Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PggG0gDlMIzPpkUr3utu0059IiQ.roa
File:                     PggG0gDlMIzPpkUr3utu0059IiQ.roa (raw, json)
Hash identifier:          16kvF9XSCxTn+rZ8OYwEPB7kkMtLtqWUaKgid7gwH/E=
Subject key identifier:   3E:08:06:D2:00:E5:30:8C:CF:A6:45:2B:DE:EB:6E:D3:4E:7D:22:24
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0B24
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PggG0gDlMIzPpkUr3utu0059IiQ.roa
Signing time:             Tue 29 Sep 2020 10:08:04 +0000
ROA not before:           Tue 29 Sep 2020 10:08:04 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        114.198.168.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2852 (0xb24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:08:04 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=3E0806D200E5308CCFA6452BDEEB6ED34E7D2224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:21:bf:7e:49:d1:38:7c:40:e7:5b:56:c7:67:
                    51:b9:6a:21:76:0f:99:d8:bd:ec:dd:97:5a:e3:d9:
                    20:d4:d2:06:c8:42:10:00:7b:e9:03:70:2c:41:fe:
                    85:62:77:80:47:40:04:7f:6d:c2:7b:61:e3:ed:0b:
                    d1:b3:3a:b2:dc:63:23:58:08:f0:c9:21:b7:cb:6d:
                    c0:7f:86:9e:38:1c:43:6a:3c:91:39:f8:cf:9b:17:
                    e4:b6:cf:25:dc:48:94:ac:54:19:8c:fa:5a:68:f7:
                    06:f6:57:45:d3:69:c9:0e:49:ef:f1:93:cb:96:63:
                    1f:1f:84:de:0a:00:bd:83:4e:e2:b4:b0:35:41:5b:
                    b3:3c:25:59:dd:30:ce:a2:b9:05:79:f2:b8:fb:41:
                    d0:b7:6f:79:a3:29:cc:3c:f2:35:9e:a3:cf:c2:19:
                    b0:21:14:9d:a5:c8:f2:6b:ab:c8:7a:a7:19:0a:98:
                    98:76:18:b8:b2:e4:2e:e9:f5:7b:70:a9:89:e5:79:
                    5b:3e:55:47:78:6b:67:75:5d:c3:e3:0b:f4:67:9a:
                    bc:28:8a:05:e0:2a:4d:d4:c7:08:f2:d7:d1:2f:6e:
                    08:35:cd:5d:06:1d:fe:8c:53:06:5f:0e:d6:5e:9e:
                    e6:1c:1f:8c:cb:6f:de:03:46:aa:f4:5b:f8:9e:82:
                    09:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:08:06:D2:00:E5:30:8C:CF:A6:45:2B:DE:EB:6E:D3:4E:7D:22:24
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PggG0gDlMIzPpkUr3utu0059IiQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.198.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:55:e8:47:38:79:82:95:1a:64:c4:37:99:06:48:72:b5:09:
         b1:59:ea:c9:97:ee:f8:f5:3a:45:bf:2c:e0:83:a4:b1:42:3e:
         8c:ac:5c:4b:eb:f8:80:90:85:b7:8d:2a:14:eb:d0:c4:e8:67:
         ee:17:ee:05:fc:b6:77:ca:23:bc:6d:52:d4:79:7a:7c:8f:c6:
         61:ea:29:73:20:51:2e:20:86:12:10:cf:a8:ab:d4:53:fb:5c:
         1e:20:40:48:83:69:98:65:8c:96:3d:ad:0d:e3:a8:b2:7f:79:
         43:40:96:00:38:80:b0:94:0c:98:e8:c0:ba:ee:38:7a:4b:6b:
         fd:f5:2f:ea:89:5b:c7:5a:37:c8:9a:f7:8b:f0:b1:1b:7b:ec:
         25:e1:2b:ff:51:f2:98:da:89:5d:19:d5:78:cc:41:57:25:88:
         97:61:38:b5:61:75:bd:7d:a1:90:88:26:61:ea:f9:e7:f2:a0:
         3e:d0:26:97:a0:66:18:62:68:56:87:19:58:58:c4:4c:35:57:
         ee:2d:e6:6f:cf:35:5e:87:b0:1a:2a:b1:c1:9a:64:f0:53:e7:
         45:c6:9a:23:ef:5c:82:4b:6f:eb:0a:54:ae:f1:70:f9:41:a2:
         a5:4c:d8:8e:8d:47:fa:64:0d:1f:7e:b0:ca:70:b6:1e:8b:45:
         18:a2:77:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----