Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_UP4yVNS5rU9BL5FfabDZtgnFTg.roa
File:                     _UP4yVNS5rU9BL5FfabDZtgnFTg.roa (raw, json)
Hash identifier:          2zqasGfFFRyN9bpUmtj+7oP+0XKoE1sXzfW469CbLE0=
Subject key identifier:   FD:43:F8:C9:53:52:E6:B5:3D:04:BE:45:7D:A6:C3:66:D8:27:15:38
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0AC6
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_UP4yVNS5rU9BL5FfabDZtgnFTg.roa
Signing time:             Tue 29 Sep 2020 10:07:37 +0000
ROA not before:           Tue 29 Sep 2020 10:07:37 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        49.158.32.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2758 (0xac6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:07:37 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=FD43F8C95352E6B53D04BE457DA6C366D8271538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:93:ec:84:51:fe:be:37:37:49:61:9f:c2:1e:
                    a2:00:78:82:b9:e7:7d:4b:bf:91:30:2a:53:0b:5c:
                    53:73:69:de:23:33:9e:27:e7:d6:56:f9:29:5f:1a:
                    c0:94:34:54:f2:7a:e4:9e:a7:c7:59:a0:04:8e:1e:
                    29:bb:40:ac:d2:d3:2d:b5:1a:2f:28:43:8b:98:3e:
                    12:b3:c3:2d:ff:2a:31:df:d2:40:95:e6:96:72:18:
                    6f:b6:e3:44:f1:de:11:ba:f9:4b:68:2d:7f:92:91:
                    d4:50:6a:7e:ac:56:9f:9b:8f:65:fc:f1:06:8e:e7:
                    b6:20:c4:c4:04:5b:53:4b:6c:b5:81:65:17:ac:cc:
                    98:87:00:9a:6b:7e:42:75:1f:9d:9f:78:71:7e:30:
                    c3:77:d8:c2:c9:de:85:be:1a:72:19:1d:1f:1e:da:
                    b6:f4:cb:a4:d6:ff:de:4f:7d:c2:b2:51:2c:4f:0b:
                    0d:8a:6e:6f:9d:d2:43:1b:99:42:c1:97:aa:e1:7b:
                    69:86:85:32:dc:75:ce:4d:5e:f9:f0:ba:cf:d8:8e:
                    36:ae:05:d0:e7:8e:1e:c2:06:f5:e8:bf:51:8f:80:
                    0f:87:dd:f1:29:ad:6a:6d:86:0b:e1:8d:7c:a3:cf:
                    f1:c5:f4:db:89:66:23:5e:3a:be:51:79:02:3e:af:
                    1c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:43:F8:C9:53:52:E6:B5:3D:04:BE:45:7D:A6:C3:66:D8:27:15:38
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_UP4yVNS5rU9BL5FfabDZtgnFTg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         12:76:36:91:3d:5d:cf:a5:dc:2b:b6:df:0e:5b:03:f3:c5:14:
         1d:54:8d:92:42:e0:40:98:d5:44:df:76:51:6f:49:77:c3:6a:
         6c:7a:0b:33:46:50:a4:6d:db:8b:4f:36:de:bd:0a:fb:e6:0f:
         d2:ee:cc:54:95:9a:de:32:a2:78:20:a2:e9:04:9b:53:5e:12:
         ac:65:a3:78:60:52:90:5a:9f:5f:9e:15:0f:87:a2:de:9d:b7:
         26:fd:a0:16:97:b1:f5:66:c6:f6:78:07:38:12:a8:61:ce:38:
         ee:8d:a8:3f:d2:18:23:ba:41:e8:8f:58:8e:95:e8:60:d7:0c:
         5b:7f:db:7d:64:21:2b:54:d4:a4:ef:ff:e8:6c:83:51:f3:db:
         7b:1a:66:26:38:74:63:b9:cb:41:ef:7c:20:88:b3:90:2d:79:
         59:ec:18:8d:47:a2:00:c4:8f:d8:ab:dc:bd:19:80:39:2f:8e:
         07:c5:62:5e:6c:af:23:44:07:d9:c3:76:5e:a7:c8:30:0d:2a:
         cc:0f:92:a8:fd:b0:d3:e8:32:b0:21:ba:ef:b0:43:24:48:01:
         17:14:50:41:c5:72:05:d6:d5:e2:d4:cd:55:a2:f8:8d:5c:a5:
         dd:b7:e0:e3:03:fa:6b:b0:ef:8a:99:9c:76:a6:4b:23:f5:15:
         09:9c:0f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----