Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Y8xyqd_J_gW-FUmMQDXl262iWAo.roa
File:                     Y8xyqd_J_gW-FUmMQDXl262iWAo.roa (raw, json)
Hash identifier:          1RBiMat/8TTLv2mihKXZYADmWq/Wqo5F3HR9nHVeLh4=
Subject key identifier:   63:CC:72:A9:DF:C9:FE:05:BE:15:49:8C:40:35:E5:DB:AD:A2:58:0A
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0BB3
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Y8xyqd_J_gW-FUmMQDXl262iWAo.roa
Signing time:             Tue 29 Sep 2020 10:08:44 +0000
ROA not before:           Tue 29 Sep 2020 10:08:43 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        119.77.128.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2995 (0xbb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:08:43 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=63CC72A9DFC9FE05BE15498C4035E5DBADA2580A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a6:c5:57:4a:8c:4b:b4:c6:8c:be:5a:8a:68:
                    7a:82:db:75:1c:87:10:4c:ef:74:ac:03:31:31:8c:
                    14:1c:23:80:d5:77:ee:31:05:50:7a:11:2d:d1:67:
                    8c:e4:34:1b:9b:56:e9:db:9f:2c:be:4c:ab:61:ad:
                    ba:d7:ea:59:a9:12:b7:f8:dd:62:29:c0:96:1b:73:
                    63:8e:50:03:f5:aa:ae:fa:ec:ce:54:9b:b2:df:49:
                    70:fb:30:86:b3:72:04:df:71:8f:75:18:3d:67:de:
                    d2:88:41:cf:6a:58:7b:bb:0d:bc:05:f2:e8:1c:fc:
                    9b:17:da:77:44:07:e3:9f:9d:25:1b:46:42:86:7f:
                    1e:77:7d:09:0f:db:c8:df:14:ce:0e:4d:68:99:e2:
                    fd:b2:f9:f3:8d:8a:84:dd:3c:d3:78:ca:2a:53:72:
                    c3:1d:f0:4b:08:4a:f5:b5:4b:8d:50:fb:9d:51:bd:
                    4a:9e:7f:fb:37:45:5f:3f:d8:f3:f8:68:1a:e5:60:
                    48:e0:b5:3b:c4:43:42:95:a3:8d:74:e7:41:e6:60:
                    35:11:4b:10:72:08:9e:66:ce:96:13:78:1f:50:2d:
                    71:9f:16:96:d2:b7:c2:bc:81:5f:3a:7d:29:f4:8a:
                    7f:39:de:7d:21:16:78:b7:d5:9a:d4:0e:0d:e1:c7:
                    c7:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:CC:72:A9:DF:C9:FE:05:BE:15:49:8C:40:35:E5:DB:AD:A2:58:0A
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Y8xyqd_J_gW-FUmMQDXl262iWAo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.77.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:a2:86:cf:60:9f:b9:44:42:0e:ba:df:cc:af:d6:26:0f:1a:
         88:5f:48:ab:fc:aa:c7:ea:21:38:6b:fd:81:93:70:e6:78:7a:
         31:fb:d2:33:b0:07:6a:b5:b8:53:d2:f2:88:35:35:0d:71:8d:
         bf:ef:e9:bf:79:60:09:98:1f:54:c5:13:43:32:98:33:43:ac:
         e0:6c:36:3e:83:db:dd:c0:a5:4b:dd:03:a8:5d:9b:c9:d1:9c:
         54:f8:77:49:b2:7f:4b:be:6a:9a:b4:92:90:fb:b2:13:21:a8:
         95:f2:84:ba:76:38:7b:47:6e:cd:19:49:95:36:0b:6e:f8:ed:
         d3:96:a8:68:e2:8d:d2:84:d3:ef:b8:e0:4a:da:a7:69:f8:54:
         5d:a6:f5:83:a6:07:f7:1a:8e:97:db:38:34:6a:b5:7a:07:57:
         fa:fe:12:2c:f4:c8:68:fe:45:5e:37:e7:7b:1b:bc:7f:39:36:
         ae:f2:0a:e2:48:b6:f9:c2:9f:13:3b:8f:60:ba:e2:1e:c1:c6:
         62:14:97:22:eb:39:dd:cd:e3:8d:5a:79:8a:b2:80:e1:f5:6a:
         09:31:83:e6:83:20:a5:5b:1d:2b:03:ef:c5:51:14:12:36:d2:
         c3:d7:6c:ca:72:2d:69:37:94:0b:cb:91:e5:b5:95:94:0b:5d:
         e8:df:1d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----