Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/pA6uPzKBRFvM7RzYi4Ale-Dx3Lo.roa
File:                     pA6uPzKBRFvM7RzYi4Ale-Dx3Lo.roa (raw, json)
Hash identifier:          uNGzH7i7gp/c+sqN/RRJCOgrL+k1rbDbRH9j1EvmQL4=
Subject key identifier:   A4:0E:AE:3F:32:81:44:5B:CC:ED:1C:D8:8B:80:25:7B:E0:F1:DC:BA
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0FEB
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/pA6uPzKBRFvM7RzYi4Ale-Dx3Lo.roa
Signing time:             Sun 07 Feb 2021 12:36:39 +0000
ROA not before:           Sun 07 Feb 2021 12:36:39 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        49.159.160.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4075 (0xfeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb  7 12:36:39 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=A40EAE3F3281445BCCED1CD88B80257BE0F1DCBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:26:70:99:67:54:87:de:ff:f8:e1:60:e6:d7:
                    44:75:f4:4e:9a:ef:3b:72:f5:de:27:36:b1:eb:c2:
                    56:ca:be:b1:4a:0a:5a:3a:b3:27:dc:69:af:69:2c:
                    16:27:af:3e:79:2a:aa:00:fe:d9:3f:a3:4d:2f:21:
                    fb:6a:f2:d3:15:b4:7c:e3:a1:6e:75:0f:f8:9a:3c:
                    9b:ab:43:c5:5a:57:ff:9a:6b:3d:4f:ea:06:bf:c6:
                    2f:cc:8f:4d:6f:42:7c:82:06:90:4d:d0:97:74:62:
                    a0:0d:d3:a5:3e:9a:90:e8:6a:93:c1:5a:84:95:e8:
                    f1:ca:5b:f5:b6:c1:fc:2b:4a:c7:fd:f9:b7:93:82:
                    bd:d5:c0:19:40:28:30:fe:47:f0:c9:01:b9:96:e6:
                    85:56:2d:8e:c4:0f:90:23:e7:dd:68:5c:9d:f6:79:
                    05:3d:70:cf:3b:4a:2a:27:7d:57:e0:e4:ce:3c:a3:
                    4e:4a:5d:fc:fa:e7:6f:19:03:73:51:c8:1f:aa:cf:
                    c2:cb:1c:d8:6c:37:73:02:70:f9:79:c6:05:c6:94:
                    ba:c4:1b:5e:db:57:3c:df:77:63:39:26:66:2f:b5:
                    1b:c2:e2:c2:4c:c7:54:df:69:d2:c6:7e:27:35:9e:
                    ae:a0:f8:f5:f9:05:3b:83:dd:9e:a0:38:3e:5d:dd:
                    03:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:0E:AE:3F:32:81:44:5B:CC:ED:1C:D8:8B:80:25:7B:E0:F1:DC:BA
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/pA6uPzKBRFvM7RzYi4Ale-Dx3Lo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.159.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         11:ec:97:00:c3:72:3c:3f:2c:27:8c:ed:af:d2:fb:01:93:9d:
         37:01:b1:6a:7e:ec:f3:3d:f1:38:8b:14:db:45:1c:de:1f:3d:
         44:b2:28:50:10:fc:57:21:9a:a5:1f:9d:a3:3d:7d:55:3e:08:
         97:99:45:88:4a:b7:dc:a9:91:33:fe:25:22:bb:31:d4:19:55:
         63:a7:3d:80:49:d5:b7:76:f4:8f:1b:da:82:b4:e8:7a:fb:d4:
         1e:8c:21:f7:7e:86:9b:45:13:20:ba:22:d0:27:61:5b:64:c1:
         a4:f5:23:5e:68:f7:02:9e:fc:57:d4:17:09:a1:a6:1f:4d:9f:
         cc:21:b9:99:52:ef:0e:27:dd:c1:c5:5d:6a:6e:40:01:7f:40:
         27:af:4d:64:ee:7e:25:50:60:ab:8e:c2:85:a9:a9:01:c8:4e:
         43:45:18:3a:c7:8b:37:1f:51:3c:eb:ff:34:9b:62:7b:a9:27:
         85:82:fa:f6:12:c6:3d:3c:c1:ae:8f:00:bc:17:f5:f0:82:21:
         8f:79:a8:08:76:1b:4a:20:14:28:f8:a4:12:73:07:59:02:23:
         9a:67:86:62:ea:09:e2:ea:0f:63:94:a3:dd:86:33:3c:71:b0:
         9e:12:20:49:a4:5a:bd:b9:b8:c8:28:a9:63:6e:94:60:9c:02:
         7c:4c:21:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----