Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_I_GuHT4u6eNhzPfdUtoerL_wzI.roa
File:                     _I_GuHT4u6eNhzPfdUtoerL_wzI.roa (raw, json)
Hash identifier:          +m+FOI2pAVbAPeRhbjT1r9bXgTqwMiu9NcuWBP039o4=
Subject key identifier:   FC:8F:C6:B8:74:F8:BB:A7:8D:87:33:DF:75:4B:68:7A:B2:FF:C3:32
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0B19
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_I_GuHT4u6eNhzPfdUtoerL_wzI.roa
Signing time:             Tue 29 Sep 2020 10:08:01 +0000
ROA not before:           Tue 29 Sep 2020 10:08:01 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        180.218.192.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2841 (0xb19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:08:01 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=FC8FC6B874F8BBA78D8733DF754B687AB2FFC332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e8:53:56:34:62:f3:0e:7b:68:09:27:55:00:
                    ea:f7:65:aa:9c:4c:d4:51:bd:10:58:2a:08:9e:6b:
                    0f:c8:ed:85:e7:8e:31:15:90:27:10:46:77:e9:d8:
                    41:f3:38:c3:cc:46:7d:c3:48:34:b0:81:80:0a:18:
                    5c:2e:56:ce:0e:9d:a2:7a:92:e9:fa:8b:7d:71:a9:
                    03:a6:a6:85:95:49:60:47:75:06:d7:b2:11:6c:5c:
                    cd:8e:60:ea:8a:6e:37:2c:02:73:e9:05:e8:de:d8:
                    d0:f2:b6:b3:8f:94:b9:47:8a:d6:f3:94:61:77:a3:
                    02:6d:d6:b8:e3:85:7a:64:06:a0:2b:c9:1f:9b:85:
                    c9:ee:eb:1e:a5:01:f7:2e:e6:38:51:b4:c5:0f:0a:
                    f7:1d:07:02:90:9c:9f:3e:84:e9:00:95:33:ca:ae:
                    3e:8c:9a:94:ab:56:37:42:92:cb:41:fe:1b:ed:fc:
                    4e:43:74:68:02:2f:0e:3f:e7:d9:0a:74:4c:1f:6e:
                    91:9a:72:ef:94:bb:9c:a3:c1:6f:e4:41:9c:f1:9b:
                    70:00:40:4c:46:ee:34:e4:9d:bb:25:cf:97:9c:cf:
                    85:33:91:79:e5:24:43:20:60:5f:5c:74:88:47:fb:
                    aa:7b:66:1d:5a:3d:69:47:bc:90:25:c4:53:04:67:
                    c2:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:8F:C6:B8:74:F8:BB:A7:8D:87:33:DF:75:4B:68:7A:B2:FF:C3:32
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_I_GuHT4u6eNhzPfdUtoerL_wzI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4a:85:b8:8f:12:c3:1d:f9:8c:7a:39:48:1e:ec:84:84:8e:ef:
         cd:6b:4b:c9:45:53:10:8e:3e:d8:f1:5e:f5:cf:b3:5a:ae:96:
         ce:79:c7:81:85:af:b1:39:52:3d:43:5a:dd:99:ac:dc:f0:77:
         49:fe:15:31:4d:a1:81:0f:c9:ac:a6:64:c2:c7:52:84:e6:1b:
         01:13:91:fd:88:8a:bd:71:aa:25:13:89:75:00:4b:39:6c:3a:
         48:aa:e2:c4:fb:57:3a:26:7c:58:8e:d5:f7:bc:2f:14:5e:5c:
         2f:5d:7d:6b:0f:90:23:c4:93:97:fb:f0:8b:52:cc:41:45:8d:
         0e:74:ed:9c:a0:f8:38:27:e7:55:49:94:3a:1c:5a:0f:41:52:
         2e:df:20:53:ab:8b:48:7d:e0:0e:ad:4e:05:06:c2:18:05:ea:
         92:8c:02:49:69:fe:b8:35:8b:2e:bf:f7:68:10:1c:63:cb:4f:
         df:e1:b2:4c:19:9f:49:41:81:c1:05:2b:af:f6:72:8e:b0:35:
         2c:70:9f:3f:95:84:e2:38:51:c4:5f:d8:7f:3f:0d:96:36:70:
         8b:4c:86:d1:0a:95:49:33:3b:33:d6:18:a8:29:42:0d:1f:b8:
         9f:f5:b8:d4:2c:01:55:f6:b1:20:38:b4:32:2a:38:9b:62:b1:
         d5:c1:13:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----