Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QEdzoujRSD0eklRl8iEiyQBtcKg.roa
File:                     QEdzoujRSD0eklRl8iEiyQBtcKg.roa (raw, json)
Hash identifier:          MDGRsZ7qzpC6zHeUlWLUFL7P7rfKDpQAqWWAcDY2xKE=
Subject key identifier:   40:47:73:A2:E8:D1:48:3D:1E:92:54:65:F2:21:22:C9:00:6D:70:A8
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       10C7
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QEdzoujRSD0eklRl8iEiyQBtcKg.roa
Signing time:             Sun 07 Feb 2021 12:48:49 +0000
ROA not before:           Sun 07 Feb 2021 12:48:49 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        119.77.128.0/17 maxlen: 17

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4295 (0x10c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb  7 12:48:49 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=404773A2E8D1483D1E925465F22122C9006D70A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:d1:e3:dd:dc:b3:19:1f:68:cc:ea:bf:b4:bb:
                    62:54:80:9f:53:bb:6b:d4:b9:3f:75:c7:d1:e9:66:
                    e2:e2:d8:bc:61:fa:eb:e9:85:65:a8:33:60:4e:90:
                    d8:06:de:ce:1c:3f:fb:5c:00:7e:33:c8:2c:2a:78:
                    a1:7f:5e:21:eb:98:5e:0e:d2:6c:18:a3:c4:04:b4:
                    35:d3:34:82:ca:83:5e:49:e0:5b:e4:3e:2a:dc:b2:
                    e5:c9:11:dc:9c:c0:01:6d:f9:af:e5:05:28:50:eb:
                    ba:a1:9d:52:e3:6a:c8:37:af:7d:1f:8a:b0:9f:bc:
                    b4:e2:ae:98:2f:c9:13:b1:ef:ba:ba:1e:99:2e:a4:
                    b9:75:a0:e0:64:f6:86:1a:f3:f7:8c:d0:a0:b2:8c:
                    26:0d:f6:22:a6:9a:05:3d:f5:d6:bc:4e:11:02:f8:
                    2a:88:36:8c:93:ea:5e:20:61:6d:c1:4a:79:89:f8:
                    6f:40:c4:51:24:2a:17:e1:b1:a7:69:64:f2:7c:15:
                    5e:6f:5a:92:6a:69:72:4c:fa:ec:6a:b7:31:e5:7a:
                    4c:4a:4b:36:5a:df:51:d8:b5:a3:26:4e:d4:0d:2f:
                    a6:ab:42:75:a6:a7:64:92:7b:b3:7e:cd:b3:9c:0d:
                    35:42:c8:53:63:fd:11:bc:28:95:6f:b0:2f:f7:f7:
                    3d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:47:73:A2:E8:D1:48:3D:1E:92:54:65:F2:21:22:C9:00:6D:70:A8
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QEdzoujRSD0eklRl8iEiyQBtcKg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.77.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         42:f2:9b:a1:b9:d9:41:87:1e:30:a1:ec:90:3e:95:eb:18:cf:
         ae:64:70:3a:11:93:c2:cc:19:86:22:2b:f2:9c:12:9d:b3:fe:
         df:30:82:0e:8f:c3:1b:15:17:ae:f3:6a:50:57:de:dc:ac:21:
         31:86:c3:e8:07:56:ec:06:ab:0b:ef:d5:4b:d1:1d:9b:95:94:
         6f:86:23:87:d2:ad:e5:d3:7d:d8:50:5e:f6:52:d4:98:71:27:
         0b:41:93:66:4f:c9:1d:67:3b:1e:68:f1:39:6c:05:f2:3c:7d:
         24:68:6c:da:86:9c:96:1e:5e:32:c2:fc:cc:df:29:23:86:4d:
         a1:3e:e9:df:5e:86:20:63:b2:e9:ea:40:ad:7b:5e:ba:ce:6b:
         20:d8:6d:4e:12:65:90:6c:52:65:34:3a:c9:61:3f:db:d2:d9:
         02:47:71:e7:60:75:4e:f8:2e:5b:8d:d5:1f:c5:2c:52:8f:ef:
         67:d9:0e:0f:fa:78:e8:31:4f:ad:88:96:49:4b:d1:d3:2f:d7:
         03:4b:5f:a6:2f:09:9e:99:68:bb:e7:d0:1a:9e:b2:bb:a4:2c:
         7b:b5:67:7c:95:97:89:51:b3:41:ce:83:39:81:ec:91:c2:8c:
         52:c5:05:11:20:54:92:1f:01:55:4a:a9:5e:f3:54:14:c9:ea:
         b1:49:be:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----