Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Wo-MhuONQ8OuB7xcWQFO2RR1kVA.roa
File:                     Wo-MhuONQ8OuB7xcWQFO2RR1kVA.roa (raw, json)
Hash identifier:          yHfff2mNU8oJ7nQnBofBG/XLR5rlqnHZa2EGJp1Kxa8=
Subject key identifier:   5A:8F:8C:86:E3:8D:43:C3:AE:07:BC:5C:59:01:4E:D9:14:75:91:50
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0AAF
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Wo-MhuONQ8OuB7xcWQFO2RR1kVA.roa
Signing time:             Tue 29 Sep 2020 10:07:30 +0000
ROA not before:           Tue 29 Sep 2020 10:07:30 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        211.76.77.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2735 (0xaaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:07:30 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=5A8F8C86E38D43C3AE07BC5C59014ED914759150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e8:fb:93:6f:4f:bb:25:e8:c6:9a:6d:4b:75:
                    ba:2c:80:55:aa:0a:91:2b:7d:b8:f8:11:80:2e:63:
                    a7:5f:c7:14:c0:65:27:14:62:47:2d:e6:e2:40:9e:
                    ef:64:13:85:1c:9c:ea:24:59:13:d0:d7:e6:c2:b1:
                    a4:ce:dd:6a:d7:29:2e:95:5b:0e:3e:9e:cb:33:67:
                    ba:4a:d2:48:14:99:dc:a9:38:c7:4f:7c:27:69:40:
                    a1:4a:52:6d:a9:9e:82:50:db:22:1c:33:d0:e2:fa:
                    6c:c2:df:9c:b6:d0:24:6d:c6:c8:d8:da:ff:fd:4c:
                    e8:88:07:15:79:c3:f7:6d:10:71:18:fa:70:4d:e6:
                    86:a2:3f:9e:54:3b:68:23:cb:22:70:d4:ee:c0:49:
                    5b:42:75:ff:70:42:9b:58:bc:49:98:f5:21:fc:d5:
                    8f:73:92:49:64:a6:5a:7d:19:40:ec:9c:3d:95:a9:
                    d7:45:a0:4f:03:72:96:40:12:e7:dc:02:26:21:fa:
                    2c:3d:e1:b5:0b:1e:f6:cd:cf:b4:87:ba:61:20:fe:
                    a6:d4:ce:ab:a2:86:cc:de:43:33:ea:f0:9b:80:8a:
                    ad:05:65:77:f2:3e:ac:e2:13:f2:1c:ad:f0:5e:58:
                    e5:81:0a:b2:ba:e7:82:89:e3:da:b9:fb:da:7c:b4:
                    44:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:8F:8C:86:E3:8D:43:C3:AE:07:BC:5C:59:01:4E:D9:14:75:91:50
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Wo-MhuONQ8OuB7xcWQFO2RR1kVA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:81:e3:81:da:ca:0c:71:8e:58:f5:8d:8a:ac:61:d6:20:22:
         91:45:67:0d:01:f6:85:56:5a:7b:fb:e1:b7:66:4b:7d:c5:c0:
         f4:d0:f4:2b:bf:77:f3:4a:bc:bd:45:d0:2c:b3:7d:c9:ae:2e:
         9d:b1:a3:c5:a9:38:92:01:fa:c8:68:cf:b1:8f:61:0e:5c:8e:
         e4:3d:50:83:fe:d1:ca:9e:79:26:73:03:64:6f:95:7a:0b:ad:
         2e:fe:f8:1b:bf:b6:59:ae:9c:6e:82:79:01:5a:e8:29:4a:b4:
         a4:68:52:e0:e1:ce:cc:fd:81:49:82:61:b4:23:dd:f0:3e:eb:
         80:82:69:97:8d:bf:b2:59:20:9a:05:c4:4c:84:d3:85:77:5e:
         ca:ba:a6:12:97:cd:cb:6d:1d:e0:c2:12:aa:fd:5e:e7:1e:8f:
         8f:01:7a:81:8a:7b:4c:08:c1:6e:4f:36:90:cf:90:a1:1a:17:
         ab:34:2e:85:b3:83:9e:54:01:ab:18:02:9b:5d:fd:98:cf:0c:
         fe:5a:ba:11:27:6a:c9:17:2c:b7:f0:5b:35:6a:54:65:67:ff:
         83:2f:b5:5c:c9:30:4b:16:63:b1:83:f4:76:43:9a:09:12:ee:
         8f:5c:ac:bc:8a:ed:d6:92:3b:de:57:b8:89:09:5d:e5:b7:69:
         76:fd:d7:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----