Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/HTqex6Uj0CR_wLkkMZazN6okCMQ.roa
File:                     HTqex6Uj0CR_wLkkMZazN6okCMQ.roa (raw, json)
Hash identifier:          z4rInqaJS8s9LE9DClXGdCA3iO+bVty/2vSMfsYPgYE=
Subject key identifier:   1D:3A:9E:C7:A5:23:D0:24:7F:C0:B9:24:31:96:B3:37:AA:24:08:C4
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0BCC
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/HTqex6Uj0CR_wLkkMZazN6okCMQ.roa
Signing time:             Tue 29 Sep 2020 10:08:50 +0000
ROA not before:           Tue 29 Sep 2020 10:08:50 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        122.100.95.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3020 (0xbcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:08:50 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=1D3A9EC7A523D0247FC0B9243196B337AA2408C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:f9:70:92:02:01:f3:dc:7b:16:95:e0:c2:71:
                    74:8b:24:c2:61:6e:80:d9:1e:ba:4c:dd:dc:be:7c:
                    62:c1:dd:09:4e:d2:fe:e5:2d:4a:c1:04:56:9d:b7:
                    e6:09:cd:3d:53:d5:fc:b7:65:96:58:83:8a:09:dc:
                    43:9e:be:bd:dc:41:fd:d6:5b:a1:c3:cd:e0:80:9b:
                    1a:39:85:29:a0:cd:6e:e8:11:da:80:4d:72:61:f1:
                    58:cb:c6:e9:0b:15:4f:22:78:32:7c:7c:dd:05:43:
                    fd:7b:5a:a0:98:33:4a:05:8f:8f:51:ef:95:01:a9:
                    c1:e4:b1:ee:bd:a8:ca:7a:b0:54:d6:f5:fe:85:49:
                    16:a9:39:0f:01:b2:dc:63:d5:e6:92:ea:9e:70:0c:
                    e5:ff:a2:5f:88:8b:bc:ed:f0:e2:86:cf:e2:c9:88:
                    6c:fe:2c:f9:d2:5e:61:0f:40:6d:53:78:c6:39:82:
                    4d:55:a2:79:b0:68:07:7d:4f:c2:1f:f4:94:56:83:
                    a0:08:9f:7a:d5:86:19:34:81:c4:24:7b:de:97:5a:
                    b5:c1:1e:f1:32:55:55:7f:85:01:53:3a:86:18:d4:
                    ed:aa:d4:24:27:93:1c:5c:ed:6c:22:a9:16:ba:7f:
                    19:fe:7e:fd:0a:51:d0:fc:36:4a:f4:4c:c7:08:c9:
                    06:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:3A:9E:C7:A5:23:D0:24:7F:C0:B9:24:31:96:B3:37:AA:24:08:C4
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/HTqex6Uj0CR_wLkkMZazN6okCMQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.100.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:45:3a:67:91:88:f1:cb:f3:4f:f1:2c:1c:03:dd:5c:c8:aa:
         1f:56:ba:13:3f:d6:fc:41:87:6f:65:2e:09:f3:01:69:30:2f:
         30:a4:53:ca:a4:87:fc:a2:44:f3:d7:97:17:0f:b3:37:7a:ac:
         88:85:7c:71:58:5b:6d:21:c5:d3:eb:54:86:7c:d4:6a:b7:2e:
         73:0d:2b:dc:f5:ac:a2:98:97:0b:ad:4f:cf:8f:4c:4e:e7:d9:
         3b:82:b1:89:f0:86:4e:97:b2:b7:1f:d9:ed:38:c8:d6:0c:a1:
         7d:80:a2:9a:39:3b:fb:4c:69:de:c3:f7:44:9b:6c:72:1c:b4:
         d4:35:83:56:1f:a8:50:f6:f2:55:e4:bd:bc:fb:45:e0:ad:70:
         8c:4f:50:f3:bb:06:b7:42:69:80:11:ed:2f:b6:a7:8f:9e:ce:
         23:5a:b7:04:6b:ae:a8:27:dc:17:7b:ee:13:da:3a:c0:22:92:
         35:35:87:e8:c6:6a:bb:16:31:da:c9:26:c6:4d:14:bf:33:ff:
         c7:61:73:4b:da:f4:23:e6:da:5a:4b:f0:c5:9f:fb:af:43:f1:
         0d:a4:1c:f0:7d:bf:f2:5d:73:6d:c7:40:5d:ea:3b:6f:45:cc:
         1a:d1:cc:59:1a:a7:5c:55:3e:f0:59:fc:d3:fb:4b:d8:8d:f3:
         cb:ff:7a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----