Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PK1rdSigqeG0FifIzo8-M34EtXQ.roa
File:                     PK1rdSigqeG0FifIzo8-M34EtXQ.roa (raw, json)
Hash identifier:          Esui0+rXDSMD5UAG2LXSVWH2TaFMRxbJRwQDeYI8/Og=
Subject key identifier:   3C:AD:6B:75:28:A0:A9:E1:B4:16:27:C8:CE:8F:3E:33:7E:04:B5:74
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0AD7
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PK1rdSigqeG0FifIzo8-M34EtXQ.roa
Signing time:             Tue 29 Sep 2020 10:07:41 +0000
ROA not before:           Tue 29 Sep 2020 10:07:41 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        49.159.144.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2775 (0xad7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:07:41 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=3CAD6B7528A0A9E1B41627C8CE8F3E337E04B574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:86:fd:0b:58:b7:b6:a5:15:f4:fd:f2:01:81:
                    e6:bb:d8:8e:a2:f8:41:03:18:94:83:71:9a:a3:b3:
                    91:07:d8:df:e4:69:de:a6:2e:4f:8a:c9:53:8b:e4:
                    64:31:14:c2:48:6a:7b:6a:7e:3c:6c:ad:3f:32:d1:
                    93:1c:26:21:af:09:ed:8a:2b:fe:00:7d:e9:e9:a9:
                    91:76:7e:30:7f:80:c4:40:55:7f:86:63:0b:b1:0b:
                    a0:3d:a8:ee:43:46:b1:db:13:19:ba:f6:eb:ff:0e:
                    00:7d:2c:99:0a:7e:4c:14:a3:38:8b:7e:c9:71:3a:
                    bc:94:03:da:00:3c:00:c3:4c:94:56:49:5b:4e:57:
                    06:f5:41:6b:3e:ad:4a:50:d3:3d:34:34:5f:3e:e8:
                    3c:de:93:f0:a0:2c:5e:ae:4d:3e:22:5c:ba:fe:00:
                    c4:07:19:dd:db:20:d7:ab:62:25:09:5b:60:d2:5b:
                    81:c6:ae:97:c8:ce:ac:b2:f5:6a:d6:ba:54:5c:eb:
                    a5:9f:85:d4:a1:27:e1:8e:c4:aa:6e:da:9d:7c:e1:
                    f6:8f:a5:51:80:fd:57:05:e8:ea:68:98:4f:8e:63:
                    64:22:a6:8a:c1:b7:42:b7:f9:ac:12:16:71:2c:31:
                    f7:14:e0:5d:b2:a8:ac:8a:07:62:5e:d1:51:35:47:
                    15:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:AD:6B:75:28:A0:A9:E1:B4:16:27:C8:CE:8F:3E:33:7E:04:B5:74
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PK1rdSigqeG0FifIzo8-M34EtXQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.159.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         60:6c:5a:19:93:d0:3d:5d:bf:f0:0a:f7:54:fa:02:f9:8b:aa:
         4e:de:80:a6:84:cf:7a:0f:a3:dd:fc:a4:11:cb:ef:90:b4:03:
         e3:b1:f7:b7:ba:71:c0:f4:cb:8e:48:28:ec:b1:1d:f1:3c:d8:
         c3:1d:91:c2:63:8b:04:09:46:e0:df:c5:4f:77:d8:c8:9c:c9:
         72:4f:06:4a:de:e1:45:4f:46:dd:7a:00:d7:cb:dc:3e:6e:a4:
         46:78:b0:f1:17:5f:44:28:36:3d:ee:9c:4c:42:e5:52:31:10:
         25:10:eb:d4:47:fb:75:e6:ed:f8:87:a1:4c:ed:e7:52:79:2b:
         68:50:73:c2:bb:90:ab:b3:01:1d:ec:bc:4a:ac:63:85:59:04:
         9a:c0:f9:3a:e7:e1:a4:fc:07:41:57:8f:65:28:9c:5a:61:f1:
         ad:1b:47:06:9c:08:4a:3c:e2:07:8b:59:fc:60:8b:9e:b0:71:
         7e:ad:19:73:94:f8:78:31:49:1c:1e:e3:55:a2:a0:5c:5b:66:
         fc:26:fa:79:25:0c:77:75:10:55:97:ef:5b:29:c0:bc:ea:58:
         9e:b3:44:5b:a3:9c:fd:94:f8:73:7a:80:56:f8:40:7f:8a:7b:
         9b:41:f8:d2:e1:ec:47:18:1f:2d:07:7b:bd:85:9e:98:27:49:
         b0:a1:71:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----