Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/oQWDDKTScfl4rbURWczn_3f06sE.roa
File:                     oQWDDKTScfl4rbURWczn_3f06sE.roa (raw, json)
Hash identifier:          yC8c/h8fV8QYVPXU+QwbKwQjIbR52VrxmqbO/0IkroU=
Subject key identifier:   A1:05:83:0C:A4:D2:71:F9:78:AD:B5:11:59:CC:E7:FF:77:F4:EA:C1
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0B97
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/oQWDDKTScfl4rbURWczn_3f06sE.roa
Signing time:             Tue 29 Sep 2020 10:08:36 +0000
ROA not before:           Tue 29 Sep 2020 10:08:36 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24163
IP address blocks:        122.100.80.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2967 (0xb97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:08:36 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=A105830CA4D271F978ADB51159CCE7FF77F4EAC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:83:d8:2c:0e:60:2b:0b:e0:fa:b7:09:a2:32:
                    8d:5c:5a:a2:64:47:10:44:56:1b:16:a6:52:12:2f:
                    1d:e2:0c:fa:84:45:a7:d7:93:92:ef:8f:c5:b4:81:
                    4e:14:4f:17:69:ca:61:b3:83:fe:f6:59:3d:6a:e2:
                    23:d2:2d:fe:54:2d:40:f9:18:f3:52:c6:11:b9:9b:
                    b8:c3:f4:12:04:78:44:7f:84:64:a0:4e:4f:14:a8:
                    9c:09:fc:94:c6:0f:72:c1:51:6a:a2:6b:ff:d7:4f:
                    13:28:7e:8b:9e:00:58:b1:7e:3a:14:6a:e8:f9:7e:
                    77:d6:b9:05:64:a4:62:10:66:0a:67:31:f4:26:cf:
                    a0:47:b6:86:d4:6a:64:7f:f9:dd:4f:8c:95:4d:b8:
                    75:47:49:df:77:a0:64:b2:cf:d7:e9:95:7c:9f:dc:
                    c4:cb:70:de:05:4c:ab:da:f4:1a:d8:5e:3b:08:40:
                    96:ed:c2:68:c3:48:4f:c3:e3:96:c1:44:25:ae:0d:
                    ee:0e:65:30:bb:03:af:b6:19:0d:da:00:4b:21:65:
                    fa:32:11:ff:fe:2e:f0:30:53:b4:8d:64:59:c7:be:
                    f2:9b:1c:31:4f:bc:b8:22:45:aa:b4:84:58:f2:65:
                    e9:ee:51:bf:a4:f9:73:85:9e:aa:cf:dc:ac:ed:d9:
                    a9:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:05:83:0C:A4:D2:71:F9:78:AD:B5:11:59:CC:E7:FF:77:F4:EA:C1
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/oQWDDKTScfl4rbURWczn_3f06sE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.100.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2a:af:79:0d:2c:de:51:b1:d6:17:ef:fb:4a:20:98:37:e1:66:
         e6:ce:d9:b8:0e:ce:7d:88:b0:cd:00:04:11:10:ab:dc:8e:78:
         e9:7a:26:57:ec:1a:9c:f1:db:52:01:e5:73:57:52:83:1d:2a:
         ef:68:b3:a3:ed:83:d8:54:6a:67:1b:ae:2b:13:9d:14:7b:75:
         32:86:7b:e9:93:78:ee:4c:42:7e:dd:42:e3:30:98:e3:ad:9d:
         3c:0d:72:b4:f9:bd:a0:fe:06:8b:8b:82:29:97:be:20:84:ac:
         8b:36:03:16:dd:02:1f:73:52:da:a8:e3:8b:3a:f5:d0:5f:89:
         71:fb:61:89:fb:cc:57:6a:b7:f1:08:30:56:02:d1:cd:ae:4c:
         f3:28:93:84:34:19:12:88:a1:9b:3e:38:87:97:0b:81:0b:fd:
         f0:17:b2:d1:2a:16:f1:31:24:7c:ff:17:13:4d:6f:e5:9b:36:
         1d:60:d3:a3:8a:b0:fd:41:da:cf:be:16:62:b9:e7:5b:28:37:
         28:42:08:8e:7d:14:c8:bb:ce:b6:6e:40:40:24:49:f1:fd:3c:
         78:cc:c2:74:ee:5b:5e:b4:6a:bb:0f:0d:1e:a6:9d:0a:2c:f8:
         7f:29:67:cf:8d:66:5b:1b:c8:23:37:85:a8:28:28:cd:19:ea:
         2b:7a:80:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----