Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/p5q5yN9-rjjhYjiijKJWY7XFrAE.roa
File:                     p5q5yN9-rjjhYjiijKJWY7XFrAE.roa (raw, json)
Hash identifier:          0p82fpjrRsx5Xrp4/qjAj4NgS7VNKERBVh9veSlSjP0=
Subject key identifier:   A7:9A:B9:C8:DF:7E:AE:38:E1:62:38:A2:8C:A2:56:63:B5:C5:AC:01
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0B1B
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/p5q5yN9-rjjhYjiijKJWY7XFrAE.roa
Signing time:             Tue 29 Sep 2020 10:08:01 +0000
ROA not before:           Tue 29 Sep 2020 10:08:01 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        180.218.208.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2843 (0xb1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:08:01 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=A79AB9C8DF7EAE38E16238A28CA25663B5C5AC01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:75:ec:d2:d4:52:04:ef:7f:16:6b:02:3b:00:
                    ad:3a:6b:12:5e:ee:23:a3:50:73:a5:64:22:8d:75:
                    af:46:bc:78:25:e7:a2:7b:47:d6:93:21:00:89:c3:
                    78:5b:78:f2:56:dc:06:91:14:0d:57:fb:bf:66:c0:
                    0e:f9:d4:66:3e:4f:58:a4:c1:e7:d2:42:78:6b:59:
                    7c:24:3a:f6:39:44:1c:7c:19:f5:f4:d1:61:b4:50:
                    0c:69:92:27:9d:c9:93:03:8b:d5:3b:e1:f5:5a:48:
                    60:66:f5:61:56:c7:8a:82:61:51:fc:55:fe:34:46:
                    ba:82:2c:31:80:db:a6:0c:f3:81:7b:a5:8e:d5:fa:
                    2f:56:81:5b:5e:3b:a8:5e:ca:dd:75:cf:96:1a:f7:
                    fb:4d:6a:63:69:8a:71:e9:c0:30:05:94:44:cb:4c:
                    b0:a1:f5:54:62:20:8f:12:94:f6:8a:64:e8:5a:f8:
                    3e:65:53:d8:4e:77:79:f5:ee:6c:dd:a8:1c:34:b4:
                    1f:bd:aa:49:0c:d1:46:30:cd:13:17:6f:7b:f3:99:
                    62:7f:5b:80:d5:7d:14:0f:6f:cf:af:17:29:7f:0f:
                    c5:5a:90:d1:4f:61:be:23:57:c6:73:2d:1e:d1:40:
                    21:a3:4e:17:f8:66:07:f2:b4:21:30:17:31:fd:99:
                    0c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:9A:B9:C8:DF:7E:AE:38:E1:62:38:A2:8C:A2:56:63:B5:C5:AC:01
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/p5q5yN9-rjjhYjiijKJWY7XFrAE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         36:90:d1:83:c0:ee:dd:7c:2b:43:78:21:82:e2:b9:83:33:25:
         ff:67:8f:08:3b:a3:ea:10:5e:70:71:cd:96:8c:48:72:9f:cb:
         4e:c4:1a:2a:c9:a1:cc:b3:0d:54:62:62:16:46:b0:32:d6:26:
         3b:bc:7e:0a:23:37:08:69:5e:98:05:06:e8:ff:5a:ea:34:2c:
         9d:14:b4:41:0c:3d:93:a6:be:34:e8:48:55:fd:7d:de:3d:7e:
         92:df:50:e0:08:6a:da:a7:38:49:c0:1c:c6:a0:ef:15:a5:8a:
         75:95:07:f1:67:62:a1:6b:af:9f:50:da:bf:4b:dc:be:fc:82:
         b1:74:5e:c3:1b:2b:06:de:a9:cb:5f:ee:d4:0f:51:65:43:fc:
         d1:26:82:9b:6f:0f:94:0c:e9:f3:69:b0:b8:e4:c5:1f:cc:d2:
         e1:c0:55:05:77:43:88:41:07:0d:a2:af:26:5e:75:38:b0:1c:
         f9:e1:a0:55:f7:5c:c6:b8:23:f4:fb:be:d6:22:86:75:71:ca:
         5a:9a:28:d5:57:f6:77:ea:74:6c:27:1b:52:b7:79:f3:f7:64:
         ac:e7:35:20:f0:57:44:6e:79:93:86:71:0a:07:f4:a1:55:6f:
         f5:8c:33:67:c0:26:fb:87:9a:f4:10:1c:75:5d:7e:cd:75:f4:
         4c:0f:c2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----