Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/N8KAHNhSPj6jsHyYkRT2LmMyChs.roa
File:                     N8KAHNhSPj6jsHyYkRT2LmMyChs.roa (raw, json)
Hash identifier:          L/6bdw+QGM+C04mAkY4ykIeUGZogr2Vbrm0cOAy2gMg=
Subject key identifier:   37:C2:80:1C:D8:52:3E:3E:A3:B0:7C:98:91:14:F6:2E:63:32:0A:1B
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0AA2
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/N8KAHNhSPj6jsHyYkRT2LmMyChs.roa
Signing time:             Tue 29 Sep 2020 10:07:26 +0000
ROA not before:           Tue 29 Sep 2020 10:07:26 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24165
IP address blocks:        122.254.56.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2722 (0xaa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:07:26 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=37C2801CD8523E3EA3B07C989114F62E63320A1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9a:b4:47:6b:0c:b8:6b:bf:b4:7b:0d:eb:c0:
                    e5:a7:ba:fe:bf:1d:e2:51:57:b7:1d:95:7e:e9:ab:
                    6e:c9:17:14:eb:60:a1:fe:ef:a7:14:1f:93:81:97:
                    06:f7:b2:62:e0:d9:05:2c:91:c0:52:2e:d5:4c:b6:
                    3e:59:c5:47:dd:c7:82:68:ca:3c:d6:0f:03:30:10:
                    0b:50:c7:d4:9f:83:e8:ca:bf:f1:3c:6d:8b:17:b9:
                    e2:8b:62:b3:2e:12:6a:91:85:2c:fe:2d:31:6a:04:
                    89:76:c5:56:74:4a:73:d8:30:ff:72:d1:82:f5:e0:
                    8b:16:59:4a:61:fb:1d:d2:17:db:b2:86:ff:d5:80:
                    4c:42:75:db:41:f3:e7:84:6c:37:3e:c6:57:ab:48:
                    34:1f:5e:73:b4:07:3f:82:00:19:d3:bb:56:f2:eb:
                    bc:45:7c:68:d6:48:6d:94:c0:fb:a0:5a:6d:cc:32:
                    98:b5:5e:8a:3d:4b:d8:f9:1e:18:5d:09:74:7a:1d:
                    58:43:fa:2e:4b:86:b8:95:5c:f9:e7:ca:a8:f8:cb:
                    c5:a6:76:85:fa:a4:dc:6a:7a:52:64:df:36:e0:18:
                    47:54:fc:84:bd:f9:bc:4b:a9:cb:db:d7:10:62:b8:
                    c6:ce:52:73:0b:14:73:fc:9f:1a:79:b0:e7:4d:a5:
                    c3:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:C2:80:1C:D8:52:3E:3E:A3:B0:7C:98:91:14:F6:2E:63:32:0A:1B
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/N8KAHNhSPj6jsHyYkRT2LmMyChs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.254.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8b:2d:3f:e5:f9:9c:cd:df:00:aa:ff:f8:d4:ed:a1:e2:5b:16:
         d7:3c:ed:4a:53:5a:68:3c:94:04:44:1c:d0:2d:35:e1:53:9b:
         4b:03:79:d8:e2:16:25:ee:93:d0:e1:3c:a3:99:59:f1:73:e4:
         47:db:31:b3:6b:16:dd:36:ab:85:41:b5:a1:e1:61:a2:e5:fa:
         a1:00:8d:30:17:ab:d1:d8:5a:63:6f:17:6e:ea:6a:71:57:e6:
         4a:f5:b3:14:9b:4e:20:94:ab:a3:c1:6f:8b:09:b2:32:36:5a:
         71:47:0a:b8:86:16:ef:d7:fb:65:56:a6:df:57:0d:59:2c:ba:
         6e:b4:fa:93:d7:64:1d:da:a1:22:10:12:fb:92:53:19:e6:98:
         c5:f5:1b:24:c5:ff:a7:2f:de:f1:60:8f:6d:16:e1:5e:9f:29:
         af:e4:bf:4b:bc:e7:cf:f5:d4:2e:a3:a6:a4:4e:5d:01:72:a3:
         0b:ad:ed:6f:9a:f5:d0:c1:fc:f6:ba:03:25:cd:79:d9:cf:d0:
         60:7b:80:ea:1f:e2:25:0d:01:2b:9e:de:8e:01:6e:0e:79:04:
         87:17:dc:96:55:6f:7c:04:e6:00:44:a2:81:fb:de:64:01:ec:
         a9:44:b8:c3:2e:cc:2f:ea:31:a4:7d:90:e1:cf:83:6f:bd:db:
         83:56:a4:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----