Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/nboOe8aoeb8RhotKVlZ5LhR-rKE.roa
File:                     nboOe8aoeb8RhotKVlZ5LhR-rKE.roa (raw, json)
Hash identifier:          8nueEvcJKTCd/feWJ1N7uyRjCs6arZ/u1iTc94Ikn0I=
Subject key identifier:   9D:BA:0E:7B:C6:A8:79:BF:11:86:8B:4A:56:56:79:2E:14:7E:AC:A1
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0AD1
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/nboOe8aoeb8RhotKVlZ5LhR-rKE.roa
Signing time:             Tue 29 Sep 2020 10:07:40 +0000
ROA not before:           Tue 29 Sep 2020 10:07:40 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        49.159.104.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2769 (0xad1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:07:40 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=9DBA0E7BC6A879BF11868B4A5656792E147EACA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a4:05:6b:c3:75:a0:39:26:e1:42:fc:03:60:
                    ab:cf:5d:15:c5:6e:0e:57:b9:ed:6f:b6:3b:c5:55:
                    35:55:0a:65:1c:da:51:40:9f:6d:fe:a1:5e:85:f7:
                    11:bf:94:14:d8:da:6b:d6:b3:3b:9a:32:f7:bf:07:
                    ce:2f:87:96:d2:99:3d:c1:b5:08:4a:72:0f:a4:87:
                    89:6d:8f:df:70:65:3b:d5:0d:14:51:5f:e9:8a:86:
                    f4:9a:ef:69:7c:c9:69:8c:41:f5:e7:56:33:7b:75:
                    15:19:ab:6f:8f:c2:7d:a7:f4:ab:ee:47:da:3c:62:
                    4e:b4:0d:ac:4a:bf:8e:8b:c5:c5:3d:4b:34:de:b8:
                    52:85:30:af:35:64:2e:1d:e7:58:b7:ab:a8:3d:53:
                    fb:3d:43:5c:38:46:43:07:ba:22:2d:b1:25:96:f4:
                    9f:73:ac:b6:31:d7:12:17:fe:7a:59:24:24:9c:c7:
                    b4:5b:ed:ba:14:77:91:90:c9:75:31:2a:39:ee:30:
                    b1:6f:d7:0b:b6:3d:ea:11:31:e5:e9:eb:3b:cd:d7:
                    f8:4c:54:cc:71:50:82:63:2b:18:6c:7b:30:de:10:
                    18:55:0e:03:97:f3:12:61:43:b5:e0:29:1d:8d:ea:
                    b1:ab:6c:7e:4c:2f:5b:28:5f:13:51:c6:fb:f8:d3:
                    ae:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:BA:0E:7B:C6:A8:79:BF:11:86:8B:4A:56:56:79:2E:14:7E:AC:A1
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/nboOe8aoeb8RhotKVlZ5LhR-rKE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.159.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         02:ee:95:a8:62:2f:a9:26:76:30:8b:a7:e6:d1:73:b0:a3:af:
         0c:f1:38:ac:c6:ae:d8:ad:fe:b6:89:01:80:80:6f:9c:86:a4:
         1b:7d:5e:79:86:1a:f0:7e:29:af:80:52:a5:2a:96:21:d8:8d:
         32:1a:51:8b:b2:01:1b:1f:cd:68:fb:0e:a1:98:66:d8:e3:0f:
         e8:19:49:69:96:90:ae:c9:d5:09:f6:29:f1:d5:41:58:21:30:
         ba:9f:1e:54:b0:7a:35:58:6d:99:56:a3:f9:44:3c:64:20:d9:
         83:fb:d1:9d:91:00:06:8f:01:57:d4:2f:f8:d5:e1:78:5b:0f:
         8e:ba:de:df:b5:c3:c4:7c:b0:a1:b1:24:34:49:0d:7c:63:b5:
         bf:a1:07:26:12:7c:1e:c8:62:56:5f:11:eb:4d:32:6c:66:52:
         08:c1:cf:c3:41:c1:c6:68:c4:9b:b6:75:43:01:f0:dc:10:aa:
         29:ab:e5:0a:9e:f3:1e:b2:9e:f3:bb:cd:0a:30:2f:16:9d:cc:
         38:9c:9b:93:74:e9:d3:6e:78:d1:fa:49:7c:b8:f8:bd:a8:2f:
         d8:25:56:a6:39:cc:ac:30:8f:f9:7c:34:db:b8:6e:64:41:f1:
         8b:c1:d5:27:b0:22:67:aa:f9:fb:75:f5:e4:53:bf:d8:9c:fe:
         74:a5:25:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----