Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/DbjnPCvP7CXGWvc2Ii0knCmGKhY.roa
File:                     DbjnPCvP7CXGWvc2Ii0knCmGKhY.roa (raw, json)
Hash identifier:          gk6zDgXszN3fXvK5tH/Zh3YbBdBmS28NGQ7nXLaNWpo=
Subject key identifier:   0D:B8:E7:3C:2B:CF:EC:25:C6:5A:F7:36:22:2D:24:9C:29:86:2A:16
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0AB0
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/DbjnPCvP7CXGWvc2Ii0knCmGKhY.roa
Signing time:             Tue 29 Sep 2020 10:07:30 +0000
ROA not before:           Tue 29 Sep 2020 10:07:30 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        211.76.79.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2736 (0xab0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:07:30 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=0DB8E73C2BCFEC25C65AF736222D249C29862A16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:44:f6:41:09:5b:cb:cb:a3:f6:37:b1:9e:34:
                    05:e6:68:f5:10:d0:84:6b:4d:40:c5:6f:d7:a0:6c:
                    69:a5:2c:af:b8:a6:c7:82:b7:cb:ef:b4:16:1a:a4:
                    e2:db:86:a9:ee:c5:ef:50:12:89:ed:e8:fc:a2:1e:
                    f5:62:46:17:2e:b0:0b:fb:20:47:ae:2e:76:85:ca:
                    6b:e1:74:16:b6:00:36:74:9d:44:f2:4c:51:b5:16:
                    0f:d3:13:08:2c:27:8f:92:b2:4f:29:09:c2:05:49:
                    f6:e6:ab:d4:c5:83:5e:dd:d9:e4:db:f6:d4:30:11:
                    a6:7f:77:fe:e5:80:5a:b0:10:d0:37:1a:75:3e:92:
                    31:b7:a3:f4:2f:42:c6:bb:54:13:3d:65:7d:3c:76:
                    31:a2:eb:05:5d:b4:43:6a:6c:af:bc:10:dd:c7:4f:
                    62:4d:a3:da:df:bd:a7:8a:e7:a6:63:71:1a:7a:cb:
                    40:46:a1:53:39:c7:ca:a5:73:02:94:73:c5:0c:4c:
                    d4:9b:44:be:c0:c1:71:f8:1c:33:3a:20:ec:c4:dc:
                    c6:52:24:be:64:32:15:0e:9d:d5:77:94:21:bf:5b:
                    f3:91:69:e3:a1:2f:ba:65:08:7f:a3:40:83:34:f6:
                    29:98:d0:a9:0d:fe:2e:35:8c:3c:c4:8c:1d:b3:f9:
                    1e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:B8:E7:3C:2B:CF:EC:25:C6:5A:F7:36:22:2D:24:9C:29:86:2A:16
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/DbjnPCvP7CXGWvc2Ii0knCmGKhY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:2c:37:b7:fd:5d:2d:40:bb:99:16:c8:c2:b4:db:9b:fa:a8:
         d4:8c:23:2d:b3:28:e7:b6:a2:78:79:78:0a:b0:d4:b7:8e:c5:
         53:75:5c:c9:b0:3c:8b:7d:8b:b4:b5:94:10:6a:13:0c:1d:37:
         ba:5d:10:b5:c6:5f:7e:62:77:8d:22:bc:d4:44:b8:d0:ab:5f:
         69:7d:e4:5a:f6:9d:ee:27:39:9f:f9:77:a7:4f:20:d2:95:45:
         0b:93:74:05:9d:a1:bc:d6:ec:b7:ae:40:41:7a:d2:63:bd:04:
         03:3e:28:1a:6e:c5:41:bd:17:2c:1f:a2:6b:ca:80:3b:51:a2:
         4d:41:d1:44:19:a8:a0:cf:d9:6d:e9:e0:4e:c7:df:0f:d4:1f:
         31:b1:13:4c:25:c4:f5:b9:2e:0c:52:f0:a0:ee:57:de:22:87:
         3a:97:e0:e8:d3:c7:fc:d4:60:7a:50:70:f7:97:a5:c9:2e:9d:
         e2:c9:d6:4b:c3:2f:f4:bc:cd:c2:57:09:fc:ac:30:6e:da:1b:
         73:e4:80:5b:88:51:29:7d:a0:74:b1:d8:5c:3f:eb:4e:7b:a5:
         a9:35:31:9b:02:cc:eb:48:4e:cd:35:d1:33:bb:57:38:57:da:
         2f:93:f4:c4:72:44:41:5f:55:44:14:f1:57:0d:af:cc:93:94:
         35:78:4e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----