Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/W-uKEJi_TgVT1Lq3vE_hqTdW6E0.roa
File:                     W-uKEJi_TgVT1Lq3vE_hqTdW6E0.roa (raw, json)
Hash identifier:          6DE9Bo/CCLYjpvXKH3WZcNKocLmIAu/v32RmqPYHVfU=
Subject key identifier:   5B:EB:8A:10:98:BF:4E:05:53:D4:BA:B7:BC:4F:E1:A9:37:56:E8:4D
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0B21
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/W-uKEJi_TgVT1Lq3vE_hqTdW6E0.roa
Signing time:             Tue 29 Sep 2020 10:08:03 +0000
ROA not before:           Tue 29 Sep 2020 10:08:03 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        114.198.164.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2849 (0xb21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:08:03 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=5BEB8A1098BF4E0553D4BAB7BC4FE1A93756E84D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c8:03:6c:80:9b:07:81:30:1b:ed:5e:ca:7c:
                    2a:3d:b3:77:9a:0c:bc:5e:b0:38:0a:26:47:ca:44:
                    4b:c8:32:aa:60:1a:28:66:eb:14:ca:b6:9e:05:d8:
                    8c:c3:48:f8:1e:a3:48:7f:5f:6a:e6:de:75:f3:c0:
                    16:63:af:86:8b:86:52:38:eb:01:dd:6b:2c:c3:d8:
                    33:99:b8:30:82:15:82:5d:48:01:a7:67:62:6b:83:
                    46:25:3d:a5:49:69:fc:51:64:32:86:9c:82:e5:f2:
                    69:e1:32:ff:92:22:33:5f:e9:1b:70:1c:c6:c0:00:
                    c0:53:39:db:de:5e:fd:28:84:4a:aa:0d:0d:de:3a:
                    fb:57:f3:79:8a:e6:f8:87:a6:e7:83:87:c8:fb:4a:
                    85:d6:13:67:df:c3:00:2b:ef:f1:03:c6:1c:0f:7d:
                    89:80:f0:31:02:7b:e8:82:c7:d6:4d:e5:61:4c:df:
                    54:0f:d8:04:c1:42:1e:87:ea:d1:14:3c:23:c7:0d:
                    0f:34:50:40:51:3b:77:3f:93:10:af:fa:d8:f3:61:
                    33:9a:fd:09:0a:7a:fa:cf:b5:a4:39:93:08:2b:43:
                    e9:45:cf:81:9c:dd:44:83:33:20:28:68:78:72:98:
                    67:27:72:94:57:5c:ee:ca:08:6d:8d:32:c2:5d:9e:
                    e4:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:EB:8A:10:98:BF:4E:05:53:D4:BA:B7:BC:4F:E1:A9:37:56:E8:4D
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/W-uKEJi_TgVT1Lq3vE_hqTdW6E0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.198.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:a5:63:35:1a:ec:28:7d:9e:9f:50:e2:6f:bd:92:fc:c2:92:
         84:7a:a3:fb:a5:14:d0:0a:4c:81:35:94:2d:3c:c5:0b:20:bd:
         e5:88:76:88:f1:69:b0:ff:46:de:d6:8a:1f:0d:e9:b2:48:3a:
         f7:5b:43:89:c6:49:a6:76:d2:57:25:af:ce:3c:73:16:a0:f2:
         79:44:2f:fc:66:08:81:2a:01:5f:42:c8:83:e6:05:39:4e:d0:
         2b:fc:ee:a7:af:01:e7:bf:31:8b:7c:41:51:9a:ed:7b:70:d1:
         38:ca:0c:b0:38:f8:f8:8b:af:13:3e:89:ec:1b:6c:c9:97:68:
         c2:67:a2:46:6e:67:f2:16:1b:48:21:e6:a6:19:2b:87:06:31:
         a1:13:14:45:df:ae:5f:be:fe:89:a1:d1:4b:f3:86:0a:12:8f:
         96:6d:b0:e6:c7:c0:d8:53:10:64:0e:24:de:8a:54:9b:89:e3:
         b4:fa:3c:b7:8b:1c:08:f7:e9:15:92:e2:1d:ec:a5:81:c0:b1:
         f2:a3:fc:a1:28:2e:e6:37:b0:d7:d0:ee:48:fa:a6:fb:1f:df:
         48:6c:1d:f2:bb:3e:52:66:ba:db:04:4e:06:b4:ec:e3:bf:49:
         de:df:17:60:d8:b2:31:65:09:64:ee:e9:3f:be:9f:74:5e:7b:
         dd:4e:54:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----