Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FmKhYCjZe-2a6wrDGHCmzHm_5EM.roa
File:                     FmKhYCjZe-2a6wrDGHCmzHm_5EM.roa (raw, json)
Hash identifier:          HspJCnUK17ZIqYfBka+HcGA8dLMgJ70Ym+lgyC/wVIQ=
Subject key identifier:   16:62:A1:60:28:D9:7B:ED:9A:EB:0A:C3:18:70:A6:CC:79:BF:E4:43
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0BD7
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FmKhYCjZe-2a6wrDGHCmzHm_5EM.roa
Signing time:             Tue 29 Sep 2020 10:08:53 +0000
ROA not before:           Tue 29 Sep 2020 10:08:53 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        180.218.246.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3031 (0xbd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:08:53 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=1662A16028D97BED9AEB0AC31870A6CC79BFE443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e0:fa:c4:5f:2e:d1:3d:29:e9:49:77:5c:d5:
                    0e:a9:82:ee:d2:bf:3b:a4:bf:bd:99:de:38:59:e0:
                    b7:af:e0:57:9a:93:0b:52:2c:0c:35:46:dd:71:51:
                    29:4a:3a:99:34:7e:84:b6:13:ae:a6:ad:be:56:2c:
                    14:74:12:d1:f6:fe:ac:ca:95:c9:55:d8:10:87:54:
                    d2:11:24:41:37:e7:e8:49:df:61:f1:a7:dc:2c:46:
                    5f:c1:40:bc:b3:15:3e:df:94:c6:e4:68:ca:63:f8:
                    77:38:85:f8:5a:a4:c8:1a:38:e0:82:e6:69:2c:ed:
                    01:04:51:06:37:54:7a:ea:0c:83:22:58:e6:3a:b9:
                    60:91:50:f1:23:47:a3:91:55:68:a8:ee:36:3d:31:
                    00:b4:74:00:4e:d5:69:3b:18:d0:3a:16:53:9f:1b:
                    ce:86:93:f7:00:02:23:2c:6b:c6:e5:1a:57:7b:d6:
                    df:b0:97:02:1f:1f:87:f8:55:4c:da:8d:0c:71:3b:
                    35:9c:37:1c:ca:4c:22:e9:c6:cd:97:f8:22:ae:7f:
                    41:bf:f1:90:a7:31:87:9d:e2:8d:ea:88:f2:66:58:
                    7e:7e:60:f2:30:af:24:56:8e:a3:4c:0b:57:a5:d6:
                    99:b5:39:66:d3:9f:33:8f:74:9f:23:55:dc:2f:aa:
                    79:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:62:A1:60:28:D9:7B:ED:9A:EB:0A:C3:18:70:A6:CC:79:BF:E4:43
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FmKhYCjZe-2a6wrDGHCmzHm_5EM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:f0:4a:4d:f3:ef:cc:c4:1d:ea:52:7e:c9:2b:0f:5b:ca:03:
         4b:c0:2b:cf:9d:aa:2d:f2:da:0e:19:4c:fd:64:1a:51:f5:cb:
         4b:fe:99:a1:37:9c:b9:4e:8f:56:0c:24:ee:0c:d2:1e:75:08:
         30:7c:43:07:eb:27:aa:93:99:89:1e:fd:4c:10:ab:63:0c:f0:
         c7:fb:25:06:c1:3b:7d:af:2b:34:2b:09:3e:0c:c9:1c:6f:0c:
         83:ed:79:7c:42:ce:75:dd:ff:f8:e1:5f:b8:7e:28:6c:21:1d:
         25:03:cd:40:12:a9:10:40:69:f4:30:67:6f:85:30:20:15:51:
         f7:56:1f:89:1f:0d:31:65:e6:d4:e4:b1:70:8d:d6:6b:f0:72:
         75:f4:a1:43:55:66:85:8c:71:fb:3c:ff:5d:fc:59:f1:49:66:
         c3:45:f2:23:eb:8c:39:02:a1:6c:d0:c7:ae:10:ae:94:ae:0b:
         bb:70:4d:42:df:83:5b:ad:8e:4a:25:2f:fb:0b:4a:a3:c7:4c:
         6e:fb:c5:e5:7c:b7:87:b9:1e:ee:0d:b1:c0:7a:0d:e1:9a:87:
         e5:a7:2c:41:a1:08:49:8c:77:59:3f:4d:12:9c:74:19:02:06:
         af:53:16:a9:c3:0b:b2:ca:d7:4c:73:fc:fb:98:e2:32:38:66:
         b3:6e:c0:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----