB43BD45B02067AAA7953E7EDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:64:56:98:96:94:a0:8f:01:71:d7:09:d5:21:
                    60:5c:6c:b8:e0:65:c3:77:fc:32:7b:45:f4:95:28:
                    bd:ab:f0:e0:8e:38:95:b3:09:86:43:62:55:20:d2:
                    af:b0:45:38:43:3c:28:ac:fd:b7:f5:e1:df:06:67:
                    14:3f:62:28:32:1c:a0:e0:d0:1e:a4:49:c4:2a:49:
                    95:8f:47:ad:d2:84:5a:ba:7d:fb:85:b3:80:85:91:
                    44:2f:2d:00:7f:1d:74:cb:dc:11:6c:ad:58:04:4e:
                    83:51:a8:82:ca:41:2d:f0:75:c7:31:1e:9f:c6:6a:
                    1b:ce:35:13:e5:9f:f3:ef:aa:c5:06:d1:85:04:d0:
                    9a:f1:50:69:1c:26:c0:60:73:d5:a8:8f:35:fc:f3:
                    06:39:60:78:a7:1b:ae:83:f8:29:2a:85:42:30:7f:
                    67:d1:57:37:b2:de:a1:53:23:1e:9a:fd:48:18:4b:
                    de:2a:03:ca:85:ad:0a:ba:07:84:4c:24:d8:b2:9f:
                    8e:14:9b:66:6b:22:69:61:93:ff:66:45:79:91:15:
                    7c:9d:61:15:74:7c:34:b8:7f:58:62:34:f7:44:aa:
                    3c:e5:52:99:18:83:79:b8:83:33:0c:db:84:bb:39:
                    08:cd:c2:07:a6:ec:11:79:e1:f1:34:fd:c0:7c:87:
                    72:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:21:56:AF:95:08:C4:DB:43:BD:45:B0:20:67:AA:A7:95:3E:7E:DA
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ASFWr5UIxNtDvUWwIGeqp5U-fto.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:66:32:07:59:39:b9:2b:d8:20:8d:36:ae:05:58:68:46:67:
         5c:04:7b:cd:48:30:04:32:0d:4a:bd:87:fb:35:90:e5:e2:ea:
         c3:a3:e2:e3:6f:60:d2:54:0d:27:20:21:71:ea:72:f8:58:9f:
         29:58:3c:14:0a:7c:1a:60:84:e4:48:1c:5e:7c:24:29:fd:06:
         9b:cc:5b:d7:19:38:dc:86:da:97:c8:71:b1:f9:41:11:6b:4f:
         5d:a9:60:5b:da:ec:64:43:e3:c7:30:2a:5b:cb:59:48:73:ce:
         a3:74:24:f1:f9:43:2e:e0:2d:6d:99:14:db:6a:a0:fa:11:a6:
         71:a1:d4:e9:ef:cc:71:7c:30:3d:67:bc:0f:52:43:07:01:20:
         8b:04:1d:0c:54:36:78:08:31:bc:d1:da:4b:9d:db:31:de:59:
         26:71:0d:aa:b7:e5:91:1f:e2:fc:01:3e:82:63:01:51:f9:0b:
         b1:54:bf:68:38:f8:e4:07:f0:31:6b:13:a9:3a:cb:f2:f2:05:
         ae:8a:80:52:79:e2:84:2b:5f:3c:c7:83:e2:9e:bb:bf:9e:b8:
         35:e4:b9:ca:1a:41:2e:e8:8b:94:e8:d2:79:b9:95:19:06:d2:
         9b:d7:11:18:b4:f1:3b:f5:28:37:b1:12:b4:d5:5b:c8:58:29:
         47:52:b0:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----