Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/g8YY6fNO-mjxAW1Hpm8MERmbXJc.roa
File:                     g8YY6fNO-mjxAW1Hpm8MERmbXJc.roa (raw, json)
Hash identifier:          owpCQn05kNySSv2bFq6capH4rn0FJuk0Iu4uSWQV0tc=
Subject key identifier:   83:C6:18:E9:F3:4E:FA:68:F1:01:6D:47:A6:6F:0C:11:19:9B:5C:97
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0B2E
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/g8YY6fNO-mjxAW1Hpm8MERmbXJc.roa
Signing time:             Tue 29 Sep 2020 10:08:06 +0000
ROA not before:           Tue 29 Sep 2020 10:08:06 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        49.159.0.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2862 (0xb2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:08:06 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=83C618E9F34EFA68F1016D47A66F0C11199B5C97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:c0:03:8a:ab:21:af:9d:51:1c:37:27:cb:b3:
                    10:0f:b5:77:0c:28:2c:f5:22:a0:c7:d7:2c:53:25:
                    c4:ff:da:a3:64:d2:19:1b:57:4e:4d:12:43:fe:1b:
                    bc:d7:f5:0a:f3:1b:50:43:5c:26:01:34:9c:5c:ae:
                    37:a7:31:cb:87:3e:ae:96:a2:45:38:8a:b0:37:ec:
                    82:c1:c6:e9:ec:50:58:58:9b:1a:77:3e:58:c7:f0:
                    ba:e5:a9:77:ed:3d:3d:4d:15:ec:c6:2f:27:a6:9a:
                    70:6d:47:d8:c4:af:1e:e2:11:50:87:80:b1:a6:57:
                    af:68:5a:2b:09:ff:48:2e:0a:08:cd:90:91:62:80:
                    01:94:ba:f3:03:c4:e0:35:fa:26:a2:0c:13:ff:f0:
                    7a:da:ba:79:82:f5:ae:03:0a:5f:93:af:9f:96:4a:
                    d7:08:b5:3d:0b:ec:cb:6f:62:b2:0d:ee:9f:08:0a:
                    89:67:12:5d:bc:75:3e:e3:eb:84:e9:e8:eb:2d:d6:
                    72:e2:93:05:af:f2:dc:a5:3e:c3:4e:63:66:ef:4a:
                    a8:41:5d:b9:90:44:4b:40:9d:cf:4d:4c:4e:7b:6c:
                    52:46:61:0e:df:d1:4f:4c:0b:a7:03:d4:73:88:c0:
                    9e:a0:55:33:d4:ed:2d:69:50:10:75:82:45:8b:e0:
                    b2:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:C6:18:E9:F3:4E:FA:68:F1:01:6D:47:A6:6F:0C:11:19:9B:5C:97
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/g8YY6fNO-mjxAW1Hpm8MERmbXJc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.159.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:37:a2:3b:71:f5:af:cf:fa:49:c9:05:e6:43:e4:47:4b:1a:
         ab:e3:5a:f9:6f:b9:41:04:15:bf:1e:7e:f9:33:9d:42:d3:f8:
         78:87:8d:18:d6:8a:d8:71:44:ea:be:28:84:79:b9:6a:4e:11:
         bd:51:ff:01:f6:60:90:c4:51:75:8c:d3:aa:88:59:2b:d4:2f:
         48:a2:fe:f2:be:7f:df:97:b1:c8:39:ec:e2:51:8a:fe:fc:ba:
         b3:39:6f:36:dc:a5:dc:2a:f6:ac:2e:d7:fa:7d:56:67:af:3b:
         e1:0c:19:12:71:a3:6f:72:e5:06:97:cf:99:20:0d:de:d4:e2:
         a8:6e:80:af:3c:28:78:ad:4d:3e:e3:72:03:50:f8:78:30:f5:
         00:64:c7:88:ed:60:46:65:3d:4a:c5:a4:28:d9:6e:3a:4c:ce:
         80:78:f0:73:8b:20:f5:37:11:aa:d4:08:4c:e0:38:f6:7d:3c:
         01:11:6e:7a:98:22:ee:c3:84:54:b3:1c:de:32:f7:ce:21:fa:
         94:bc:76:a2:b2:e9:68:17:1b:12:7c:fd:2e:b1:06:f5:fc:b1:
         0c:4d:c4:a1:1f:95:cb:f3:d3:84:d1:78:e4:94:f5:25:91:95:
         e8:f7:fb:9a:4e:f6:ef:12:b6:e1:07:53:09:56:f7:69:68:62:
         2a:cc:aa:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----