Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/OBdFbKb4_JjQx-JqOzZeIWPlzpc.roa
File:                     OBdFbKb4_JjQx-JqOzZeIWPlzpc.roa (raw, json)
Hash identifier:          WFgUPfKZb/qYzYdzoLtIQB2wrjg1Tx9PH8NOoX8A860=
Subject key identifier:   38:17:45:6C:A6:F8:FC:98:D0:C7:E2:6A:3B:36:5E:21:63:E5:CE:97
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0B6F
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/OBdFbKb4_JjQx-JqOzZeIWPlzpc.roa
Signing time:             Tue 29 Sep 2020 10:08:25 +0000
ROA not before:           Tue 29 Sep 2020 10:08:25 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24165
IP address blocks:        115.165.240.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2927 (0xb6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:08:25 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=3817456CA6F8FC98D0C7E26A3B365E2163E5CE97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9e:94:cf:b7:ed:6c:a7:36:49:2b:82:a9:66:
                    d9:76:d0:96:30:af:d8:d6:17:80:3a:27:a9:3a:8c:
                    1e:86:d6:55:b0:e3:21:b4:d1:7a:02:4b:75:2e:8c:
                    8c:c8:f7:a6:86:7c:d3:1f:fd:d2:03:fe:b6:88:8d:
                    a2:1f:7a:4e:fe:60:31:2e:e7:b2:21:d0:42:d1:8f:
                    04:8d:11:4f:ea:a8:1a:b5:8f:9a:01:c7:45:e5:f6:
                    e0:95:da:f5:fd:fe:01:8f:17:43:04:88:e7:e6:01:
                    cb:59:ee:48:c1:e6:44:9d:77:41:c4:22:9d:1f:41:
                    cc:94:42:6f:e5:84:27:d1:ba:e7:61:18:bb:23:3c:
                    75:58:0e:98:f6:94:2e:9c:62:9b:91:80:bf:d2:a4:
                    cd:44:d2:cc:6c:4c:9c:09:f0:ff:ff:53:92:e3:fe:
                    df:0b:ea:da:73:e6:82:c7:72:ea:d6:5a:a4:c0:4e:
                    49:c5:fd:5f:bf:35:0d:f4:d1:a7:6e:94:52:7c:46:
                    e4:81:96:42:17:de:6f:d9:41:3e:33:7b:eb:67:0c:
                    3d:c0:50:80:a9:2e:3b:f0:57:c2:4f:52:e9:16:72:
                    44:51:b5:21:32:52:43:10:e8:2c:82:ad:c4:79:31:
                    56:a7:cf:66:bb:25:ed:5c:af:3f:ce:c5:97:22:be:
                    dc:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:17:45:6C:A6:F8:FC:98:D0:C7:E2:6A:3B:36:5E:21:63:E5:CE:97
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/OBdFbKb4_JjQx-JqOzZeIWPlzpc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.165.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         83:33:fe:d4:f9:33:cf:81:81:78:5b:7c:88:cf:60:05:47:bb:
         a6:4a:c6:5c:f8:c1:ec:bd:7d:ba:36:d9:01:d0:41:47:97:d9:
         35:be:dc:46:e7:f7:e3:98:b9:d9:1e:e8:ae:9a:79:44:1a:ec:
         1f:d1:50:19:be:bf:1b:d5:db:0a:97:42:33:d9:b7:38:99:cc:
         22:ef:de:91:01:d5:d2:39:88:b4:48:7e:9d:96:25:f7:91:bc:
         48:ca:e6:20:74:7e:d8:00:a5:ca:77:e5:30:14:ae:98:72:d4:
         d6:c2:a8:20:19:e1:61:95:46:95:f8:28:3e:0b:16:34:48:49:
         24:9f:5d:53:96:95:e6:b7:09:db:90:df:3b:b3:04:12:79:ad:
         fc:cb:df:b8:31:02:b4:00:a4:4e:6d:32:45:04:24:82:89:3b:
         8c:4b:e2:d6:e2:a7:fc:98:65:ca:60:f5:6d:e1:29:07:30:5c:
         32:f3:a2:ed:63:dc:74:db:03:cf:37:cd:7e:bc:bf:19:8a:9c:
         d3:c0:6e:87:e2:71:66:19:e5:fe:7d:96:ea:28:16:aa:8e:84:
         9d:8e:aa:5c:bf:4f:8d:18:bc:ad:4f:7e:e8:84:af:2b:c1:65:
         82:b9:f1:1a:70:e9:40:57:37:47:fe:e1:a0:63:2b:e9:e0:da:
         44:f7:7b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----