Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/AUet51QmQ0hR9zE7--TOr03Rip4.roa
File:                     AUet51QmQ0hR9zE7--TOr03Rip4.roa (raw, json)
Hash identifier:          F4qwArn4aPngYXMX3g7t5HmBbdIzkjzeyKB8jhvOGxE=
Subject key identifier:   01:47:AD:E7:54:26:43:48:51:F7:31:3B:FB:E4:CE:AF:4D:D1:8A:9E
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0AB1
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/AUet51QmQ0hR9zE7--TOr03Rip4.roa
Signing time:             Tue 29 Sep 2020 10:07:30 +0000
ROA not before:           Tue 29 Sep 2020 10:07:30 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24165
IP address blocks:        45.64.34.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2737 (0xab1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:07:30 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=0147ADE75426434851F7313BFBE4CEAF4DD18A9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:e4:49:10:e3:d6:0a:53:41:f8:1c:e0:41:79:
                    e1:58:98:cd:15:37:f5:d2:f8:64:7b:ba:da:c3:1d:
                    df:ff:ea:ad:06:40:e1:39:fe:8e:e4:b3:e3:44:85:
                    2b:3f:e3:39:aa:11:97:e1:dd:81:9f:ad:95:cd:e7:
                    64:f8:8f:1b:9f:78:43:43:fe:2f:40:b4:cc:43:b2:
                    31:69:5e:82:02:4d:89:85:f1:a3:63:f4:b4:4e:fd:
                    83:ae:9b:8b:19:59:a6:57:c0:b3:5b:d1:96:e7:df:
                    40:d9:17:57:2c:e4:38:8e:a1:b4:71:76:15:d1:28:
                    e7:bd:ad:0c:20:77:29:43:7e:d4:67:20:94:4a:43:
                    65:6d:8f:26:95:45:9c:38:ef:5e:bf:66:82:2d:1d:
                    9b:2b:74:32:89:dd:6e:2f:f3:3a:f8:8b:83:85:39:
                    d8:06:22:36:fd:06:30:ea:17:96:50:73:77:1b:7d:
                    22:88:4a:eb:8c:7f:84:89:fd:5a:5e:3b:54:7f:8e:
                    0b:1f:84:e9:22:66:63:15:87:cd:76:ac:a3:33:48:
                    f6:2d:5c:f3:27:96:a7:e1:56:3d:89:7e:68:bc:1b:
                    76:27:72:04:79:bd:1f:33:f1:62:58:fe:a9:29:ae:
                    65:ea:0b:f1:33:2f:f7:e7:09:3c:e7:8d:39:c2:b9:
                    2f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:47:AD:E7:54:26:43:48:51:F7:31:3B:FB:E4:CE:AF:4D:D1:8A:9E
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/AUet51QmQ0hR9zE7--TOr03Rip4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.64.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:c3:a8:ea:ea:0c:6b:fb:d9:86:8f:19:85:19:7c:66:b9:9b:
         3f:4b:6f:d5:ec:c4:71:b3:75:82:95:7d:f4:26:66:a1:7e:25:
         c9:f3:12:62:fd:d1:80:06:04:ea:3c:ab:39:a6:83:11:77:4d:
         82:3d:6d:9c:87:7b:27:15:49:ce:7f:2e:ad:44:6f:a5:1a:00:
         05:0f:73:54:7e:e8:4b:4b:29:7f:ac:85:2c:64:22:67:55:bc:
         5f:28:24:50:35:a8:f8:0d:86:b8:a4:8e:bb:d3:f1:52:a8:1c:
         2f:da:63:f1:3f:10:6a:45:68:86:60:0f:92:cb:a3:f1:53:8b:
         40:7f:ab:a7:5a:b0:ef:de:37:58:2f:f9:95:4f:a7:0f:87:31:
         cc:a7:04:a0:23:fb:fd:33:3a:bd:f0:5a:cc:73:b1:bc:09:05:
         d7:e0:a0:2b:3c:18:75:ea:68:b3:01:05:7f:04:03:94:9e:27:
         9f:44:98:05:3d:ce:2d:8e:53:9c:c6:75:85:ea:18:74:32:20:
         23:c7:48:5c:c1:fc:db:f1:41:41:d7:72:de:f0:b0:d5:de:67:
         ef:d0:21:90:5d:7e:82:01:2c:57:74:c4:ec:33:00:11:ca:3d:
         29:4c:01:ba:dd:84:68:f8:48:36:31:0f:43:83:67:ab:85:24:
         47:c5:5c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----