Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PrQf_C04UwDNDzn_aRnIkT-aQ-k.roa
File:                     PrQf_C04UwDNDzn_aRnIkT-aQ-k.roa (raw, json)
Hash identifier:          nfxUGfdx4knHcRaQeCqp5JuHF2HGeM4Uc61cfMvQRVA=
Subject key identifier:   3E:B4:1F:FC:2D:38:53:00:CD:0F:39:FF:69:19:C8:91:3F:9A:43:E9
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0BD2
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PrQf_C04UwDNDzn_aRnIkT-aQ-k.roa
Signing time:             Tue 29 Sep 2020 10:08:52 +0000
ROA not before:           Tue 29 Sep 2020 10:08:52 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     4662
IP address blocks:        211.76.64.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3026 (0xbd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:08:52 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=3EB41FFC2D385300CD0F39FF6919C8913F9A43E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:60:41:b9:2c:6d:07:a2:7c:ed:60:67:18:c7:
                    f8:7e:28:bf:25:9c:ef:ca:5d:28:07:8a:2e:a9:84:
                    16:8a:e4:c0:54:8b:d4:77:e5:0f:84:ce:ac:da:2f:
                    7c:76:72:34:b3:09:ce:54:20:b9:39:54:60:0e:e3:
                    6a:4b:d9:b4:3f:da:8d:97:74:f4:96:eb:65:70:69:
                    00:1f:df:da:d8:d3:48:75:c5:bf:09:03:ff:9e:17:
                    ae:59:9b:9b:2a:a9:3d:86:bc:2c:08:24:f0:4c:06:
                    0d:b0:8f:c3:2d:c3:40:2d:cf:f5:eb:0e:5f:62:ad:
                    d3:e5:d1:ba:15:8b:7d:f7:60:b1:cb:14:1c:18:cc:
                    fd:52:dc:89:52:f8:c5:6b:3d:61:98:7d:91:13:bf:
                    6d:33:74:4e:07:7c:7b:ca:fd:db:2a:17:63:6f:0e:
                    22:64:95:cb:db:c0:69:15:d0:7a:3e:77:cb:32:42:
                    de:3c:3b:cc:43:65:e5:6d:34:f7:40:69:ca:ad:30:
                    ed:3e:7c:29:a7:de:31:31:3d:8f:35:c6:e2:d2:84:
                    00:df:b1:e8:56:b7:09:0e:97:58:be:fb:ce:98:da:
                    80:f6:33:12:e3:94:44:d8:6b:c4:af:9e:87:e7:64:
                    9e:69:81:69:1d:95:e7:c2:6d:ab:2f:f2:89:9a:0c:
                    7e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:B4:1F:FC:2D:38:53:00:CD:0F:39:FF:69:19:C8:91:3F:9A:43:E9
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PrQf_C04UwDNDzn_aRnIkT-aQ-k.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         55:6c:b3:e7:ce:c2:3d:23:ee:55:ff:1a:ee:dd:e2:84:e7:a0:
         f8:6e:eb:1b:3f:a9:96:55:64:54:5a:95:e6:8c:4f:d8:ce:8d:
         d2:9d:f6:bb:d1:5d:72:3a:13:39:a1:de:97:cf:02:c4:c0:98:
         eb:6d:3c:bb:02:47:ff:9c:d7:6b:f2:5f:cf:d0:4b:65:0b:82:
         ba:d8:5f:e7:b6:73:38:36:10:e4:ee:3a:0b:dd:de:e9:4b:1a:
         ae:22:a8:1b:14:30:5f:b7:a0:a4:db:65:d5:93:e2:86:56:9c:
         ef:9c:f4:13:f1:35:1f:3b:90:c2:08:a2:6e:48:67:34:42:e0:
         09:7a:1a:f2:f4:cf:07:56:a8:1e:f3:e7:d0:93:f0:f1:6c:62:
         af:91:7c:87:3f:c1:97:59:0c:d0:8b:e6:70:d7:a4:d2:ee:16:
         48:b2:e3:86:b7:d9:76:d0:3f:a0:5a:51:9f:a0:e4:40:41:84:
         9a:36:32:e0:40:ab:6f:5b:58:d2:8d:17:f0:eb:72:7e:82:3d:
         c0:e9:ad:c7:dc:c9:25:e8:21:89:55:df:63:d6:ac:dd:0e:e9:
         8d:99:54:bc:21:7a:65:19:e5:f7:24:e8:f7:9c:39:95:4f:c6:
         d8:ce:3f:24:3c:7e:6d:58:9c:e6:1f:75:62:a1:29:ba:ef:d2:
         7a:0d:28:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----