Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/YlNnY7PyR79iWumFQE1F6k1Mr9A.roa
File:                     YlNnY7PyR79iWumFQE1F6k1Mr9A.roa (raw, json)
Hash identifier:          P/ZUVVKjeOxDhjvB5/EkwJF8k+bTDmLWfzCVUj8nbVQ=
Subject key identifier:   62:53:67:63:B3:F2:47:BF:62:5A:E9:85:40:4D:45:EA:4D:4C:AF:D0
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0ED1
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/YlNnY7PyR79iWumFQE1F6k1Mr9A.roa
Signing time:             Sun 07 Feb 2021 11:56:50 +0000
ROA not before:           Sun 07 Feb 2021 11:56:50 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        119.77.160.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3793 (0xed1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb  7 11:56:50 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=62536763B3F247BF625AE985404D45EA4D4CAFD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:73:f6:c0:40:45:b9:5f:2c:d5:26:04:9c:47:
                    d5:72:fa:f5:23:00:fa:53:eb:25:e8:34:96:5f:99:
                    db:03:92:c2:92:10:3c:a8:12:1c:af:44:a0:e7:8a:
                    8d:7a:0e:0a:e9:34:2c:fd:dd:a3:c4:bf:22:65:b6:
                    74:04:9b:b3:98:d7:b6:79:81:b9:c8:1c:b1:60:1d:
                    17:70:c2:c3:ec:b9:8c:63:a1:b1:98:da:90:4a:a3:
                    86:7e:46:f2:d4:b9:fa:9d:66:2e:ab:5f:af:f3:3a:
                    99:ca:bf:7e:b3:83:c2:9f:4b:ab:00:d3:ce:d1:23:
                    5e:8b:58:41:dd:91:6e:58:9b:2f:f3:cc:74:2a:a9:
                    e4:b3:77:dd:95:fc:35:47:be:54:ec:42:52:cb:4b:
                    5b:17:7a:65:ed:ae:e7:b1:c9:72:14:99:3b:43:fc:
                    55:17:32:95:b6:d7:c5:87:c8:3f:8c:bf:81:3d:33:
                    16:a7:b7:7d:96:f6:c4:e4:5f:70:3e:e4:ed:b2:6c:
                    a8:2b:d3:b1:db:15:fc:08:d1:ce:db:75:51:1c:48:
                    74:23:82:56:b1:07:b4:70:21:b1:53:88:7d:fc:39:
                    e1:fe:3d:18:48:7a:55:6a:fb:1e:00:e2:2e:79:58:
                    3b:a5:eb:9f:8e:3e:48:92:64:55:84:d6:1a:04:c1:
                    a8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:53:67:63:B3:F2:47:BF:62:5A:E9:85:40:4D:45:EA:4D:4C:AF:D0
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/YlNnY7PyR79iWumFQE1F6k1Mr9A.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.77.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5e:ba:1e:16:ed:0e:4a:16:33:57:42:04:67:f8:1a:4c:9b:d8:
         cc:e2:72:b4:cf:be:d9:6a:ed:2e:2a:08:35:19:48:45:28:5c:
         1b:0a:fa:88:bb:5d:9c:71:69:9a:84:e7:84:c5:b9:3d:b8:d7:
         21:6e:80:52:31:d1:1d:bf:bf:67:19:d9:f4:5b:ef:a3:5a:89:
         b4:3e:5e:b7:25:1e:23:40:e5:cd:d8:c6:be:73:24:3e:ca:d7:
         70:64:0b:a7:7e:fa:fd:e9:ca:81:ce:3e:ea:cb:7a:87:d1:19:
         96:40:87:39:3a:21:46:b5:b5:f4:e0:bd:2b:57:51:d8:bf:91:
         df:66:23:d3:2a:a7:7f:88:e0:8f:8e:9b:64:61:fc:27:db:be:
         f7:17:92:c2:b8:f9:e0:22:b1:e8:32:79:62:9a:00:b0:6f:c7:
         0b:cd:e3:a1:01:2c:bc:2f:0b:c6:fd:cd:02:ab:f0:93:94:b2:
         fb:f2:fc:94:d7:6a:1c:47:25:eb:72:51:68:5e:79:5e:5c:75:
         fe:f8:89:19:62:4e:3c:17:26:dc:0a:7c:17:84:9d:d5:3c:28:
         ea:65:79:c7:82:aa:03:04:83:c5:56:65:dc:08:fd:72:5a:e9:
         1f:06:72:6f:e2:04:28:b6:dc:52:b8:f3:0b:ab:51:ec:f1:9f:
         f3:34:65:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----