Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ZUM9mu0UY812kwTeDUYP-7-VaZA.roa
File:                     ZUM9mu0UY812kwTeDUYP-7-VaZA.roa (raw, json)
Hash identifier:          +Dt9cHURV/xYTRgraD7L/moaxGTlJV1Hu45u6n4Dl5k=
Subject key identifier:   65:43:3D:9A:ED:14:63:CD:76:93:04:DE:0D:46:0F:FB:BF:95:69:90
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0F8B
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ZUM9mu0UY812kwTeDUYP-7-VaZA.roa
Signing time:             Sun 07 Feb 2021 12:34:37 +0000
ROA not before:           Sun 07 Feb 2021 12:34:37 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        211.76.62.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3979 (0xf8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb  7 12:34:37 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=65433D9AED1463CD769304DE0D460FFBBF956990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d7:85:75:49:c3:28:7f:42:b5:a8:aa:4d:3c:
                    53:85:7f:a2:eb:73:0a:a6:fb:3f:63:4f:c5:56:78:
                    d8:36:ae:9e:0e:0e:d6:f5:7d:f9:12:64:3f:8e:db:
                    2e:4f:af:88:8a:1a:b9:4f:5d:bf:dd:a6:14:40:24:
                    b2:47:72:70:5a:e3:9a:4b:15:4b:78:ed:6f:5b:32:
                    ea:78:93:51:5b:99:28:d5:71:6f:04:9a:38:63:80:
                    a0:4c:2a:f4:f9:d8:4e:73:52:57:57:11:6a:f9:e5:
                    e0:c5:6f:2b:d7:86:21:7a:fa:49:8b:8e:94:9d:ea:
                    ee:26:fc:b3:46:60:9c:13:b1:59:f0:42:dd:f1:4d:
                    ad:87:42:ae:fe:b4:9e:7c:fc:35:0b:fe:70:42:b8:
                    68:59:17:a7:6c:11:57:86:fe:6d:9e:46:e0:40:7d:
                    4f:d3:b4:eb:e0:24:5f:56:fd:98:76:5a:81:c5:06:
                    58:49:97:ad:00:2d:07:11:4c:7c:41:9f:dd:4e:18:
                    1b:98:44:ff:c0:c9:2c:01:7c:60:14:e2:42:64:14:
                    58:82:b5:eb:8f:44:a2:ed:cf:a7:37:2f:d7:67:1a:
                    c8:0e:52:b1:0f:35:68:96:29:ff:16:8a:9c:a2:3d:
                    b9:e5:d5:f1:b0:f9:6a:80:32:0c:92:8e:bc:0c:e9:
                    5c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:43:3D:9A:ED:14:63:CD:76:93:04:DE:0D:46:0F:FB:BF:95:69:90
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ZUM9mu0UY812kwTeDUYP-7-VaZA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:a3:ad:cb:4d:6c:93:fb:a1:4a:14:74:09:06:76:e2:16:f9:
         68:81:b5:ac:53:0e:8e:89:ca:b4:21:f9:40:ef:0a:d3:1e:73:
         da:61:39:58:62:58:59:fe:de:90:f7:f7:02:55:a0:76:9c:5a:
         c6:d6:b7:54:75:01:ac:82:e1:97:8b:6d:9d:22:91:ca:d2:33:
         3f:c4:38:14:71:c3:3c:1a:2b:92:d6:26:a4:59:c1:b8:f9:96:
         e5:a8:fd:e3:ad:7a:f0:76:aa:71:86:44:15:9f:65:28:de:23:
         a0:5f:0e:16:7a:13:0f:fb:71:ce:f5:02:0c:2a:9a:a4:ce:85:
         55:46:ff:d1:c6:9e:6c:32:6d:cb:d7:b5:f2:e3:48:d0:cb:63:
         e9:6d:06:cd:c5:61:a4:ed:a7:39:81:4a:04:64:ec:47:5d:29:
         50:ff:cb:d1:fd:a7:8a:9b:57:88:ab:14:02:9e:d2:cb:a3:45:
         69:c2:c3:e8:a6:1a:d9:9d:12:7e:15:bf:77:2b:47:60:a8:bf:
         55:b3:e7:56:8e:6a:17:5c:d5:44:41:5b:53:87:28:84:c3:42:
         ef:aa:e2:4f:c8:89:9b:59:94:23:31:01:f9:e8:c9:10:33:32:
         a9:65:60:45:d0:5c:1f:5b:17:3a:08:1b:45:95:d4:3f:36:f5:
         bb:8f:2b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----