Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/MKQAscFvmUgGnMK-3y8NtCKeZlk.roa
File:                     MKQAscFvmUgGnMK-3y8NtCKeZlk.roa (raw, json)
Hash identifier:          y8eqC8mxLCJs9c3Ap2SYdIGKwf/vWsvLqsH6EptswjQ=
Subject key identifier:   30:A4:00:B1:C1:6F:99:48:06:9C:C2:BE:DF:2F:0D:B4:22:9E:66:59
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0B8F
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/MKQAscFvmUgGnMK-3y8NtCKeZlk.roa
Signing time:             Tue 29 Sep 2020 10:08:34 +0000
ROA not before:           Tue 29 Sep 2020 10:08:34 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24163
IP address blocks:        123.0.44.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2959 (0xb8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:08:34 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=30A400B1C16F9948069CC2BEDF2F0DB4229E6659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:14:3c:39:08:1a:98:c9:58:0b:57:d9:1d:95:
                    01:49:41:dc:38:2c:66:08:4c:85:b1:94:b4:85:32:
                    cb:50:f4:86:94:ad:ef:55:9c:40:94:90:ed:43:c0:
                    22:db:97:04:f7:f4:82:a3:c7:4d:50:9c:cc:70:08:
                    7e:ba:a6:e1:c6:dc:91:76:f6:3c:e5:fb:a3:bb:47:
                    0d:0b:67:03:86:62:b6:a3:e6:18:34:1a:87:de:56:
                    3f:15:aa:c5:4b:64:ee:8f:fd:0d:58:d5:8b:6e:74:
                    1f:8c:36:d1:f9:9e:ab:45:43:99:3b:f9:67:25:86:
                    28:69:e5:84:b9:7f:58:a3:b2:c6:89:c5:d9:96:3d:
                    7c:e3:6e:16:f9:17:cc:fc:ef:d0:81:b5:0d:2b:32:
                    b2:ed:c2:f8:65:94:0a:40:82:98:15:01:b2:1b:cd:
                    1a:15:4a:3f:2c:42:3f:21:66:d4:1e:5a:26:bb:bf:
                    1e:5b:e0:2b:dc:44:55:88:2e:17:5f:79:80:79:b7:
                    71:51:42:0d:75:05:e8:12:34:2a:a2:c6:f8:d2:1d:
                    8e:cc:48:7b:83:94:8c:ef:06:53:56:42:ab:1e:7d:
                    d0:24:c0:15:d3:c4:cc:ab:27:c8:68:39:39:b1:ff:
                    27:24:44:42:f8:28:a3:6c:26:78:6b:d2:88:88:aa:
                    99:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:A4:00:B1:C1:6F:99:48:06:9C:C2:BE:DF:2F:0D:B4:22:9E:66:59
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/MKQAscFvmUgGnMK-3y8NtCKeZlk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.0.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:08:af:69:8d:14:dd:4f:4e:99:8e:31:f8:87:0f:11:e1:f7:
         b1:82:48:58:8d:c1:83:03:60:58:5c:56:4b:48:e6:3d:ae:55:
         d3:3a:b7:07:e7:26:55:06:b0:f7:b5:63:ba:5c:d8:f1:68:2c:
         6a:92:42:c9:6b:81:10:12:cc:ee:fc:7b:b7:93:25:59:01:7d:
         79:10:92:41:fc:78:74:3b:66:c2:5c:8f:37:1b:21:3c:43:2a:
         64:dc:b2:a2:d9:a4:6a:99:d3:60:9c:c5:fb:ce:52:97:1b:7e:
         01:7d:3b:68:de:76:69:bc:5a:ac:23:6f:ab:50:8d:be:6f:44:
         88:60:38:24:47:71:d6:36:09:eb:60:b1:6f:5f:ba:ae:d9:eb:
         f2:a8:e4:85:5f:4d:da:24:a6:30:9e:cf:29:f7:13:54:7b:68:
         44:86:9a:b4:82:fe:a4:64:cd:a9:e4:e3:84:b9:9b:3a:4d:fc:
         be:b5:af:de:8b:18:44:75:81:ac:8f:e7:86:5d:b9:01:a8:ae:
         39:84:07:a2:6e:9d:07:9e:68:cc:16:60:6d:73:68:cf:b4:ac:
         2a:27:9c:be:09:26:52:ea:e1:ac:84:8d:f4:e9:ba:c9:d0:08:
         14:ca:94:1c:69:f3:5d:dc:b3:49:ed:5a:d0:3e:20:c6:ab:4f:
         01:67:dc:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----