Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/jJ5NIZw8diAT44VC1t_O1AYMVsk.roa
File:                     jJ5NIZw8diAT44VC1t_O1AYMVsk.roa (raw, json)
Hash identifier:          RXozCrBKSQ92lSS7+hAo6l742pia7zeFJGvwt9Y5bO0=
Subject key identifier:   8C:9E:4D:21:9C:3C:76:20:13:E3:85:42:D6:DF:CE:D4:06:0C:56:C9
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0B47
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/jJ5NIZw8diAT44VC1t_O1AYMVsk.roa
Signing time:             Tue 29 Sep 2020 10:08:14 +0000
ROA not before:           Tue 29 Sep 2020 10:08:14 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        180.218.134.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2887 (0xb47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:08:14 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=8C9E4D219C3C762013E38542D6DFCED4060C56C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2e:8f:0a:da:f2:a9:f9:c0:f2:ae:31:c9:cb:
                    94:2b:c8:7f:91:a1:a8:7d:e2:33:30:a2:13:ab:e6:
                    28:92:10:df:56:6a:55:83:85:2a:56:7b:7e:c5:a3:
                    ba:88:06:f1:4b:92:55:f3:7f:5e:25:48:22:f6:ff:
                    0e:a9:18:85:4c:c3:ea:da:14:bf:cf:2c:73:67:b5:
                    ec:15:bd:2c:88:4e:6d:03:04:dd:69:82:fc:39:a7:
                    90:2e:43:41:c3:c9:a3:a8:b2:54:71:f9:eb:4e:f3:
                    50:10:17:13:12:7c:2d:6e:15:35:7a:ca:64:fc:38:
                    9f:45:05:1d:fb:a9:d2:4c:82:45:18:e0:4e:2e:55:
                    df:6f:48:ed:2b:54:f5:4d:92:95:e9:54:f6:e8:61:
                    16:f1:64:f1:04:f1:8a:67:75:01:09:b2:eb:de:07:
                    7e:d4:c9:47:55:6b:a5:d0:f4:8b:a3:00:58:18:04:
                    28:b2:6e:e7:6b:3b:be:7c:e4:b7:51:b6:f3:5d:04:
                    f4:9b:cd:5c:9e:12:46:d1:df:91:50:65:e0:b6:a6:
                    1b:94:bc:21:f8:2f:a7:bc:5b:88:7e:b9:ef:96:a9:
                    54:f1:8a:4b:24:45:be:87:cf:39:33:1f:e4:4d:37:
                    36:e7:47:1c:29:7f:96:af:cb:16:5a:65:a4:60:80:
                    8b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:9E:4D:21:9C:3C:76:20:13:E3:85:42:D6:DF:CE:D4:06:0C:56:C9
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/jJ5NIZw8diAT44VC1t_O1AYMVsk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:31:6a:55:31:b6:4f:a6:b9:bf:70:17:ec:4a:89:2c:42:5a:
         fa:eb:35:6b:8b:0a:74:0b:3a:ff:7a:7c:d2:cd:14:4e:c6:30:
         44:05:fe:0d:2e:37:2f:cd:79:25:68:39:32:4c:f5:2a:61:6d:
         ef:00:f8:56:a6:64:4f:16:d5:6e:41:81:4a:59:b4:6f:44:e7:
         4d:8f:03:8f:b1:9b:46:8f:61:bf:e2:a3:d8:39:b3:60:a2:e0:
         47:99:2f:92:eb:c2:e4:43:b4:8a:51:7f:30:eb:8c:22:2e:39:
         05:12:86:62:8d:df:3b:b7:87:84:04:58:1f:ad:bc:ec:94:1f:
         72:bd:b2:f0:ab:22:8e:4f:80:e8:d7:ba:67:e7:c0:a4:46:53:
         17:25:b1:f4:c9:ab:e5:90:e6:3e:0a:9f:ac:2a:f8:64:1c:f5:
         13:2e:67:9a:dd:d9:b6:b2:72:66:8d:3f:47:a9:b3:f2:f7:3d:
         38:42:d9:64:58:c1:cb:f3:79:be:77:19:4d:f5:dd:8f:90:d1:
         a8:61:91:cf:62:0c:2c:56:47:b0:5c:58:bb:f0:7b:14:67:1a:
         96:79:f6:84:3f:b7:91:60:9f:5d:e9:d7:b2:69:0b:9e:73:fd:
         68:4a:83:7f:59:8b:21:bc:e7:7d:5c:93:8d:a1:a1:2f:7f:90:
         d3:e7:e4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----