Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/JJAL8yKk-HI1kiZIT87y-mYAtZA.roa
File:                     JJAL8yKk-HI1kiZIT87y-mYAtZA.roa (raw, json)
Hash identifier:          BVrw6pG9zAiYG2svO3qQPotOOEqxFdogsR4/qcfixNc=
Subject key identifier:   24:90:0B:F3:22:A4:F8:72:35:92:26:48:4F:CE:F2:FA:66:00:B5:90
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0B26
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/JJAL8yKk-HI1kiZIT87y-mYAtZA.roa
Signing time:             Tue 29 Sep 2020 10:08:04 +0000
ROA not before:           Tue 29 Sep 2020 10:08:04 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        114.198.176.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2854 (0xb26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:08:04 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=24900BF322A4F872359226484FCEF2FA6600B590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:71:41:fe:47:36:2e:74:f3:5c:a5:f4:ab:31:
                    ef:cd:c7:b5:8b:b3:57:5b:9e:df:3a:f7:2d:9c:ac:
                    15:28:55:5a:e8:61:2e:50:d1:16:e6:05:e4:2b:3f:
                    3f:99:88:96:d1:d3:c3:5d:86:8d:4f:87:d9:0f:fc:
                    13:57:66:7c:da:92:f8:c0:11:34:a8:c3:3c:dd:97:
                    72:41:78:c6:3a:47:28:db:8d:d5:25:4e:50:2b:89:
                    53:f4:95:de:8e:45:5e:67:12:f8:d5:a9:17:ac:f9:
                    ef:dc:62:e8:00:77:0a:85:32:df:f7:e9:61:17:be:
                    e5:3d:35:1a:aa:da:99:15:ae:4d:04:8a:1a:57:12:
                    7d:37:56:cd:29:90:0a:2b:e2:43:95:93:32:34:d0:
                    d9:9f:b1:82:80:cd:47:ac:49:66:5a:9f:62:c4:82:
                    70:d8:f7:1a:f5:0c:e7:a1:e0:f1:1d:48:c1:57:15:
                    f3:0f:e8:6d:20:35:d2:05:25:d6:ce:89:7f:9c:49:
                    4d:52:e9:2a:e0:45:66:33:d3:ac:b7:f7:b4:84:e8:
                    80:31:18:6c:ea:bf:a1:16:c6:ec:09:54:15:e1:96:
                    13:8a:44:8a:76:f6:7f:a7:c6:11:45:fc:71:d5:15:
                    56:68:26:eb:6d:fb:29:ea:98:23:7d:1f:df:42:81:
                    b3:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:90:0B:F3:22:A4:F8:72:35:92:26:48:4F:CE:F2:FA:66:00:B5:90
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/JJAL8yKk-HI1kiZIT87y-mYAtZA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.198.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5c:57:33:9b:c1:7d:ee:ff:d4:38:e1:24:fe:d9:57:8a:0e:51:
         15:09:b3:45:20:6e:4f:79:75:cc:44:2f:43:e3:28:a7:52:f2:
         25:6c:27:9d:d0:41:97:aa:5d:aa:0e:60:ed:7d:03:82:c8:a7:
         a5:ae:e3:20:1c:52:2d:84:87:79:c9:d4:46:b1:49:74:f7:d9:
         c5:06:f2:24:ed:e7:83:3e:15:41:6b:22:4c:1a:18:4b:a5:42:
         cd:20:c5:91:23:26:db:a8:ef:54:d1:44:b2:38:55:2f:52:42:
         a7:26:f9:b8:1f:5d:44:ac:5c:7d:64:fd:36:86:d5:77:ac:dd:
         57:1c:1d:b2:a0:75:b2:cf:bb:45:16:c5:d3:69:ee:83:bc:ee:
         7d:bb:cf:36:e0:a7:38:27:d2:36:cb:23:45:03:6f:a0:08:b1:
         23:49:1d:b2:0d:ae:3b:58:9b:fa:ad:51:d3:8f:7f:2c:ec:66:
         20:79:19:6a:92:8a:78:1c:a3:70:dc:8e:08:8b:ef:46:bb:71:
         38:67:13:c8:09:93:d5:c8:ba:92:49:6b:e1:8a:95:29:0c:ef:
         d4:0a:ce:5d:c4:19:0c:6f:7d:42:9b:8e:1f:76:17:be:79:9c:
         86:64:1f:8d:9e:2d:84:8e:3e:2e:9a:d0:5b:14:f0:23:f0:cb:
         4c:71:6d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----