Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/S6WRR7dKPjoynVcLBs2bi-dEWqU.roa
File:                     S6WRR7dKPjoynVcLBs2bi-dEWqU.roa (raw, json)
Hash identifier:          s8cutEzZy9TPhIH6jA9mBTaAKEQXDWmUGFnysylYMUY=
Subject key identifier:   4B:A5:91:47:B7:4A:3E:3A:32:9D:57:0B:06:CD:9B:8B:E7:44:5A:A5
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0F15
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/S6WRR7dKPjoynVcLBs2bi-dEWqU.roa
Signing time:             Sun 07 Feb 2021 12:32:48 +0000
ROA not before:           Sun 07 Feb 2021 12:32:48 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        114.198.160.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3861 (0xf15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb  7 12:32:48 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=4BA59147B74A3E3A329D570B06CD9B8BE7445AA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e4:56:34:90:5b:90:e6:c4:77:e8:96:b1:69:
                    aa:cf:5a:5f:4a:cc:cd:79:0b:d0:08:a7:e6:b5:b3:
                    d7:e3:b8:94:d5:3d:8c:a7:0f:d2:2c:98:31:98:57:
                    83:60:31:08:a4:19:6c:f1:4f:28:97:e9:75:35:d7:
                    5a:c1:bf:9a:df:ba:f0:de:37:14:80:3f:8d:75:02:
                    11:15:39:a5:70:11:d9:35:86:ac:6f:bb:28:40:36:
                    0d:91:67:57:a3:c1:c2:51:eb:ba:87:3a:01:c7:14:
                    35:b2:39:8b:30:04:d0:cb:5c:f9:d4:ed:89:df:0c:
                    89:88:a2:30:cc:32:44:c2:ed:f9:19:21:e9:f3:d8:
                    71:a9:93:42:a6:76:30:e1:ca:f6:79:2e:2a:1e:85:
                    36:d2:60:a2:b5:97:d7:d8:16:9b:08:b8:0d:17:9e:
                    32:a5:26:33:79:5c:d9:41:d1:dc:31:14:17:8e:e8:
                    6c:52:d8:4e:22:f7:90:6d:32:c7:ac:92:73:e9:bb:
                    06:d5:22:38:27:88:a3:36:fc:40:d2:a1:1b:6a:5e:
                    ab:bb:ff:53:16:d9:49:cd:3d:90:d1:46:ba:ee:11:
                    fe:ea:dd:01:74:95:99:f7:6e:11:1a:4c:bb:f9:ff:
                    3f:e4:1c:6e:c9:a2:16:cf:d0:0c:ce:b7:ac:73:e7:
                    f7:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:A5:91:47:B7:4A:3E:3A:32:9D:57:0B:06:CD:9B:8B:E7:44:5A:A5
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/S6WRR7dKPjoynVcLBs2bi-dEWqU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.198.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         55:bc:7d:17:7a:5e:a0:d6:d8:05:53:67:b3:e1:78:a2:0e:3b:
         ba:fe:72:bd:5a:84:c5:3b:bd:52:be:c8:41:79:09:32:34:1c:
         1d:2f:06:a2:8e:7f:4d:21:32:4d:80:fd:7a:b2:d5:92:9e:b7:
         34:8c:19:cb:17:3a:3c:91:79:ed:06:36:44:72:45:ec:cf:77:
         88:83:56:95:26:fb:d4:22:43:20:af:4b:96:64:8f:3b:77:4c:
         50:70:50:23:c1:64:e9:a4:15:66:dd:a6:ba:9c:19:e3:3c:e8:
         51:58:96:6a:57:cd:3c:f6:3f:40:9f:19:d0:c7:29:78:ea:20:
         03:b0:16:18:a1:6b:13:72:7c:60:86:4c:96:23:1e:e7:19:c4:
         34:a5:7c:17:4d:17:ff:68:96:89:fb:4a:23:62:44:7d:84:0a:
         1d:2a:87:c8:00:2f:39:fb:43:d4:32:d1:8f:43:15:63:6b:98:
         c1:da:55:ab:59:d2:b6:84:85:c6:c2:28:51:09:cb:32:40:6f:
         69:ce:29:b5:0d:84:88:c1:cd:bf:f6:68:af:b0:cf:36:ec:7d:
         d8:eb:fe:69:90:10:0d:a6:36:88:ac:8e:1f:9f:86:f7:66:6a:
         d1:01:2f:25:20:98:82:c1:d6:a4:52:e8:27:f8:e3:a3:6b:a7:
         84:b4:28:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----