Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/BLR4awqyDDT0jcO2KMxgn_LHvaY.roa
File:                     BLR4awqyDDT0jcO2KMxgn_LHvaY.roa (raw, json)
Hash identifier:          pCEtK4OlZnLZ2GHEc3q+2y7vysHSOVbUKrAIsUapUak=
Subject key identifier:   04:B4:78:6B:0A:B2:0C:34:F4:8D:C3:B6:28:CC:60:9F:F2:C7:BD:A6
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0B23
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/BLR4awqyDDT0jcO2KMxgn_LHvaY.roa
Signing time:             Tue 29 Sep 2020 10:08:03 +0000
ROA not before:           Tue 29 Sep 2020 10:08:03 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        103.225.1.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2851 (0xb23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:08:03 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=04B4786B0AB20C34F48DC3B628CC609FF2C7BDA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:be:73:92:60:c5:b4:eb:9a:4d:9a:e1:7d:c0:
                    b9:05:e8:4a:1f:51:da:66:2d:d6:9a:bc:25:07:e4:
                    07:22:c7:09:cd:a2:53:f2:1a:cd:00:bd:3d:88:06:
                    93:59:14:7f:23:d9:3d:5a:68:87:97:ff:18:7a:86:
                    12:28:5b:9b:b5:f4:e3:59:de:00:73:24:78:89:ee:
                    68:45:be:8f:4f:3f:de:ed:d1:2d:82:5f:ab:4c:75:
                    11:c5:6c:b1:a1:d0:1f:ff:60:6b:17:b9:01:c8:89:
                    56:14:a8:40:2b:ae:a4:69:7e:e4:30:e2:e7:80:1c:
                    35:0e:6c:67:42:fd:57:88:1f:db:dd:7f:df:28:82:
                    c9:2f:04:e4:84:bf:6d:97:c8:a7:91:3d:2e:6b:3e:
                    55:4a:a1:ad:53:76:14:d6:5a:e3:11:b5:2a:4c:d7:
                    77:3b:f8:ca:ce:08:80:ef:c2:b8:31:75:32:f3:5c:
                    0a:11:78:91:a5:5b:24:5e:eb:b0:ad:3e:5e:1d:c8:
                    ac:8b:c8:56:08:9a:b0:8f:f0:9e:7d:18:54:db:1f:
                    f7:d0:71:14:0b:a4:ff:30:ed:97:3f:09:58:ce:fa:
                    c4:1d:b4:8f:72:9e:b6:0f:25:d8:fe:80:f8:4d:5b:
                    46:d1:95:9b:87:9f:51:12:10:f0:31:2d:5c:73:73:
                    ef:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:B4:78:6B:0A:B2:0C:34:F4:8D:C3:B6:28:CC:60:9F:F2:C7:BD:A6
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/BLR4awqyDDT0jcO2KMxgn_LHvaY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.225.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:d2:82:a0:d1:d5:d4:51:e7:6d:bc:e3:6d:ea:9e:08:80:49:
         f6:37:dc:aa:3f:e6:64:e3:31:b6:77:58:09:21:d5:f2:52:cd:
         a4:00:91:a9:13:85:40:2b:91:2f:bf:72:17:63:fd:da:91:07:
         db:40:92:e1:bc:9e:4c:22:3f:b7:70:1d:17:7a:96:2f:f7:3b:
         81:ca:8f:a0:ff:be:93:b5:9e:b3:85:a6:e8:68:81:06:c9:c2:
         42:80:ad:cd:57:03:d3:57:5a:4b:ca:97:b1:2e:8d:b7:0c:05:
         b7:0d:df:63:d3:7b:bd:4f:81:0d:9b:f4:2a:4f:6e:42:33:f6:
         97:bd:19:23:42:6a:e3:60:c8:76:46:59:50:9e:85:dc:d8:33:
         65:96:9a:a4:73:e0:5e:43:c4:ec:76:fc:04:a2:d5:70:6a:36:
         82:a7:dd:02:24:30:48:77:40:ef:bb:0a:d7:17:ae:0b:34:6b:
         06:dd:3f:31:31:45:95:ac:29:b8:72:50:29:22:61:fa:ca:30:
         d1:59:92:bf:9e:71:37:a4:6c:8b:7b:9f:e7:b8:78:eb:c5:79:
         5a:64:b8:34:f0:0a:7c:32:a2:da:35:4a:79:3b:2c:b4:0b:31:
         64:0d:4b:d8:b3:77:cb:7e:4e:b8:a2:f8:d9:ff:af:b7:86:65:
         a5:41:df:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----