Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ULLKCWsopAoJ5uW7B4Gb7kGt4JI.roa
File:                     ULLKCWsopAoJ5uW7B4Gb7kGt4JI.roa (raw, json)
Hash identifier:          SmHx4A0BtZ8wfFrdc0Rmy3NMleK8bVFECFlNi+rxSbk=
Subject key identifier:   50:B2:CA:09:6B:28:A4:0A:09:E6:E5:BB:07:81:9B:EE:41:AD:E0:92
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0D1F
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ULLKCWsopAoJ5uW7B4Gb7kGt4JI.roa
Signing time:             Thu 14 Jan 2021 07:12:13 +0000
ROA not before:           Thu 14 Jan 2021 07:12:13 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        115.165.248.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3359 (0xd1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Jan 14 07:12:13 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=50B2CA096B28A40A09E6E5BB07819BEE41ADE092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:04:94:8a:51:41:80:20:0e:51:95:11:47:33:
                    1a:d9:d8:ce:b1:42:5f:8a:df:54:10:dc:a6:07:bb:
                    ac:38:ed:04:5c:46:78:5a:b1:45:c3:9e:39:d6:ce:
                    00:70:91:87:d7:07:ec:36:76:c1:f3:84:00:d0:0d:
                    d1:21:3c:15:57:a7:1f:7b:b6:87:60:e7:df:33:00:
                    80:c8:e8:22:09:be:2f:da:32:9e:37:eb:9c:11:14:
                    10:f7:28:30:03:47:9f:0d:4d:f3:cc:61:85:3e:48:
                    1d:dd:c5:f5:50:d7:7d:de:56:9e:5c:aa:cf:87:c2:
                    7a:e7:2d:2c:e3:fd:dd:32:b1:af:fb:a2:95:d5:ea:
                    0e:cb:04:e5:93:42:7b:f4:1d:86:da:be:65:8f:22:
                    c4:9a:f8:c4:09:28:da:9e:08:e0:b0:54:cd:f0:9b:
                    9b:a7:3b:b3:b2:2e:b4:6b:36:07:6a:80:d5:65:8a:
                    d1:7c:77:a0:3d:e7:fc:fd:17:f2:14:bb:ad:3f:36:
                    22:98:f9:d6:84:dc:4b:37:dd:c1:23:b8:a2:d6:d4:
                    9a:e5:a4:7b:b5:ba:76:40:ff:39:59:1c:7b:c3:8e:
                    34:4e:37:8f:32:0e:a5:98:a5:13:70:f6:9c:45:db:
                    d9:9d:5e:af:e8:6c:12:0b:3f:72:41:8a:4e:1f:ad:
                    97:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:B2:CA:09:6B:28:A4:0A:09:E6:E5:BB:07:81:9B:EE:41:AD:E0:92
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ULLKCWsopAoJ5uW7B4Gb7kGt4JI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.165.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5e:d5:57:04:54:ee:89:05:a3:9c:c5:99:94:46:05:19:45:29:
         ae:61:20:8e:27:c2:11:1e:68:66:29:a4:e4:90:23:fb:62:6b:
         4d:e3:11:50:df:29:2c:ba:eb:dc:80:b0:f8:66:dd:1d:01:fe:
         a3:ee:26:e6:1f:39:f1:a8:6a:ed:7d:cc:ab:81:5d:fb:dc:f6:
         d5:0f:b6:20:8d:b6:13:5e:07:9a:54:79:4a:95:ca:b1:5b:be:
         30:97:e8:fa:90:29:5b:b4:40:b4:e2:a5:7d:98:fa:9e:10:1e:
         5f:1b:a0:ba:69:b3:5f:4e:34:21:fe:70:63:15:a5:8e:aa:50:
         fe:4e:e9:f1:1a:9c:b0:01:cf:f6:c5:f9:1a:6a:7e:cb:26:a6:
         6c:bd:32:6d:6e:de:fc:c7:5d:e9:b8:4f:d4:ec:e8:7d:10:3f:
         41:d0:cf:5e:20:04:c0:8c:a4:48:a5:d4:06:d2:dc:79:72:37:
         dc:b6:b7:59:9e:91:43:5b:23:ac:9e:48:d0:e9:e7:9b:72:aa:
         f4:89:99:7d:d4:52:d5:7b:68:bc:e5:fc:3b:ac:fc:ff:82:3f:
         be:a2:71:05:58:7e:3b:b4:28:ce:53:63:52:cb:99:d1:7b:47:
         7f:e6:25:91:90:90:5b:5c:73:8a:cd:e7:9d:42:05:6d:88:fc:
         9c:f4:f3:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----