Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/o7PMOT-T6hnMRSOgQYcyGdB4S2k.roa
File:                     o7PMOT-T6hnMRSOgQYcyGdB4S2k.roa (raw, json)
Hash identifier:          JYa52RAe588Nh4tOMTqRN1uqFqskKIWKriXFU2C+NJg=
Subject key identifier:   A3:B3:CC:39:3F:93:EA:19:CC:45:23:A0:41:87:32:19:D0:78:4B:69
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0BC2
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/o7PMOT-T6hnMRSOgQYcyGdB4S2k.roa
Signing time:             Tue 29 Sep 2020 10:08:49 +0000
ROA not before:           Tue 29 Sep 2020 10:08:49 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        119.77.240.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3010 (0xbc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:08:49 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=A3B3CC393F93EA19CC4523A041873219D0784B69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:18:7e:ab:fa:3e:91:66:e2:9a:52:43:5f:4e:
                    33:65:33:64:2b:4b:f2:39:a9:06:93:02:63:32:52:
                    3f:86:5e:d4:41:d9:84:b2:0e:70:88:07:36:61:55:
                    7e:f1:98:50:42:bf:65:c9:39:f7:ab:5b:4d:f8:67:
                    0d:df:53:fa:9d:1c:a0:bf:fd:f4:ae:4b:64:42:de:
                    00:a1:c9:2f:89:44:23:b5:64:7f:3c:4e:8e:27:52:
                    05:14:f3:60:db:72:c1:bb:70:6b:cd:e5:7a:44:eb:
                    46:10:46:df:78:51:ac:96:3e:6c:87:2d:da:f0:d5:
                    8c:8b:3d:72:cd:a3:82:71:b4:d5:d3:5a:26:58:60:
                    f3:f1:b0:85:cb:7d:69:cf:67:56:41:87:eb:3b:72:
                    e1:76:63:7b:a7:3b:27:f5:1e:53:2a:14:6c:6a:2d:
                    b4:3f:6b:be:68:14:c6:1b:0a:77:26:31:c3:a4:8f:
                    9c:e7:44:1c:89:be:2e:3d:8d:51:c4:28:28:72:f6:
                    ec:89:a1:bf:45:4b:29:15:3c:95:c7:b1:c5:45:45:
                    f1:60:e8:6e:e6:ea:a2:df:50:26:6e:79:0e:d7:94:
                    84:30:f7:f0:c3:88:0b:77:3c:89:6c:9c:b8:64:38:
                    b0:90:eb:9d:f5:75:19:db:4e:b0:6d:50:52:98:64:
                    19:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:B3:CC:39:3F:93:EA:19:CC:45:23:A0:41:87:32:19:D0:78:4B:69
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/o7PMOT-T6hnMRSOgQYcyGdB4S2k.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.77.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:16:c2:8f:58:38:ef:93:8a:de:3d:60:6a:06:e7:94:3f:7e:
         ac:ab:7e:d8:60:d1:12:37:b7:1d:3e:2c:b2:cb:72:1b:ff:64:
         98:28:44:3c:3a:62:60:4b:7e:c3:cc:ff:e1:60:c2:1a:f6:e1:
         5d:7f:61:23:21:8b:cf:7b:0a:61:8f:ca:1a:15:47:00:bd:ed:
         6f:2b:7d:e5:e8:93:f1:92:a0:a7:65:4b:fb:ca:78:d9:cb:34:
         01:75:a0:1e:23:53:dd:2a:95:9d:76:bb:f0:9d:c4:a4:c1:b9:
         6c:38:86:6e:87:48:d2:35:71:1d:f7:3a:34:86:4b:2e:df:29:
         3d:ad:44:8b:67:ab:1c:cc:29:9a:fe:cc:21:b3:d3:77:7c:55:
         c0:f2:16:ea:19:5f:52:00:85:c0:1e:35:54:ef:43:90:11:37:
         7e:e2:c6:d0:5b:ed:05:58:d7:e3:8d:61:4e:b2:98:56:8b:52:
         a5:8c:5a:41:6f:62:2b:3e:d6:04:a7:48:7b:31:1b:4b:b1:e4:
         13:89:ee:df:56:d6:01:72:60:f9:9c:02:f3:26:0e:6f:68:ea:
         0a:98:29:e4:d9:f0:96:c9:91:8c:8e:f7:99:c7:49:0f:5e:68:
         4d:a2:20:42:39:8c:fa:2e:84:c9:43:55:77:db:71:ad:c8:a6:
         f7:22:a1:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----