Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/u3d00fonFj0UUKgkM5jtS3d1G9M.roa
File:                     u3d00fonFj0UUKgkM5jtS3d1G9M.roa (raw, json)
Hash identifier:          UtU7t1JnSfzvnHI9iR8YzrCvDtaeeZpr61ZwED+Lb1o=
Subject key identifier:   BB:77:74:D1:FA:27:16:3D:14:50:A8:24:33:98:ED:4B:77:75:1B:D3
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0BD0
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/u3d00fonFj0UUKgkM5jtS3d1G9M.roa
Signing time:             Tue 29 Sep 2020 10:08:52 +0000
ROA not before:           Tue 29 Sep 2020 10:08:52 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     4662
IP address blocks:        122.100.64.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3024 (0xbd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:08:52 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=BB7774D1FA27163D1450A8243398ED4B77751BD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:05:f7:ee:c3:6a:6f:8d:45:f6:26:1e:40:a6:
                    6e:7d:0f:f2:b2:b7:b0:91:ae:7a:61:5d:08:76:bf:
                    01:1b:16:b2:8d:24:36:0a:63:17:52:ac:c7:37:ec:
                    fc:61:6a:a0:72:a7:bb:d3:b6:d5:8c:a1:e1:b4:19:
                    21:5a:d7:73:f0:57:04:c0:9c:c7:9c:a7:88:54:bf:
                    73:1c:a2:6e:68:b4:d1:4e:b2:d1:1f:6f:9f:2c:61:
                    e3:d3:cd:f2:2d:07:44:95:a9:aa:61:c5:cd:4c:69:
                    68:e2:3e:3e:e4:ea:ab:56:19:af:e4:4f:90:60:eb:
                    d6:3e:9b:f0:aa:f7:86:fc:e6:08:cc:3d:86:65:91:
                    5b:38:36:6e:e4:3b:74:af:3e:20:cf:68:82:19:d1:
                    eb:c3:f7:60:a1:f6:ec:e7:76:0a:f8:5e:cf:57:9a:
                    63:86:ff:17:55:0e:80:b6:f5:dc:15:45:6c:39:d3:
                    df:7e:ba:1b:f9:74:45:b3:64:39:4b:df:c7:0b:f3:
                    83:e7:92:d2:9b:c6:2f:6a:86:b0:e6:d3:7c:f1:dc:
                    29:7a:14:6f:b3:39:c3:2b:e5:45:79:f8:b0:c1:72:
                    23:40:63:3d:fd:8f:54:02:48:6a:f7:3a:b6:2f:85:
                    38:95:6a:f2:07:8b:b3:81:03:22:d2:cf:4f:35:14:
                    9c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:77:74:D1:FA:27:16:3D:14:50:A8:24:33:98:ED:4B:77:75:1B:D3
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/u3d00fonFj0UUKgkM5jtS3d1G9M.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.100.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         9d:77:0b:1a:38:36:7e:c9:a3:4b:76:98:48:00:a4:7d:82:fa:
         fb:d9:6b:6f:f5:fa:b8:c4:02:75:40:c4:3e:e9:66:9d:b4:8a:
         19:95:59:ad:0b:ce:fe:a8:2f:35:5d:70:ae:50:85:46:a9:ca:
         8c:09:a6:64:58:70:fa:22:d0:42:3d:cc:be:0c:0d:5f:1c:24:
         a1:f0:6b:14:21:e7:e9:fb:6d:53:e2:31:5b:7c:26:ea:70:a4:
         2c:ad:dc:fe:8d:07:3b:50:d0:c8:83:b8:e6:eb:40:b0:bf:35:
         f5:c6:06:a8:a9:73:e9:d5:2c:ba:95:a5:92:b1:33:59:49:fb:
         11:b2:83:22:5f:e1:cf:dd:41:53:59:db:59:d8:bc:d4:68:31:
         0f:af:a9:e9:6b:6e:15:48:f1:ce:38:f4:2c:cc:df:9a:9b:e7:
         cc:c1:89:d2:43:13:32:89:dd:02:70:43:b3:0a:ce:80:49:b2:
         89:ab:f4:5b:c3:f4:4e:d6:6d:ca:f7:d4:76:50:dd:65:81:19:
         11:32:6b:64:b2:b8:e0:54:ff:ad:7f:e1:d0:b2:53:57:a4:f1:
         f8:46:63:51:cd:0a:91:34:d6:90:03:1a:13:00:f4:84:fb:0c:
         36:23:d9:19:7b:08:a8:4c:f1:eb:b3:f3:47:3d:aa:7d:64:8d:
         0b:b6:85:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----