Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lWHWlcGzUIqXMek-qajfk4_3xe0.roa
File:                     lWHWlcGzUIqXMek-qajfk4_3xe0.roa (raw, json)
Hash identifier:          u4IaXdAzliBuPyHeTHPsZJE6on6AhoynTta/SRXPEeQ=
Subject key identifier:   95:61:D6:95:C1:B3:50:8A:97:31:E9:3E:A9:A8:DF:93:8F:F7:C5:ED
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0B6B
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lWHWlcGzUIqXMek-qajfk4_3xe0.roa
Signing time:             Tue 29 Sep 2020 10:08:24 +0000
ROA not before:           Tue 29 Sep 2020 10:08:24 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24163
IP address blocks:        49.158.212.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2923 (0xb6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:08:24 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=9561D695C1B3508A9731E93EA9A8DF938FF7C5ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:34:30:c5:46:5a:d9:ef:f3:d3:35:04:7d:11:
                    50:6b:30:1d:00:22:a8:b9:27:3e:f2:a1:b7:8b:c5:
                    13:f0:e5:37:c0:85:6c:b7:cf:9b:59:2c:36:ff:59:
                    49:0a:0c:9c:ca:d3:39:ce:f4:a2:f8:9e:94:cf:2e:
                    29:e1:b8:74:a8:45:4f:09:94:8e:50:5d:6a:99:97:
                    f2:0d:aa:0d:3b:bd:4b:ec:45:4b:4a:ad:d5:1c:c7:
                    1a:cf:26:a6:65:37:cb:eb:c1:05:ce:d2:6c:82:51:
                    94:97:ae:06:47:c6:e2:99:e0:03:bf:79:62:06:cb:
                    d3:65:b5:ff:e8:59:0f:ae:d2:e1:ef:76:f8:46:60:
                    a5:27:33:79:e8:16:a5:cf:cc:6a:64:e2:b9:9d:97:
                    88:3f:b5:9a:1e:e2:00:96:84:11:f1:4a:15:ec:d2:
                    91:c4:02:a1:2b:b1:cc:f2:18:41:dc:25:73:2a:73:
                    c2:41:26:e8:b0:33:51:8a:e4:d3:77:65:22:13:05:
                    6b:b0:ec:c8:91:d2:8d:82:02:03:62:42:f0:fe:0c:
                    5a:5b:e7:6d:8a:1d:b5:d4:7e:29:ce:a2:3e:15:21:
                    95:ec:3d:26:73:2e:88:7f:2f:47:bc:92:85:e2:9f:
                    3c:e0:63:d3:88:57:a3:c2:c5:35:2e:30:5d:91:fe:
                    f5:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:61:D6:95:C1:B3:50:8A:97:31:E9:3E:A9:A8:DF:93:8F:F7:C5:ED
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lWHWlcGzUIqXMek-qajfk4_3xe0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:6e:10:da:52:ec:49:e3:45:4c:36:cd:d9:e7:35:83:89:8c:
         84:38:75:b7:c4:c3:3d:1a:23:e0:ef:ce:0e:c0:91:44:6d:be:
         da:f2:e9:63:1f:b7:d4:18:c9:c1:02:30:8e:ce:60:3d:a3:cf:
         f5:90:d5:31:99:1f:d1:5d:35:97:cd:cd:36:a4:7a:18:d5:b4:
         79:3e:b0:68:c6:1e:ce:c5:db:e5:8f:09:ff:3e:1b:f9:c4:a4:
         68:d6:71:c8:53:d3:45:44:be:47:61:79:87:9a:ad:5b:5d:7f:
         3e:d3:c4:3e:72:03:94:72:9c:60:cc:57:54:77:09:95:cb:36:
         63:82:5f:18:e4:7b:19:56:ab:d7:33:31:a6:56:7e:51:0c:f9:
         0e:17:4e:6e:74:e2:42:dc:91:dc:ef:5b:32:33:b1:96:c9:1e:
         40:32:7c:e7:ac:1a:b8:d6:74:a5:2d:f5:2c:ae:0f:1d:db:c0:
         fe:f3:f0:40:e1:3f:b3:57:6a:8d:66:de:7f:4a:ee:5a:56:76:
         f8:31:a5:67:a3:97:cc:80:38:09:4d:22:f6:66:47:5c:da:a4:
         d0:9c:7e:41:b2:37:f3:79:c9:53:48:bc:d9:70:5e:15:88:d4:
         bc:85:6e:b3:07:0c:b5:45:ff:b8:1b:7f:43:b2:bc:b4:ec:17:
         c9:fa:9b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----