Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/pagFL-rKqmX9FDdGFbSGjZariBk.roa
File:                     pagFL-rKqmX9FDdGFbSGjZariBk.roa (raw, json)
Hash identifier:          BEAgV2+pD5UZBrI2D3qi2HzN+2jaee2sagWm3f+tDdQ=
Subject key identifier:   A5:A8:05:2F:EA:CA:AA:65:FD:14:37:46:15:B4:86:8D:96:AB:88:19
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0AA6
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/pagFL-rKqmX9FDdGFbSGjZariBk.roa
Signing time:             Tue 29 Sep 2020 10:07:27 +0000
ROA not before:           Tue 29 Sep 2020 10:07:27 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        123.0.43.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2726 (0xaa6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:07:27 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=A5A8052FEACAAA65FD14374615B4868D96AB8819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d7:a3:e2:0f:ed:eb:cd:65:78:83:73:09:d3:
                    ea:10:98:ec:3c:93:17:29:cc:d7:fe:c6:04:c6:bf:
                    5a:3c:37:e7:e9:77:20:6c:72:5a:0d:29:c0:31:dd:
                    47:44:13:eb:37:ec:a9:15:a8:04:2d:53:11:66:34:
                    f8:6c:e3:ee:c3:bd:3b:08:43:f5:70:5c:9a:31:8b:
                    2d:c8:24:c8:c8:ee:61:85:dd:ff:32:62:1f:0b:1f:
                    39:e5:c8:0a:fc:48:3b:27:0a:19:6c:77:4b:24:c4:
                    84:7e:cd:09:cb:81:11:6c:c9:64:dd:7a:f3:95:67:
                    1b:30:b4:01:06:b5:94:3d:f6:db:9b:b3:c3:97:e1:
                    37:82:fd:6b:67:1c:1a:7c:2a:70:74:e3:01:6f:95:
                    ca:70:b4:ad:24:99:8e:c4:24:e8:74:f7:01:f2:f0:
                    db:a5:67:b9:b9:7b:b1:6a:f3:ab:9e:ff:75:a6:37:
                    78:a1:62:08:07:5d:f6:35:d2:fa:5e:5e:96:a2:4e:
                    94:27:b7:87:f4:ce:bf:cf:cd:74:78:3c:81:7e:0f:
                    b4:39:91:d4:49:f3:6e:11:05:36:49:20:fd:64:a2:
                    8a:06:9a:e6:b2:ec:59:d6:da:16:1d:35:8e:59:f4:
                    3e:eb:15:6a:3f:69:5a:67:bf:31:f3:6a:60:e0:00:
                    e3:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:A8:05:2F:EA:CA:AA:65:FD:14:37:46:15:B4:86:8D:96:AB:88:19
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/pagFL-rKqmX9FDdGFbSGjZariBk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.0.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:c3:50:6d:4f:2b:58:61:ae:4d:6d:42:44:65:5d:ef:ca:5d:
         4e:a5:16:75:22:3b:23:29:d9:b8:28:40:03:2f:b4:ec:22:ec:
         25:a4:7c:1c:66:c1:a9:4a:f1:e8:a5:f7:4e:53:9d:62:60:17:
         79:49:f7:b1:8e:5e:83:0e:61:d0:bb:74:45:5f:e3:28:30:4f:
         46:f9:31:40:72:11:c0:ce:aa:38:15:e2:46:16:13:30:8a:07:
         68:8b:16:b4:07:7f:3f:c6:3d:03:a1:b0:70:2e:7f:ef:cd:6c:
         42:c3:e8:4c:4a:a0:32:bd:bd:d0:54:d6:88:fc:44:04:7c:e0:
         cd:61:9d:42:bb:cf:60:df:c6:5d:1b:1d:7f:df:e0:78:c7:77:
         23:06:34:0d:db:f1:e1:5f:e4:65:e8:14:94:ee:eb:ee:0d:7c:
         ed:9b:b0:06:9e:85:32:20:ad:e9:a3:09:76:32:f5:22:dd:a9:
         cb:d5:9a:9a:a7:db:a9:54:67:b9:06:c5:4a:88:cf:e9:59:d5:
         e7:48:4d:ca:3f:e3:70:c9:f1:df:84:01:58:93:8c:ab:ac:a9:
         01:5a:8e:7f:8d:b5:8d:07:8b:dd:09:10:d7:c0:b0:80:8b:21:
         48:2c:d0:6f:a7:89:c8:04:aa:2e:52:2a:6d:3f:0f:93:c8:8d:
         50:41:12:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----