Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/pYO0CRTEMFA9t-loDJzeivXtJGE.roa
File:                     pYO0CRTEMFA9t-loDJzeivXtJGE.roa (raw, json)
Hash identifier:          tJ2Ag1gbHj2EF7DfXBRGXkvh7gyby3dDWtEJZYB8LWI=
Subject key identifier:   A5:83:B4:09:14:C4:30:50:3D:B7:E9:68:0C:9C:DE:8A:F5:ED:24:61
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0B7C
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/pYO0CRTEMFA9t-loDJzeivXtJGE.roa
Signing time:             Tue 29 Sep 2020 10:08:29 +0000
ROA not before:           Tue 29 Sep 2020 10:08:29 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     4662
IP address blocks:        123.0.32.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2940 (0xb7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:08:29 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=A583B40914C430503DB7E9680C9CDE8AF5ED2461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:51:6d:d5:16:39:b3:b5:1c:db:e0:aa:99:e1:
                    9f:08:26:1b:5f:4e:f6:47:97:65:99:f4:10:e9:35:
                    fe:bc:bd:a9:e9:90:4b:08:82:97:2c:c7:ac:7b:f2:
                    b7:7c:02:cb:91:6a:bc:15:72:a9:06:d8:66:8e:57:
                    fc:9e:49:7b:e8:e2:ca:1d:88:4f:3e:b6:6a:6d:c2:
                    4f:9b:57:2f:36:a8:6d:c3:f6:e2:f7:4e:21:46:3c:
                    61:66:a6:84:ab:18:7d:df:af:9d:33:76:a2:45:e7:
                    fc:85:44:0b:0c:b1:db:f5:a6:7a:38:b2:6b:76:80:
                    46:e5:b9:2b:40:be:d0:ba:67:7c:c7:85:03:49:81:
                    73:0a:ac:99:5a:20:e3:84:d0:c1:1c:8f:7c:12:1f:
                    8c:fe:7e:8c:40:dc:26:7a:95:62:b1:a7:b5:62:c7:
                    0b:84:cb:fa:21:00:6f:f4:54:9b:6b:a9:ec:0c:ac:
                    9d:c0:9b:e4:f3:18:ca:5d:ff:b2:d5:f9:cf:e7:0a:
                    f2:81:c9:93:00:de:36:1d:56:da:15:e4:be:67:13:
                    af:ee:46:b6:46:74:fd:0d:6d:47:79:c7:a2:59:37:
                    50:41:f6:95:c7:e2:4e:6b:c7:6c:ad:ff:18:4e:87:
                    a7:db:88:47:8a:5b:67:b6:84:02:ea:bc:bd:8d:ce:
                    55:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:83:B4:09:14:C4:30:50:3D:B7:E9:68:0C:9C:DE:8A:F5:ED:24:61
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/pYO0CRTEMFA9t-loDJzeivXtJGE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.0.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         64:27:54:e8:31:19:62:9d:a4:b7:9b:4e:b8:b1:51:36:65:18:
         e5:51:40:50:af:5e:97:b8:3f:fd:97:09:67:27:ae:65:da:31:
         be:08:29:9f:0d:c8:73:ff:47:f0:21:7b:cf:41:98:4b:01:ff:
         20:2c:77:33:e0:86:1f:ba:eb:b2:53:05:e7:67:22:69:d2:d3:
         f3:f9:a2:74:cc:48:ae:4f:75:fb:f2:5e:18:86:af:1d:d5:dc:
         f3:67:a1:2a:be:32:0b:ed:6d:da:cb:99:68:1b:79:49:d5:2c:
         a9:7e:86:cf:87:64:ed:f6:5c:ae:d6:c2:46:e0:98:65:26:a9:
         88:ae:8e:6b:38:f9:91:e5:0b:15:d7:39:4b:68:19:73:ad:4b:
         fb:d6:5a:c1:a6:de:dc:29:4f:40:93:e8:b3:95:82:e4:17:25:
         1e:6e:51:c7:e3:46:52:fa:83:78:00:cf:d1:ff:62:d0:12:73:
         41:f3:43:18:e2:60:a8:4c:33:bf:18:c0:6c:19:80:68:f3:33:
         49:95:ea:0b:b9:71:d9:fe:f4:2d:62:d4:a1:fe:0a:7b:98:c6:
         2e:40:7e:82:12:ec:8e:ae:ba:7f:a0:50:1b:7f:f0:7a:9b:68:
         7a:af:b7:c2:28:b1:c8:77:c7:51:c7:a3:e5:d9:2b:45:b4:74:
         8c:2f:23:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----