Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/rcOAEJbOKz7GBk6Lw2SkFw98eeY.roa
File:                     rcOAEJbOKz7GBk6Lw2SkFw98eeY.roa (raw, json)
Hash identifier:          sOaUSw21K7bHqlxIBcK73Q7ecYMCSIqDT29XuCVsP6o=
Subject key identifier:   AD:C3:80:10:96:CE:2B:3E:C6:06:4E:8B:C3:64:A4:17:0F:7C:79:E6
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0B60
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/rcOAEJbOKz7GBk6Lw2SkFw98eeY.roa
Signing time:             Tue 29 Sep 2020 10:08:21 +0000
ROA not before:           Tue 29 Sep 2020 10:08:21 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24163
IP address blocks:        122.100.64.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2912 (0xb60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:08:21 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=ADC3801096CE2B3EC6064E8BC364A4170F7C79E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:75:d0:a7:40:d3:0a:d1:87:0f:43:b9:8e:6a:
                    0d:d2:73:fe:c0:81:54:c1:ad:72:e2:12:e5:d4:b8:
                    8f:84:19:68:76:79:9f:6a:59:77:7e:77:5f:fd:67:
                    f5:e7:e9:f8:66:10:f6:3e:d8:34:37:e5:c7:07:30:
                    bd:9b:0e:ef:f8:39:26:3b:cf:31:29:a4:a1:af:5b:
                    6f:79:17:af:57:ad:b6:c8:82:e8:8b:eb:0d:3e:a9:
                    1c:ad:e4:74:6a:bb:b6:ea:54:fa:78:ca:3d:7d:9f:
                    e9:43:d8:d7:e2:ed:f9:94:cb:a5:e5:a4:2a:1a:67:
                    e5:ba:a9:72:3e:86:11:b9:a7:c6:b5:c8:3f:da:9f:
                    c0:77:c3:d4:ab:1f:f4:44:18:c4:31:63:ab:fe:db:
                    93:9f:7e:cf:da:ed:f0:7c:97:ca:03:a7:32:aa:03:
                    75:00:77:af:0e:21:a3:8f:8a:ef:d4:b0:de:39:3d:
                    fe:f2:22:52:87:59:02:8a:50:bf:e9:a1:7a:b3:c5:
                    02:1b:cb:51:77:a4:22:74:3b:61:8a:7a:00:3f:79:
                    e1:c4:ec:fc:71:f4:94:39:e4:dc:2d:cd:a2:ee:d4:
                    78:4d:92:a4:a9:4e:87:6f:a0:15:fc:f1:8f:40:e9:
                    a0:dd:05:0d:89:8f:99:38:3f:69:c0:78:1b:7f:6c:
                    be:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:C3:80:10:96:CE:2B:3E:C6:06:4E:8B:C3:64:A4:17:0F:7C:79:E6
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/rcOAEJbOKz7GBk6Lw2SkFw98eeY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.100.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4c:72:86:5b:ef:d6:9e:5b:51:b0:94:30:e1:9c:bd:e4:fc:a3:
         3c:d0:7f:90:85:b4:58:4c:ba:69:20:0f:6b:4d:74:37:47:2b:
         db:4d:ae:14:81:79:5a:6e:8f:21:ad:a8:12:4a:9c:73:6f:67:
         d9:5f:36:1e:09:fc:55:62:1d:c2:87:f0:b1:f5:11:a8:c4:99:
         b6:3d:c2:48:0e:bb:c3:e3:25:57:2c:27:32:a6:64:b2:c9:39:
         e1:1c:1e:ce:b8:7b:09:c9:8f:0d:45:87:fd:df:5e:91:dc:b1:
         b7:0f:19:ce:3e:45:2c:68:6f:92:d5:d8:ea:ad:12:98:0a:db:
         df:21:33:9e:41:f9:d3:c4:8d:2e:91:45:c2:87:d7:94:b2:da:
         71:b7:ed:30:5e:b7:e6:b5:c7:7f:01:7b:6f:84:9b:d4:4d:4d:
         a2:41:4d:57:7b:35:ec:7c:ec:6e:18:97:1e:9c:34:d5:f6:3d:
         66:f8:c1:3f:10:21:34:de:30:cc:28:df:6e:6a:34:93:23:b4:
         b3:3d:ea:47:a4:2f:40:70:16:3e:17:4f:3f:c6:70:f4:8e:2a:
         1b:13:ae:b3:6d:e4:0f:87:82:78:59:35:40:4a:27:20:70:09:
         e7:73:31:35:dd:0b:68:91:62:2f:e0:52:82:cc:5c:a0:43:82:
         f8:21:65:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----