Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/UttzrEDJppk5tU0Bb1AXc7pTSo8.roa
File:                     UttzrEDJppk5tU0Bb1AXc7pTSo8.roa (raw, json)
Hash identifier:          0zjliGjEyq2LZayvBRqpRjXx0w4aPWQ7Iqh4iiu2iMI=
Subject key identifier:   52:DB:73:AC:40:C9:A6:99:39:B5:4D:01:6F:50:17:73:BA:53:4A:8F
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0AAA
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/UttzrEDJppk5tU0Bb1AXc7pTSo8.roa
Signing time:             Tue 29 Sep 2020 10:07:28 +0000
ROA not before:           Tue 29 Sep 2020 10:07:28 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24165
IP address blocks:        124.6.8.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2730 (0xaaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:07:28 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=52DB73AC40C9A69939B54D016F501773BA534A8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c1:86:f4:0b:63:a2:9b:7a:14:99:f5:e5:4b:
                    ef:ce:ca:1b:6f:63:90:2f:dd:7d:c9:44:00:23:20:
                    f5:71:de:40:f4:c0:f5:56:18:13:86:b3:54:23:80:
                    9e:7a:a3:6e:7e:0f:72:cd:8b:4f:e1:57:35:65:37:
                    c3:df:7a:46:4a:11:8a:a3:59:dc:cd:ff:1b:71:62:
                    b1:e3:93:b9:42:c4:83:85:68:a3:73:0f:51:89:ae:
                    99:7d:ae:df:d9:56:0d:7e:16:a9:4f:6a:72:73:67:
                    f7:30:ca:8c:ca:9a:21:af:de:3b:f5:e9:d3:c1:5a:
                    15:54:fd:d0:9d:8e:f4:8b:52:81:ff:9a:99:52:bb:
                    40:8f:a0:ac:25:5c:ab:40:10:9d:1c:0a:9d:e3:86:
                    70:a8:ea:b2:78:85:06:e6:c8:25:10:0f:70:b3:eb:
                    4c:7c:f0:26:df:7d:06:53:62:a7:63:7a:4f:c1:30:
                    dd:87:2a:a5:56:8a:5d:71:86:ed:f7:77:1a:35:dd:
                    93:a1:91:cd:3a:4b:43:64:2e:d6:16:55:59:a9:fb:
                    40:1e:5d:c2:24:df:e4:d1:96:ba:e2:db:e0:81:62:
                    c6:4a:24:5a:04:02:79:81:8a:d0:01:18:c9:e0:5d:
                    ee:75:c6:f4:96:6b:1d:73:c6:d2:71:e9:6d:95:ae:
                    78:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:DB:73:AC:40:C9:A6:99:39:B5:4D:01:6F:50:17:73:BA:53:4A:8F
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/UttzrEDJppk5tU0Bb1AXc7pTSo8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.6.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3b:63:74:b2:f3:0d:2c:4b:bd:c0:6c:83:07:cd:99:98:c3:e3:
         6d:dc:87:76:d0:2a:a6:d9:cf:0e:62:71:7e:b7:86:dd:24:09:
         5c:7c:33:95:8f:c0:14:6f:be:1c:eb:aa:67:b4:5e:be:52:cc:
         c6:5d:ab:75:93:49:29:d4:8c:7a:77:5f:44:05:02:cd:60:e0:
         2a:97:56:23:a1:2d:29:9d:4c:23:b3:d4:7c:60:97:b8:87:5b:
         dd:42:bb:b3:ad:a7:95:85:45:94:70:30:b2:2b:98:27:dc:a8:
         f9:33:ac:45:bf:8c:84:11:9a:9f:b7:a9:07:c5:3b:fc:b9:76:
         6c:f2:85:42:ce:cf:0a:84:60:26:61:d3:84:fb:dd:2c:22:f2:
         35:8a:b0:84:bb:11:b0:d8:5e:b1:bb:a7:72:cb:12:db:05:ea:
         33:e1:ce:56:b2:dc:f3:2e:be:fa:c5:e5:f5:19:38:3a:91:8a:
         e5:24:88:bc:c9:4a:e2:e1:e2:9a:99:b1:d4:6e:de:c6:97:7b:
         62:de:da:37:3c:ba:69:de:5a:91:47:57:c2:a3:f4:3e:65:e6:
         37:97:5a:b8:05:77:9e:a4:f3:c2:1d:2c:5e:a4:32:11:d5:25:
         81:86:fa:77:5f:6e:8e:fa:97:83:9c:90:ac:a8:f3:3a:38:f1:
         1f:c1:c5:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----