Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WecCUDfVxP9NwLq_rmYMcFPAeHQ.roa
File:                     WecCUDfVxP9NwLq_rmYMcFPAeHQ.roa (raw, json)
Hash identifier:          N+GuTYj2X/DUjbjSnb55TRaTCXNggFtNX6qv/teMkJA=
Subject key identifier:   59:E7:02:50:37:D5:C4:FF:4D:C0:BA:BF:AE:66:0C:70:53:C0:78:74
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0B5A
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WecCUDfVxP9NwLq_rmYMcFPAeHQ.roa
Signing time:             Tue 29 Sep 2020 10:08:19 +0000
ROA not before:           Tue 29 Sep 2020 10:08:19 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        180.218.64.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2906 (0xb5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:08:19 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=59E7025037D5C4FF4DC0BABFAE660C7053C07874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e4:43:31:59:b8:cd:4b:89:8a:9b:b9:e2:20:
                    8b:db:3f:09:62:82:ea:b5:29:56:1b:e5:3b:30:ff:
                    87:40:86:af:4e:a6:11:41:30:7d:2c:6a:05:a9:58:
                    1f:b7:fa:81:b6:97:e2:f0:6e:e9:a2:69:ae:1a:e3:
                    20:04:17:9a:74:b3:8b:0b:ed:a7:40:7f:c9:33:c5:
                    d2:62:6e:7a:e9:a2:65:af:de:d3:13:51:6c:d0:ad:
                    99:03:f3:24:86:51:e9:28:9b:1f:3a:1d:5a:ac:96:
                    5d:b1:a3:84:95:a0:70:d6:25:a5:ed:08:6d:42:ae:
                    fb:20:2c:af:3e:c8:23:47:d5:d1:19:65:f0:ad:68:
                    8b:46:e3:75:73:ce:74:42:10:80:8a:8d:f1:ec:0f:
                    04:e4:a1:b8:51:be:4d:9d:f7:eb:c5:64:b4:14:d1:
                    84:d6:37:3e:0b:94:30:c2:0d:f3:be:be:74:63:4b:
                    6f:0e:20:ab:73:4a:24:a4:41:c3:40:a3:f4:29:e0:
                    7f:9a:8c:64:76:bd:de:1e:7b:e5:c7:71:0c:fc:f6:
                    65:46:5b:0c:76:23:9f:eb:5f:01:67:f9:e9:8b:6b:
                    b7:85:d6:41:92:3b:58:be:b1:30:d5:5c:c5:09:0c:
                    b3:27:46:e2:15:41:ca:a5:4f:01:9b:f2:35:86:d1:
                    4e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:E7:02:50:37:D5:C4:FF:4D:C0:BA:BF:AE:66:0C:70:53:C0:78:74
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WecCUDfVxP9NwLq_rmYMcFPAeHQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         69:88:ed:15:63:1f:86:56:88:81:96:d4:36:84:03:fd:63:dd:
         f5:d1:e2:14:b9:53:63:98:2e:f8:3d:e9:73:c0:a5:07:c2:7d:
         ea:4a:3f:c8:b6:a4:45:59:0b:4a:12:c6:95:0a:ad:7a:6a:96:
         8e:3b:81:22:56:3d:e1:c5:74:8c:a3:73:09:b1:bb:d4:b7:32:
         3f:48:65:e5:10:2d:1a:e2:38:fa:ac:5a:38:d9:5f:71:95:b1:
         36:43:34:07:1a:17:62:1a:5b:6b:d1:ce:56:59:4f:43:55:3f:
         2f:c9:bc:e1:80:dc:94:03:d4:fc:f4:5e:e5:4d:7a:ed:d8:50:
         59:79:b1:a0:84:e5:44:61:0b:8f:6d:f0:7f:ec:c1:8b:ab:19:
         2f:e1:0b:28:ba:19:31:c8:14:6e:59:ee:1d:9a:71:dd:48:96:
         36:0e:50:ac:5b:7b:78:d6:eb:84:3c:52:ab:65:6f:04:ba:3c:
         cd:0a:46:87:82:79:f2:90:3b:cf:81:3f:6b:e4:df:bb:c2:a9:
         5e:8c:87:48:3d:b8:0d:66:fe:cb:27:90:e1:21:20:72:3a:d3:
         95:36:1e:04:7b:03:a4:17:5b:2c:dc:91:5b:ea:d3:eb:83:27:
         c4:b2:1c:f3:7f:e2:36:37:87:ae:0e:9f:39:90:c8:63:75:58:
         7c:a3:61:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----