Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/t7Dkn3kfZwuAt1BYqahnoYpnVjw.roa
File:                     t7Dkn3kfZwuAt1BYqahnoYpnVjw.roa (raw, json)
Hash identifier:          F7ngFLq7To/XUCWXLYusepuHSahr7iJSlCabJDzqHJI=
Subject key identifier:   B7:B0:E4:9F:79:1F:67:0B:80:B7:50:58:A9:A8:67:A1:8A:67:56:3C
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0B29
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/t7Dkn3kfZwuAt1BYqahnoYpnVjw.roa
Signing time:             Tue 29 Sep 2020 10:08:05 +0000
ROA not before:           Tue 29 Sep 2020 10:08:05 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24165
IP address blocks:        115.165.200.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2857 (0xb29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:08:05 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=B7B0E49F791F670B80B75058A9A867A18A67563C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:9d:c4:d5:06:aa:31:42:f1:bc:b4:ea:dd:7f:
                    b8:64:81:8e:f0:15:0e:7d:e4:57:cc:e3:a1:bd:fe:
                    07:c2:6a:ad:bb:70:df:90:bf:e9:1a:c6:af:f5:5f:
                    b8:ff:94:6b:2b:43:cd:7e:93:d6:c4:a0:13:e5:53:
                    56:97:6d:50:53:ea:59:1c:37:e3:2a:14:09:77:d9:
                    1d:7c:a3:f9:1e:ed:1b:a0:c1:ee:11:a8:eb:8d:87:
                    20:b5:a7:00:86:47:47:50:40:72:38:88:f1:da:3a:
                    28:de:8d:3d:99:32:44:01:6d:9f:36:45:94:ca:f2:
                    49:e4:e8:31:5b:b8:10:d4:2f:77:50:7c:2d:c5:2d:
                    2a:b8:61:88:f2:a5:10:14:12:f7:d7:9b:91:9f:25:
                    ac:b9:c2:3f:e7:1a:d4:93:36:6a:f0:ff:49:e5:bb:
                    19:3c:85:af:b9:6b:b8:03:1b:45:b2:36:1a:07:05:
                    de:9d:23:4d:b2:40:99:6f:59:47:91:3e:0a:23:18:
                    93:86:b2:c6:7c:00:de:a5:09:67:f7:95:be:0e:ff:
                    40:0b:2b:26:b6:f2:0d:44:88:83:1a:68:0c:2e:42:
                    c2:8f:dd:e1:02:47:8c:ac:86:46:a2:a3:fa:59:8c:
                    19:c4:c6:84:99:b4:67:10:4a:fe:17:5c:8f:cf:0a:
                    22:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:B0:E4:9F:79:1F:67:0B:80:B7:50:58:A9:A8:67:A1:8A:67:56:3C
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/t7Dkn3kfZwuAt1BYqahnoYpnVjw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.165.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4b:cc:36:ab:9f:28:5d:c2:9f:24:66:9c:45:bc:5f:af:d7:3e:
         24:8d:33:d7:1c:48:b5:70:ca:ab:4e:22:63:d8:69:2d:f1:55:
         7c:ec:3b:0c:8e:0b:c3:b6:51:35:24:1d:6f:54:f0:41:9a:62:
         f7:c9:0b:49:a4:d8:f6:ca:6d:fd:b5:b4:e7:9b:a4:4b:8a:96:
         b8:ca:aa:e6:10:83:6a:1c:54:30:5c:60:e3:44:5f:21:00:c6:
         03:a1:5c:54:ea:46:b5:5a:00:08:3d:e6:d2:23:11:fe:28:aa:
         54:8e:ea:28:c9:0c:15:44:bd:c8:0e:2c:af:d9:9e:76:50:38:
         84:7e:8a:81:cc:9c:e7:06:a2:f8:69:70:31:70:a2:3b:21:02:
         81:81:f0:27:c9:0d:26:7a:85:fa:74:e3:d6:61:2f:f4:ad:d9:
         8d:3e:a2:c9:55:e4:0a:74:16:b4:9e:2d:c0:ed:e2:a8:49:96:
         ff:ae:d9:f0:1c:56:4f:b2:b3:1d:7e:65:b9:7a:e9:55:88:86:
         1b:01:6b:db:eb:4d:aa:d1:92:ff:d4:17:4d:85:d4:9f:d8:e0:
         1f:cb:4d:ef:63:c4:41:0f:79:31:06:0c:88:86:82:6a:47:5b:
         d9:c1:6f:a0:8a:00:e4:b9:5e:c4:75:25:2b:a1:b8:8c:a6:fd:
         7c:4d:66:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----