Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/REWfgpBP08fTcNCkyIcfdv2KK8k.roa
File:                     REWfgpBP08fTcNCkyIcfdv2KK8k.roa (raw, json)
Hash identifier:          8u/CCQOGJw/grAH9GcDCWUyVW8OBhz4o18TGJGBadsw=
Subject key identifier:   44:45:9F:82:90:4F:D3:C7:D3:70:D0:A4:C8:87:1F:76:FD:8A:2B:C9
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0AAE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/REWfgpBP08fTcNCkyIcfdv2KK8k.roa
Signing time:             Tue 29 Sep 2020 10:07:29 +0000
ROA not before:           Tue 29 Sep 2020 10:07:29 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        211.76.63.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2734 (0xaae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:07:29 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=44459F82904FD3C7D370D0A4C8871F76FD8A2BC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f3:2b:99:73:52:ae:39:e1:3f:59:25:4c:60:
                    7f:8b:0b:51:f6:c8:a6:a7:ee:09:7f:d9:08:3c:a3:
                    2a:81:5c:cb:e7:2f:cf:c6:04:ce:8a:8c:38:eb:f8:
                    bf:22:5b:cf:7f:e1:3b:2e:82:8a:a9:1f:44:46:f7:
                    b6:49:ef:27:55:0e:6c:cf:a6:62:ef:1d:a1:22:66:
                    71:18:34:c1:72:81:98:4e:2b:f7:e9:de:c4:ae:b1:
                    09:97:97:3e:ee:d0:7a:9d:90:70:f8:8a:92:6b:68:
                    25:52:39:e5:e2:7f:91:5c:6a:98:7d:bf:f6:f5:98:
                    b4:37:bb:ad:65:85:fc:c6:ae:d3:28:db:99:9a:6c:
                    44:61:6e:86:f1:7b:97:af:35:c2:be:9c:dc:99:02:
                    cc:79:25:49:ab:78:e2:3c:95:98:2b:40:0e:9e:ee:
                    77:5c:7e:d4:f2:d6:3d:45:fa:c8:cf:ad:1f:4b:e1:
                    c9:fe:40:e5:0e:0a:18:ef:5e:7d:d0:f3:e6:26:2a:
                    28:b4:80:a1:95:ce:39:a1:5e:08:9d:72:0c:d9:4a:
                    a2:1d:7d:e7:ff:df:39:9e:15:90:ca:9a:9c:85:a6:
                    0f:90:f2:c5:7a:4f:69:50:57:98:22:5f:aa:c0:d5:
                    5a:ea:3f:30:69:83:a8:27:35:e0:5d:a0:cc:c3:a7:
                    26:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:45:9F:82:90:4F:D3:C7:D3:70:D0:A4:C8:87:1F:76:FD:8A:2B:C9
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/REWfgpBP08fTcNCkyIcfdv2KK8k.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:8c:98:35:d6:26:9c:6e:fe:b9:3f:73:61:04:70:9a:9e:51:
         65:0d:bb:c0:de:28:cc:66:38:e4:d7:a0:e7:07:06:83:96:b5:
         30:5a:57:6b:0b:8d:fd:fa:c7:de:b6:69:b0:47:72:3b:f1:ba:
         38:d4:94:d8:4b:6d:a2:83:bd:b3:0d:be:e2:77:4d:1e:c6:0a:
         99:b6:44:ab:00:17:de:48:0b:63:69:ae:c0:38:54:66:56:8e:
         a3:0e:f6:df:ab:a7:f1:54:61:1c:19:ab:5a:cb:0c:36:8d:cd:
         dd:25:3a:e5:35:46:f9:1d:72:12:8f:9d:8f:9a:9b:d5:1a:49:
         63:50:78:e2:99:7f:32:ca:a0:dc:75:59:21:c2:f9:90:89:4f:
         ac:6b:7e:e3:af:41:34:6f:85:a1:a4:6a:63:a5:8f:13:2b:e8:
         49:3e:c5:0b:ff:d6:f5:24:ad:75:a3:88:fe:5a:f6:2e:a3:7d:
         fe:10:eb:4b:95:c2:81:33:4f:f4:95:b0:e2:13:a7:0d:fd:c5:
         b8:db:de:2c:3c:42:24:ca:7a:e1:13:89:73:d0:b5:f9:78:0f:
         4d:3e:ff:66:c0:27:f8:d5:ee:9b:62:05:80:aa:c1:18:10:06:
         9a:fc:d7:6f:06:1b:5b:01:28:54:c4:d5:6a:01:28:13:01:b6:
         97:92:42:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----