Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mI1HXsVzkapvuv9YqGwGxMTL_z8.roa
File:                     mI1HXsVzkapvuv9YqGwGxMTL_z8.roa (raw, json)
Hash identifier:          V2Kr5MNtMBQB9e1Vaa8moO6t+eXYZ1i/mgMU/VSZyj4=
Subject key identifier:   98:8D:47:5E:C5:73:91:AA:6F:BA:FF:58:A8:6C:06:C4:C4:CB:FF:3F
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0B15
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mI1HXsVzkapvuv9YqGwGxMTL_z8.roa
Signing time:             Tue 29 Sep 2020 10:08:00 +0000
ROA not before:           Tue 29 Sep 2020 10:08:00 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        49.158.76.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2837 (0xb15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:08:00 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=988D475EC57391AA6FBAFF58A86C06C4C4CBFF3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:8b:22:6c:7b:56:6d:07:3c:db:5f:4e:a6:4b:
                    4d:5f:5d:fe:3d:09:a6:b2:d7:05:a1:be:51:a6:67:
                    00:c8:75:65:00:24:f4:eb:e3:07:e8:1d:60:10:8e:
                    79:ee:74:43:47:03:b4:b7:43:3d:fa:d1:37:b9:87:
                    54:4e:10:17:79:c5:8f:d6:d2:86:b3:2b:dd:82:a2:
                    e2:f8:9c:f6:f3:e8:82:f4:db:8c:87:b7:8f:3f:82:
                    44:a0:00:eb:74:12:ee:2f:e3:af:df:ea:a0:98:87:
                    a5:71:01:05:69:eb:e1:e4:6d:ab:97:ab:d7:91:8d:
                    c5:ce:e6:05:4d:4e:39:28:49:d1:20:17:92:2a:a5:
                    6c:e0:2a:6f:b7:5a:4a:50:b5:46:9c:44:07:d9:7b:
                    57:0e:0c:24:a2:4a:b0:ff:90:ff:a7:8a:7d:a8:d1:
                    34:ad:dc:b0:c5:b3:44:c3:9b:d9:96:ff:79:90:6e:
                    19:12:39:d0:72:b2:76:34:42:4b:41:6f:2c:3b:57:
                    85:eb:f9:c0:7e:e5:c9:94:4f:2e:1f:d8:f2:e2:37:
                    03:69:fc:59:49:78:50:e4:73:d8:81:73:98:ef:79:
                    b4:8b:48:dc:4e:ce:88:3d:98:75:25:4f:af:2e:36:
                    f6:26:ce:b4:08:c7:1e:95:85:d1:94:cf:5b:99:cd:
                    01:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:8D:47:5E:C5:73:91:AA:6F:BA:FF:58:A8:6C:06:C4:C4:CB:FF:3F
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mI1HXsVzkapvuv9YqGwGxMTL_z8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:3f:8e:61:58:4c:de:39:1e:00:e5:b9:43:79:5e:e2:0d:69:
         7e:d6:23:ee:30:be:ac:67:d9:96:be:e1:ec:7d:3f:36:06:a8:
         d2:f8:69:59:2b:07:13:38:13:39:4c:38:75:c2:fe:c3:ee:26:
         ec:b0:5c:75:60:e1:93:9f:3f:e9:31:29:62:6f:6a:3e:ff:c7:
         d7:c3:3a:50:e4:41:f7:2e:ee:60:85:e5:d7:4c:2d:55:69:ad:
         35:97:52:91:6f:e2:03:98:92:33:af:52:84:56:d5:69:78:6b:
         77:c8:a5:ae:45:f7:08:f1:8a:73:cb:c4:4e:51:9a:8d:c5:43:
         ee:d0:89:6e:06:d8:f7:bf:01:32:26:fb:6e:fa:9a:fc:6d:d5:
         12:ad:4b:20:06:5c:e4:cc:7d:e7:07:26:9f:c7:df:18:60:f1:
         2b:a0:db:8c:c2:71:2a:9b:5b:9b:e7:b2:14:85:f4:97:ed:50:
         a4:74:e1:49:b9:6a:26:7d:42:a0:23:32:f7:86:f2:89:03:4a:
         3c:b3:32:fa:ba:6f:53:97:fc:a6:3e:55:dd:c8:16:8b:98:b3:
         c5:90:dc:9d:e7:ed:01:7c:8c:24:74:8a:c4:9a:04:f8:2f:76:
         cb:05:ba:76:cb:f0:9e:44:ab:6c:a2:60:75:3d:a3:af:e2:04:
         9b:35:3f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----