Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zj-YzTWrVSGbvXBGiEaHUoiMsLY.roa
File:                     zj-YzTWrVSGbvXBGiEaHUoiMsLY.roa (raw, json)
Hash identifier:          tz43K5bwVDjeMZF7l4qrbebiqcwRskFXs90c7bE6+5A=
Subject key identifier:   CE:3F:98:CD:35:AB:55:21:9B:BD:70:46:88:46:87:52:88:8C:B0:B6
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0B02
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zj-YzTWrVSGbvXBGiEaHUoiMsLY.roa
Signing time:             Tue 29 Sep 2020 10:07:54 +0000
ROA not before:           Tue 29 Sep 2020 10:07:54 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        180.218.32.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2818 (0xb02)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:07:54 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=CE3F98CD35AB55219BBD704688468752888CB0B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:14:13:ae:9f:e9:0c:f6:82:ab:bc:c2:b5:79:
                    fd:75:bf:1d:eb:63:e9:37:be:f3:e6:43:30:8c:fe:
                    97:db:12:89:b8:86:b2:9b:ae:6d:96:2f:cb:94:93:
                    2e:ed:42:16:9a:fd:c2:56:f8:ea:5f:f1:40:23:5c:
                    e1:3e:76:49:88:93:e9:20:75:09:a1:33:cf:4c:fa:
                    52:09:c9:61:58:1b:67:76:57:ca:5d:ee:77:dc:72:
                    3b:e4:9a:e5:d6:76:7e:21:94:80:89:fd:41:bf:6c:
                    61:1a:26:80:1c:c2:dc:e9:eb:a6:12:0b:34:a4:32:
                    0d:7b:3d:ca:a7:c4:91:7b:01:7a:c9:ff:f0:30:54:
                    03:e9:07:6a:b7:55:2b:ac:03:82:26:be:03:42:78:
                    aa:32:3b:2c:78:58:36:fc:3e:f2:43:09:f6:f6:4f:
                    a2:cb:6b:80:59:a6:c8:42:aa:75:4d:5d:02:9d:f7:
                    d8:57:18:fa:42:b9:92:9f:43:4d:0b:4d:40:28:e8:
                    dd:4e:a5:96:31:22:03:00:fc:e8:1c:41:61:46:c0:
                    79:9d:62:77:88:f1:72:a7:b5:2b:98:3d:b1:5e:67:
                    72:42:a9:b5:ca:d1:bf:5e:86:9e:d2:e9:1f:8a:e7:
                    3d:0d:2d:80:fb:61:8c:28:c8:99:3f:e9:e0:87:7d:
                    2a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:3F:98:CD:35:AB:55:21:9B:BD:70:46:88:46:87:52:88:8C:B0:B6
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zj-YzTWrVSGbvXBGiEaHUoiMsLY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         45:56:66:63:7c:16:0c:68:ae:b4:24:ce:d1:54:69:ac:88:5a:
         3d:09:6a:1e:d2:fb:bf:5a:43:df:54:29:3f:50:44:4b:09:8b:
         1a:6c:c6:2f:9f:2f:75:f0:02:5c:55:38:2a:b8:a8:e0:f6:73:
         ae:b1:c0:0a:e8:19:66:ae:b9:e4:de:2d:2a:bf:35:aa:3c:5b:
         89:e4:79:a9:7a:fa:b6:a9:ca:8b:24:d5:53:3d:cd:ce:85:a3:
         2b:d4:17:28:43:97:4f:6b:7d:69:52:5f:44:69:d2:e6:41:03:
         b9:83:79:e7:e3:13:80:6b:b4:4e:ad:3e:c6:df:21:36:ff:24:
         42:47:0c:72:d7:cb:f5:f7:60:60:83:8d:66:e1:98:4e:f4:41:
         b4:62:6c:41:2d:b5:38:ad:2c:b0:8a:88:54:b1:c2:49:6e:8e:
         d1:0b:a4:4f:b0:c9:cd:8e:5a:c0:a5:a6:a3:61:c4:74:02:6d:
         a9:15:d4:05:20:1d:23:69:49:7d:25:a4:68:6c:36:00:62:59:
         ad:67:9a:89:7b:dc:6f:ee:e0:68:fb:41:e1:53:6a:77:fb:04:
         40:94:c8:c3:0f:cc:c9:00:f6:94:b2:0b:51:ec:6f:8c:a2:ba:
         02:92:1f:80:a5:ea:82:99:db:bf:9a:eb:b5:c5:de:30:b7:1b:
         59:36:2f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----