Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/sYNX3C4wWfItUh6aSi_v50ZEdFs.roa
File:                     sYNX3C4wWfItUh6aSi_v50ZEdFs.roa (raw, json)
Hash identifier:          u1vtsERg4SRnUk1L5AdLsh/wgLnO+q82h22an9n4Y6I=
Subject key identifier:   B1:83:57:DC:2E:30:59:F2:2D:52:1E:9A:4A:2F:EF:E7:46:44:74:5B
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0AC3
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/sYNX3C4wWfItUh6aSi_v50ZEdFs.roa
Signing time:             Tue 29 Sep 2020 10:07:35 +0000
ROA not before:           Tue 29 Sep 2020 10:07:35 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24165
IP address blocks:        49.158.232.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2755 (0xac3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:07:35 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=B18357DC2E3059F22D521E9A4A2FEFE74644745B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:4d:3c:25:0d:17:a3:df:bc:80:4b:dc:e1:e8:
                    31:a9:1b:cc:55:0a:31:40:f2:d0:a7:b9:20:d5:7c:
                    04:47:e4:a1:f1:cf:d6:43:5e:f8:a1:49:7f:20:52:
                    11:ae:99:2f:06:d9:9d:01:b7:85:50:b7:95:97:1e:
                    49:dd:d0:59:12:7c:15:36:e7:9b:ae:8c:18:c7:22:
                    50:b9:f5:ff:0a:d2:9e:13:89:b3:0d:7e:09:cb:6b:
                    ba:89:48:1d:53:2c:71:6d:73:00:54:a5:ae:ca:82:
                    11:b7:10:a3:9d:65:d2:35:f2:6a:75:b7:cc:70:84:
                    12:69:50:78:08:66:c2:e9:8c:09:4c:1d:93:39:48:
                    ef:ef:aa:6f:22:5f:5e:95:4f:2d:7e:71:55:e5:ee:
                    88:62:39:02:01:c1:0f:d7:88:02:f7:39:a9:e9:66:
                    93:d7:50:ec:4f:23:b1:9f:dc:6d:42:ec:90:71:04:
                    52:38:3f:a3:48:ba:e9:21:30:94:90:16:79:b4:41:
                    a5:8d:22:a8:eb:fd:e3:c3:91:e7:7e:db:48:8d:cc:
                    74:7e:d1:2d:7a:45:4f:e8:70:8d:7d:40:23:46:19:
                    fe:c2:e7:40:7b:bc:59:b2:db:c8:d5:b9:ec:7f:38:
                    d3:a2:2d:c3:a4:36:79:5e:4c:ee:93:b6:7b:6e:ee:
                    d0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:83:57:DC:2E:30:59:F2:2D:52:1E:9A:4A:2F:EF:E7:46:44:74:5B
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/sYNX3C4wWfItUh6aSi_v50ZEdFs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.158.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:8e:49:f8:45:58:55:93:b1:ea:c2:8c:ae:dc:cc:54:2d:d5:
         14:c5:3e:d4:56:99:9c:d7:2f:f9:ff:a4:5b:87:d1:7e:08:b0:
         35:8d:d0:64:5a:b0:4f:9c:33:2f:e1:e4:a6:0a:cf:db:d7:27:
         30:e6:9f:42:42:32:cd:c8:cd:5d:e9:dd:17:a8:e3:86:db:a1:
         b2:a5:b1:8b:25:39:ba:1a:db:aa:b2:6f:c5:af:15:3b:e6:c1:
         3d:12:e4:eb:b5:30:62:d2:91:d8:d6:1c:f5:18:7c:7e:3b:37:
         79:a5:9a:62:40:d0:c6:a3:0c:18:13:5b:0a:2f:6e:a2:c9:37:
         84:05:9c:14:47:ba:79:97:13:03:f7:c6:20:94:1c:0b:90:d3:
         40:d3:49:86:a7:a4:c7:31:ab:fa:b5:8d:16:24:a1:10:84:98:
         f0:83:7b:8b:e5:ba:13:3c:f1:da:70:09:87:75:90:ac:dc:dd:
         57:2a:63:88:11:42:ab:57:2e:3c:ae:ee:fb:52:f8:74:0c:6a:
         c5:76:97:10:1d:f0:57:01:2e:64:96:90:56:4a:7d:c5:19:45:
         69:d0:25:e3:e9:a2:d0:e4:b8:f7:38:c2:b5:63:ca:42:0c:cb:
         0d:94:7a:0f:57:16:d8:af:ed:3f:f5:24:39:d5:e4:bb:87:83:
         3c:33:41:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----