Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IPHf2KE5T0uCAQI3U1LGzvqOldk.roa
File:                     IPHf2KE5T0uCAQI3U1LGzvqOldk.roa (raw, json)
Hash identifier:          lK1z2oVzR1LlV1Xy5Kzpq5r2vPUKbdirfOu52PcdsNI=
Subject key identifier:   20:F1:DF:D8:A1:39:4F:4B:82:01:02:37:53:52:C6:CE:FA:8E:95:D9
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0BB6
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IPHf2KE5T0uCAQI3U1LGzvqOldk.roa
Signing time:             Tue 29 Sep 2020 10:08:45 +0000
ROA not before:           Tue 29 Sep 2020 10:08:45 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        119.77.160.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2998 (0xbb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:08:45 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=20F1DFD8A1394F4B820102375352C6CEFA8E95D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0c:2f:50:52:a9:a5:32:3b:f1:9b:f3:33:8a:
                    fb:46:dc:00:ff:6c:bf:2c:49:8a:9a:24:53:7c:aa:
                    c7:84:b9:6e:51:ba:9a:31:66:e8:8b:b7:21:fa:b9:
                    74:5a:b1:f8:c0:44:55:33:f7:cd:dc:7f:e6:2e:2f:
                    8a:ca:a1:1d:0b:e0:5f:b6:c5:4f:d5:8d:ab:92:a9:
                    76:04:36:95:e9:6c:0b:1f:09:c4:cb:7f:36:ca:95:
                    db:b8:c4:e7:bf:21:d3:28:30:61:76:d8:ef:19:79:
                    be:93:5d:26:2e:a2:84:f2:53:d3:ec:3a:9c:e5:fc:
                    e3:ef:fc:4f:87:34:06:d7:d8:91:d4:3d:84:d4:6e:
                    07:6c:2c:fb:03:71:1d:19:e4:5c:fb:dc:4b:95:93:
                    2c:dd:bc:2b:02:30:00:3f:18:bc:af:7f:eb:6a:2e:
                    56:6d:87:85:bb:eb:1d:01:f7:39:58:e2:1d:f2:88:
                    b9:74:92:93:9a:22:6b:d4:bf:50:3c:ce:5f:b4:0a:
                    4f:67:6e:d2:34:fd:7d:5e:d0:f9:c9:ee:87:b3:90:
                    af:2b:5a:54:02:10:86:5d:ce:6f:0c:a7:6f:b4:3e:
                    b6:06:8d:6f:73:e7:d0:a0:a5:b3:18:0d:43:0c:a6:
                    f2:00:29:a9:40:4f:48:c1:43:b1:b7:27:14:c2:6e:
                    46:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:F1:DF:D8:A1:39:4F:4B:82:01:02:37:53:52:C6:CE:FA:8E:95:D9
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IPHf2KE5T0uCAQI3U1LGzvqOldk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.77.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5c:93:03:f6:b7:47:f2:68:7f:7e:84:cc:c2:df:e6:6f:50:22:
         23:29:dd:af:23:60:02:7e:7f:78:bd:e0:24:6f:b6:c4:fa:10:
         49:55:a7:5b:85:a8:b6:ff:6f:b7:8e:fa:f9:25:8d:0a:05:87:
         a2:6b:8b:44:96:92:6b:80:4d:0d:cb:9a:d5:07:31:e6:f3:6c:
         d0:c5:60:c1:1c:f8:69:99:7f:61:c4:d6:fb:94:03:47:8c:21:
         7e:4a:ad:9d:f1:a0:ae:f5:b6:c5:a7:d7:9d:8e:51:cb:16:f8:
         f7:bc:c4:37:8f:5d:a9:af:a9:4c:37:bc:d8:fc:66:a4:b7:0d:
         28:f2:fb:13:de:bb:6c:4d:02:37:a2:73:1e:da:ce:d0:9a:7f:
         48:e4:91:5e:f1:85:6b:1d:bd:58:f4:c2:f3:0a:78:f8:0d:65:
         64:e6:1a:75:5a:4b:44:b9:90:89:98:a0:bc:87:86:02:67:1d:
         4e:4f:ab:38:69:d1:c4:e6:62:b5:76:5b:25:a2:3d:62:d5:1f:
         3c:60:d7:7a:9e:cd:23:b5:6e:bf:92:c2:36:e9:88:9f:be:17:
         83:f5:83:3a:1f:d3:ed:23:1d:69:66:ad:73:d3:34:d8:97:1b:
         8b:ab:ea:31:e9:ed:90:91:3c:cd:26:02:4e:b1:1c:1e:63:1e:
         27:ac:0a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----