Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/i_im39v9ege0yaj64raLVbnkDUo.roa
File:                     i_im39v9ege0yaj64raLVbnkDUo.roa (raw, json)
Hash identifier:          EVT36FpXctL/s1AGcczmut2pq6jzOIB8rf66SZjM2oU=
Subject key identifier:   8B:F8:A6:DF:DB:FD:7A:07:B4:C9:A8:FA:E2:B6:8B:55:B9:E4:0D:4A
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0B03
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/i_im39v9ege0yaj64raLVbnkDUo.roa
Signing time:             Tue 29 Sep 2020 10:07:54 +0000
ROA not before:           Tue 29 Sep 2020 10:07:54 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        180.218.48.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2819 (0xb03)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:07:54 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=8BF8A6DFDBFD7A07B4C9A8FAE2B68B55B9E40D4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8d:af:87:22:6f:96:d1:b9:8c:58:bc:8e:f7:
                    75:97:60:f9:9a:96:0b:15:85:13:94:78:ad:10:eb:
                    63:bb:f8:0a:04:3e:67:35:4d:31:fa:fd:1e:63:96:
                    07:3f:55:ef:bd:56:ec:a9:3f:89:21:22:f6:59:72:
                    84:2a:fa:41:6a:02:58:93:1c:71:fc:78:60:2f:e4:
                    55:fb:1a:ee:57:9e:cd:ef:3e:9c:fb:40:e4:a8:c3:
                    a3:90:4a:fc:82:f8:bc:d8:c5:64:37:39:25:36:ac:
                    0c:25:5e:3b:ec:bb:29:08:98:26:3b:61:1e:c8:2e:
                    97:32:b9:c9:44:3a:05:c5:54:a7:19:81:33:83:12:
                    72:ff:51:4a:cd:87:35:0b:79:d6:63:80:91:fc:fd:
                    42:dc:22:76:79:fe:44:82:54:eb:8a:71:36:b5:2b:
                    44:4d:b2:dd:30:4b:f3:9a:99:0b:42:23:57:18:de:
                    5e:70:04:2f:59:62:29:cb:2e:53:7d:32:cf:39:80:
                    f6:24:a6:cf:12:95:6b:a5:51:05:79:de:05:e5:20:
                    5b:56:85:ff:a1:ce:d5:cf:03:9e:06:39:0c:46:0e:
                    63:b9:df:9c:bc:1e:9a:d0:65:a5:49:ff:b7:48:39:
                    cb:f7:3f:50:ba:a0:3c:57:a7:ef:33:29:62:de:51:
                    96:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:F8:A6:DF:DB:FD:7A:07:B4:C9:A8:FA:E2:B6:8B:55:B9:E4:0D:4A
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/i_im39v9ege0yaj64raLVbnkDUo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7a:e0:44:b8:78:b2:8c:ba:36:f2:6f:00:24:3c:da:af:02:3e:
         54:11:3d:a3:d1:c7:16:2b:e4:8c:8e:32:40:11:b0:08:59:32:
         08:20:ce:9e:c8:99:bc:83:26:65:61:9a:3d:e3:b2:18:03:88:
         9e:d5:4b:ee:42:39:24:3d:8c:15:5a:0f:f9:48:65:33:d6:7b:
         0a:0e:08:72:c2:dd:ed:21:25:e1:0a:cb:3d:52:7d:81:07:b9:
         34:1d:7c:71:16:0a:00:67:0a:3a:e9:97:f0:ad:a6:69:cd:ae:
         8e:d1:e1:42:04:97:e7:93:cf:e2:4c:cb:4d:d6:60:f4:e0:bf:
         9e:91:cc:2f:53:0a:a5:f7:3a:48:8b:47:55:d0:92:14:7d:1e:
         57:2d:9e:5a:f4:96:67:62:f2:4f:13:ef:22:21:2a:d4:20:0e:
         2f:62:f7:e2:eb:d5:d0:9d:d0:b5:1b:b9:6d:c7:3c:90:c5:5d:
         6a:75:3b:de:c7:c1:b2:cb:8e:17:5a:4c:87:82:e4:29:09:29:
         27:f5:da:e2:f1:80:25:e9:98:05:f8:d8:c9:e2:cd:ac:e7:7e:
         f6:ce:95:28:fd:ab:30:3f:9a:3c:d4:4d:47:4e:fa:1a:f4:0b:
         85:8d:2b:2b:5b:6e:59:41:ce:ca:7b:bf:e5:51:46:1b:82:8a:
         69:6a:ef:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----