Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ILtB40oodyJ3VC-qCIf5T2W7Ujo.roa
File:                     ILtB40oodyJ3VC-qCIf5T2W7Ujo.roa (raw, json)
Hash identifier:          ZYKQCcmzkbGuTbRxJQ8JOmSMWXYWU16ZBfM4SZyK9Ok=
Subject key identifier:   20:BB:41:E3:4A:28:77:22:77:54:2F:AA:08:87:F9:4F:65:BB:52:3A
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0BBE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ILtB40oodyJ3VC-qCIf5T2W7Ujo.roa
Signing time:             Tue 29 Sep 2020 10:08:48 +0000
ROA not before:           Tue 29 Sep 2020 10:08:48 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        119.77.200.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3006 (0xbbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:08:48 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=20BB41E34A28772277542FAA0887F94F65BB523A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:86:c1:b9:57:22:a0:ca:e8:73:e8:dc:47:5d:
                    93:b6:b7:e2:65:4d:68:68:64:32:e0:2d:6a:44:af:
                    12:57:9c:c3:86:c7:72:10:28:d3:d8:2b:d8:d1:0a:
                    ce:67:d3:fe:b0:18:62:1a:69:29:2a:ff:76:b0:b1:
                    58:44:3e:e3:49:02:b7:49:50:05:d8:60:fc:8f:3a:
                    4b:cb:9a:6c:d4:52:84:45:de:3f:f9:d8:cb:76:09:
                    1c:de:2c:9e:14:55:c0:e4:fd:44:dc:24:ed:0e:c5:
                    99:f8:cf:84:3d:c9:1f:b6:4b:0d:c9:bf:90:c1:69:
                    dd:b4:9b:a5:c8:04:47:66:b6:d6:ed:40:93:66:df:
                    af:08:9a:06:c7:5b:de:1a:fd:d0:ae:88:c6:d2:4c:
                    bd:c2:d3:23:c9:80:d9:e1:87:d3:f2:a0:85:00:ce:
                    3c:38:30:c3:e6:bf:91:b9:e3:46:8d:60:46:1a:66:
                    cd:3c:98:bc:ff:0e:3a:05:2d:fc:5b:dc:43:1d:51:
                    30:bc:36:44:f9:ea:d7:74:fd:56:2e:86:6a:97:0e:
                    2d:15:c5:2a:bc:7e:35:85:5b:50:37:14:3c:36:71:
                    40:13:7d:4f:0e:cb:fc:41:e5:a2:d0:6d:5b:97:4c:
                    96:0b:70:d5:64:67:a3:53:c3:9f:33:6e:57:d7:4c:
                    e6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:BB:41:E3:4A:28:77:22:77:54:2F:AA:08:87:F9:4F:65:BB:52:3A
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ILtB40oodyJ3VC-qCIf5T2W7Ujo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.77.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         60:38:b5:46:66:de:33:87:3e:cb:a0:45:32:6d:ba:3d:01:88:
         d4:1e:b2:03:68:41:aa:54:44:83:86:92:14:c1:4b:38:97:c1:
         40:cb:5f:b1:df:75:ed:a5:04:be:60:6f:1f:67:7a:37:67:c0:
         8b:02:32:cf:10:6e:23:02:13:8f:12:0b:16:27:b6:ec:73:28:
         e4:b9:24:54:10:50:56:c1:94:d1:6c:8d:69:2a:50:35:57:ed:
         c2:d8:5b:59:85:5e:55:95:7f:7d:5a:41:6b:e6:30:08:64:e4:
         90:8a:e5:56:93:84:d9:79:6c:94:6c:e9:5b:30:45:b2:68:bf:
         6b:e6:07:fe:42:e2:01:08:14:47:e5:d5:e9:32:e3:31:0c:c7:
         28:5a:e2:a7:15:89:69:34:c9:51:73:30:84:9a:01:97:88:c9:
         a6:86:5c:89:54:a1:4e:b2:51:45:70:a1:12:a3:86:bb:ee:9a:
         61:3c:e7:d0:3c:83:4f:c2:fa:ba:b1:ac:6f:69:59:04:1e:fd:
         f3:ff:96:92:17:64:32:04:d2:46:1c:11:78:e2:c9:6f:84:aa:
         e1:dd:b3:ca:0b:a9:2c:bf:08:d3:dc:e4:de:b5:1e:7a:95:a4:
         ef:31:db:8f:44:fe:86:8d:e1:40:28:d1:35:ff:97:61:e9:50:
         f9:20:6c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----