Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/iRNUBEGVO23bOu4btQzpfREaVwE.roa
File:                     iRNUBEGVO23bOu4btQzpfREaVwE.roa (raw, json)
Hash identifier:          YtCLJ1ecwRfyT0UG0rtrq+O/RCcV7pbkr1qg3mjJK4E=
Subject key identifier:   89:13:54:04:41:95:3B:6D:DB:3A:EE:1B:B5:0C:E9:7D:11:1A:57:01
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0B37
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/iRNUBEGVO23bOu4btQzpfREaVwE.roa
Signing time:             Tue 29 Sep 2020 10:08:09 +0000
ROA not before:           Tue 29 Sep 2020 10:08:09 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        119.77.180.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2871 (0xb37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:08:09 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=8913540441953B6DDB3AEE1BB50CE97D111A5701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8f:85:d7:d5:43:51:81:7e:ab:b5:a9:5c:33:
                    ff:fc:40:0c:54:6a:75:f9:d5:61:33:65:4f:6a:3b:
                    a9:f8:0e:a3:02:96:80:e2:b1:00:e8:8d:56:53:ab:
                    1a:f4:ce:62:fd:86:c1:13:1f:b3:3a:86:be:1c:82:
                    cf:47:24:67:b4:c6:44:da:ab:6a:d4:5b:66:aa:04:
                    8d:65:11:39:2b:76:e9:3a:bc:2d:16:58:b1:ae:70:
                    91:c3:9a:84:5c:b0:d2:89:56:70:fb:8e:b6:fc:c0:
                    87:08:d4:ef:b7:be:58:6c:dc:b6:84:bf:81:9d:4b:
                    79:c8:9c:2a:71:0c:aa:21:39:85:0e:0f:e4:21:62:
                    d3:bc:fd:b5:b6:00:dd:bd:13:92:60:4d:fb:6e:a9:
                    a9:05:bd:82:ed:ef:14:c2:69:10:da:b9:77:86:05:
                    47:72:92:9e:d1:3a:52:b4:20:7b:34:a6:46:e9:55:
                    4f:58:7c:fa:ac:e6:63:61:a1:3c:ba:fd:03:33:52:
                    4c:5a:54:e9:2c:2d:4d:b5:19:e5:50:52:df:e9:1b:
                    f6:8e:c4:7b:c1:40:30:80:ba:d3:58:1a:02:e6:15:
                    05:fe:2a:5a:4c:85:7d:36:ff:c0:1f:f6:2a:04:d2:
                    bb:bc:c5:84:e4:61:16:5d:7e:79:36:1a:6f:a1:2c:
                    5d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:13:54:04:41:95:3B:6D:DB:3A:EE:1B:B5:0C:E9:7D:11:1A:57:01
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/iRNUBEGVO23bOu4btQzpfREaVwE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.77.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:c9:f9:74:d8:79:fe:e8:a7:08:07:7e:0b:26:16:e4:f8:1c:
         31:37:53:6c:06:3c:2e:3f:e3:14:e4:a5:34:c6:8a:59:23:b7:
         3e:12:5b:46:8b:72:26:e7:52:57:ba:e3:56:0d:4c:6c:24:01:
         af:3e:c5:5c:6f:bd:49:ed:3a:7f:ce:a6:bf:55:21:ee:a2:c2:
         f3:23:c7:d0:e9:63:24:fb:fb:65:d0:ae:0e:d3:89:48:fa:02:
         3a:b7:a7:bd:9c:9d:16:b3:39:21:ca:67:b3:df:26:c4:e6:3d:
         38:93:b6:38:85:9c:8b:c2:12:b3:8b:b2:59:14:36:90:f5:e2:
         db:a9:ec:19:b5:35:75:06:73:0c:d2:03:cf:cb:d6:8f:3a:33:
         88:4d:f5:a6:0e:db:36:92:15:ff:4a:9c:52:ce:bf:02:b5:39:
         46:11:e8:29:d5:3e:ab:5e:ae:bf:2b:53:83:e4:d9:9c:fc:55:
         63:dc:7b:98:85:83:e4:74:8a:eb:99:f0:b8:8b:ef:71:62:c6:
         9f:51:4c:67:0d:55:51:d9:76:1a:0d:ce:cd:f2:94:32:3a:8e:
         e8:e2:75:8d:e3:6f:76:2e:cd:6a:d4:42:e5:94:9c:1c:66:d1:
         8c:fd:a4:88:f4:ec:46:b8:60:34:cb:75:37:35:20:6f:c3:88:
         11:ee:76:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----