Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/oOVugJQWkb_e5_ayILAJTExFivg.roa
File:                     oOVugJQWkb_e5_ayILAJTExFivg.roa (raw, json)
Hash identifier:          233CZbfUoRWGNtYD3++3qvMbdSz86PmGCSh+/XOqi2E=
Subject key identifier:   A0:E5:6E:80:94:16:91:BF:DE:E7:F6:B2:20:B0:09:4C:4C:45:8A:F8
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0AC2
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/oOVugJQWkb_e5_ayILAJTExFivg.roa
Signing time:             Tue 29 Sep 2020 10:07:35 +0000
ROA not before:           Tue 29 Sep 2020 10:07:35 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24165
IP address blocks:        49.158.216.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2754 (0xac2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:07:35 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=A0E56E80941691BFDEE7F6B220B0094C4C458AF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:71:80:d5:1d:6c:b6:8b:7d:64:7d:7a:50:3f:
                    01:e4:f6:e4:34:67:ce:38:de:02:71:8c:e4:c9:21:
                    3c:6e:04:80:ba:bf:60:1d:7a:27:97:84:28:dd:47:
                    2f:e2:c4:31:cc:3a:0d:5e:7d:08:2c:05:9d:17:29:
                    75:30:18:bc:fe:1f:40:12:ef:1b:71:3e:98:24:13:
                    12:59:cd:71:67:19:e5:6d:19:83:ec:ed:ed:74:81:
                    b5:78:30:25:e9:42:a1:c2:37:f8:22:be:5c:6d:5e:
                    16:2d:fc:1d:c9:0e:71:42:56:00:cb:23:ae:a1:4a:
                    13:a6:98:86:40:1c:45:1f:17:bc:81:29:fd:a1:81:
                    85:d3:2d:4f:f2:c1:6d:19:bf:54:e5:5d:62:90:a1:
                    42:42:71:30:20:bb:8b:89:f7:4b:2a:70:cf:f8:95:
                    5d:b0:c9:30:85:91:4e:76:d6:2f:43:90:c1:73:29:
                    1a:c5:7b:65:ad:28:28:92:88:26:f8:37:a9:96:8c:
                    31:b8:83:5a:ef:47:27:5c:77:b1:91:ea:e7:b8:08:
                    6e:4a:a9:7d:34:b3:d3:15:93:63:09:9b:07:60:12:
                    8e:82:8f:57:ee:d5:af:06:11:17:cf:c0:7b:e0:61:
                    23:4c:3c:cb:f0:db:c2:06:3d:39:0b:59:44:ea:82:
                    70:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:E5:6E:80:94:16:91:BF:DE:E7:F6:B2:20:B0:09:4C:4C:45:8A:F8
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/oOVugJQWkb_e5_ayILAJTExFivg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4e:7c:62:42:46:53:1b:7d:2f:bc:7c:bd:d9:7d:a7:14:88:11:
         f8:aa:7c:c7:0b:c8:1e:6e:8e:a7:2c:f7:51:29:a1:a4:92:a8:
         87:22:57:81:77:98:e6:9f:8b:b7:6c:f1:b8:6d:67:12:d9:9a:
         67:83:27:42:c0:c0:84:9e:36:19:84:23:6d:6b:ef:dd:04:0a:
         0b:0f:b5:62:b4:5c:b2:b5:f5:f3:6b:de:ba:0d:60:28:dc:f7:
         90:03:fd:fb:45:eb:a5:c6:a7:f2:33:05:27:16:af:99:4d:f0:
         86:1f:61:28:8c:d0:15:37:2d:7b:f1:6d:c6:73:ab:79:74:5b:
         e9:d8:1f:c7:11:5e:25:9e:67:9d:40:3f:b6:09:ce:2c:89:7e:
         d1:2c:b9:b5:33:81:38:95:49:ab:84:35:e7:82:73:f3:ed:bd:
         e7:86:a9:4f:75:1a:8d:ed:8c:fc:99:72:76:e2:67:03:91:43:
         c9:d8:4f:c0:82:3b:16:44:8b:5b:b8:48:b2:b2:bc:63:a8:83:
         20:3b:c8:74:e7:b6:c5:f4:7f:29:aa:68:4f:f1:e6:6c:57:49:
         4b:4e:40:f2:c4:a8:64:cd:02:1e:a6:b9:f0:5e:68:31:6c:6e:
         63:b4:94:b0:71:f1:10:cf:7e:9c:da:c6:70:0d:c6:9c:35:65:
         51:25:8a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----