Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/eN3HQvRcuFMhjfaweG7MtYQar-0.roa
File:                     eN3HQvRcuFMhjfaweG7MtYQar-0.roa (raw, json)
Hash identifier:          qsRBzFbSiOCaw+vKXDTCrm26lb9lUbdEkm8bWA+ARVQ=
Subject key identifier:   78:DD:C7:42:F4:5C:B8:53:21:8D:F6:B0:78:6E:CC:B5:84:1A:AF:ED
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0BBD
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/eN3HQvRcuFMhjfaweG7MtYQar-0.roa
Signing time:             Tue 29 Sep 2020 10:08:47 +0000
ROA not before:           Tue 29 Sep 2020 10:08:47 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        119.77.199.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3005 (0xbbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:08:47 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=78DDC742F45CB853218DF6B0786ECCB5841AAFED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0a:80:e6:79:68:1b:87:8e:b2:1e:d3:2d:70:
                    9f:97:7c:03:0c:a3:24:1c:a3:3a:bb:fc:1a:f9:c9:
                    b4:71:62:6f:a9:ad:f4:62:26:b5:1e:6e:3c:47:57:
                    10:ec:ed:d1:19:b1:08:a8:8f:37:89:2a:a7:2e:4e:
                    87:ae:44:09:42:f3:68:87:b5:a3:e5:0f:79:b1:16:
                    ae:a8:17:91:22:8a:89:7e:d9:cd:62:b2:18:7c:ba:
                    e5:66:d7:dd:d9:cb:1c:42:2d:80:1c:fa:1c:42:07:
                    b4:57:ed:67:d9:33:0f:b8:cb:c6:a0:98:68:a2:7b:
                    e2:e2:a7:6f:65:33:1d:30:7b:e9:bb:27:ea:be:48:
                    4c:3b:c6:ce:84:a7:d0:81:15:d2:a8:bd:76:fb:ef:
                    c1:fb:ea:5c:0e:d7:c1:64:ff:4b:73:a5:f8:51:dd:
                    2e:a1:ee:e7:37:5d:5d:1f:0e:fa:99:25:05:f7:69:
                    0c:e3:94:e2:b1:4e:65:0e:44:0d:0b:9a:6d:81:61:
                    f2:b7:66:b4:ac:94:07:b2:67:05:d3:80:0b:07:62:
                    23:2f:0a:92:61:6a:1b:0e:4d:6c:4a:41:98:0a:54:
                    06:04:56:19:75:51:58:de:ef:c4:b5:82:dc:ae:8f:
                    5a:89:ca:a8:2e:50:c9:f1:95:0b:3c:56:8e:c5:b6:
                    bc:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:DD:C7:42:F4:5C:B8:53:21:8D:F6:B0:78:6E:CC:B5:84:1A:AF:ED
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/eN3HQvRcuFMhjfaweG7MtYQar-0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.77.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:7a:be:0c:85:64:6f:1c:60:db:d1:01:48:db:47:98:11:6d:
         e3:9d:3e:a4:a9:83:8b:79:4b:2d:d3:a6:24:e7:d2:87:9c:10:
         46:fd:39:b2:e4:bc:c4:17:e2:bf:09:b5:00:2b:11:da:f0:a6:
         2b:75:44:18:39:32:7e:eb:a0:0c:6f:e0:fe:9d:b5:d3:39:4b:
         4c:b1:5b:cc:f6:7d:de:28:96:e7:43:0e:63:38:23:35:0a:21:
         18:c0:05:31:f7:cd:b9:7b:73:06:d1:2a:1f:d9:f9:da:29:17:
         8d:0a:4b:45:af:f0:81:72:da:37:ca:d0:14:16:3a:6d:15:73:
         44:bf:47:cd:28:66:ab:9d:96:f3:28:cd:c0:eb:8a:99:d1:f7:
         3f:3f:69:67:17:5f:9a:d6:18:cb:1c:5f:1d:f6:2b:55:6e:11:
         d3:97:2f:8a:2f:9b:eb:e8:15:df:57:ce:6b:99:0d:c4:57:04:
         80:d0:2e:be:66:c5:f5:e1:2e:4e:c1:a7:9c:b9:15:54:6f:ba:
         20:80:63:15:37:c9:0a:69:19:97:4a:fd:0f:98:d8:18:6f:17:
         26:b9:c0:9b:45:8f:de:46:1a:e4:a4:25:c8:da:9e:2b:ae:a8:
         53:2a:35:3b:57:84:8d:35:6c:b1:40:b9:00:42:15:29:74:f1:
         c6:cd:4b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----