Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/q5wJ6_sxeNE-NSGfdocyb1zZByY.roa
File:                     q5wJ6_sxeNE-NSGfdocyb1zZByY.roa (raw, json)
Hash identifier:          HQbOCteUe/BQXQ5xuLNRUMtyOQ5BHY90WEI1l1dKoW8=
Subject key identifier:   AB:9C:09:EB:FB:31:78:D1:3E:35:21:9F:76:87:32:6F:5C:D9:07:26
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0BCF
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/q5wJ6_sxeNE-NSGfdocyb1zZByY.roa
Signing time:             Tue 29 Sep 2020 10:08:51 +0000
ROA not before:           Tue 29 Sep 2020 10:08:51 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24165
IP address blocks:        122.254.24.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3023 (0xbcf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:08:51 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=AB9C09EBFB3178D13E35219F7687326F5CD90726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cb:ca:5f:94:a3:61:45:f8:43:f4:94:8e:e8:
                    f2:21:ef:cd:9c:6c:0f:1e:e2:e8:62:af:ef:12:e8:
                    11:8b:7a:5b:17:6b:5d:2c:5e:a8:7a:3c:de:60:a4:
                    97:52:32:17:a4:ff:e5:e8:77:1a:eb:43:40:e9:26:
                    a7:f7:cc:33:e8:34:5d:36:01:25:7a:9e:f4:7f:d7:
                    ae:70:c2:42:30:5d:a6:b8:04:58:f7:6c:65:fc:0c:
                    55:79:35:51:04:d9:a9:78:f7:36:6f:ea:20:87:79:
                    fd:9e:90:f8:b5:50:4a:9b:de:69:34:76:bb:85:d5:
                    12:2f:cf:88:0e:57:6a:f3:07:ae:9f:bf:74:02:a4:
                    fd:c5:7e:8e:9e:0c:50:6a:d6:d0:82:cb:53:d8:30:
                    af:24:63:f0:d3:0b:b7:83:3a:ac:77:ba:ad:7c:10:
                    52:92:95:8e:48:b4:5a:a4:50:dc:e4:1c:ee:cf:d4:
                    19:ab:54:aa:40:10:db:98:35:82:09:ca:8f:86:4f:
                    fa:68:7c:8c:d5:6c:a4:3b:43:68:40:da:ea:1b:79:
                    7b:fc:d8:2a:13:0e:7c:76:a8:05:65:dc:69:30:53:
                    5f:94:a7:9a:ed:d6:bf:24:f0:03:ac:aa:1d:6e:71:
                    8b:b2:cc:af:68:ee:99:0b:de:71:73:ae:32:8e:17:
                    46:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:9C:09:EB:FB:31:78:D1:3E:35:21:9F:76:87:32:6F:5C:D9:07:26
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/q5wJ6_sxeNE-NSGfdocyb1zZByY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.254.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6b:0b:86:bc:3d:a7:eb:71:da:7a:e2:14:cf:34:0b:1a:ab:08:
         5e:5a:9f:d4:15:a6:af:3b:4c:b9:59:93:08:34:6d:61:c3:28:
         8e:d5:db:a1:34:f1:be:c2:36:14:e0:4b:76:d0:3b:5d:40:41:
         d5:c9:4e:82:f1:89:26:03:32:24:1a:9b:e5:e1:d2:3b:6e:60:
         d8:47:89:cd:5c:5c:17:0f:fa:95:d2:51:4c:91:25:91:5a:7d:
         10:c6:c6:6b:c5:af:b2:75:7b:5d:73:6d:05:bb:98:ca:4d:9f:
         4c:89:22:db:4c:2f:90:8b:22:7e:dc:35:5e:d5:7f:57:b5:0c:
         de:67:c0:00:ef:ad:c8:17:dd:f4:95:25:b1:8b:cb:c1:32:7f:
         77:96:f9:fa:f3:92:1d:a8:3c:8a:ae:dc:39:4f:fe:61:de:2f:
         75:bf:bb:b3:ee:e2:88:15:a3:8f:3d:e7:73:0f:4a:d8:6e:03:
         33:eb:60:4b:66:f2:22:50:bc:28:56:8f:53:77:5a:0d:d2:fb:
         91:c4:64:98:f7:d8:dd:b7:f5:dc:b7:06:15:60:12:d8:3d:29:
         70:40:61:e4:16:da:1b:47:be:ef:c4:98:84:5c:e5:52:b9:09:
         43:dd:eb:56:cb:b4:6d:a6:cb:45:20:5b:dd:92:1d:37:1b:e2:
         d5:c9:52:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----