Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/cBu4LWAC44kCSDnrm5AZ2A_UYvg.roa
File:                     cBu4LWAC44kCSDnrm5AZ2A_UYvg.roa (raw, json)
Hash identifier:          1iihHVII10lgljwUJQi9VJi8kgmzE+gDP4pkcivymYM=
Subject key identifier:   70:1B:B8:2D:60:02:E3:89:02:48:39:EB:9B:90:19:D8:0F:D4:62:F8
Certificate issuer:       /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Certificate serial:       07A5
Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/cBu4LWAC44kCSDnrm5AZ2A_UYvg.roa
Signing time:             Tue 29 Sep 2020 09:59:48 +0000
ROA not before:           Tue 29 Sep 2020 09:59:48 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9919
IP address blocks:        61.61.33.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1957 (0x7a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
        Validity
            Not Before: Sep 29 09:59:48 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=701BB82D6002E389024839EB9B9019D80FD462F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b3:28:a4:d6:4a:7f:5e:e4:1b:bd:05:47:40:
                    9d:01:47:08:89:7e:27:32:8f:eb:50:8f:b6:a8:6c:
                    ca:2b:f5:cd:d5:2f:92:f6:29:0b:53:8e:91:56:9e:
                    bd:d7:a8:b8:a8:43:11:d0:f2:4e:ba:7a:95:bd:f6:
                    e4:d3:81:fe:44:f1:93:b2:2f:c3:98:7e:ab:8a:03:
                    87:09:2f:4f:1b:64:2d:97:03:ef:60:81:e1:fc:5d:
                    6f:e9:e3:23:68:a7:36:90:ba:62:18:8a:78:c3:ba:
                    f4:e0:d9:fb:e2:73:fa:02:44:95:24:c6:25:75:d8:
                    dd:77:95:66:3f:06:32:54:00:08:0d:d7:91:a0:88:
                    b8:e5:b9:bc:10:90:a0:2b:5d:77:e8:63:cd:36:00:
                    cf:2e:20:c3:d5:d6:81:dd:42:4c:5c:97:ae:f3:35:
                    ef:b6:ec:01:3a:35:0f:10:cf:f3:fe:07:99:a8:bb:
                    84:d1:53:7b:4a:5e:c5:3e:20:89:6d:d2:32:09:2e:
                    25:89:f5:c8:b7:c9:4e:b0:8d:f4:31:a8:b1:17:3f:
                    6f:b7:a9:c3:84:52:ac:92:66:9d:5c:66:80:7b:58:
                    2f:c5:fe:6d:4c:c9:6c:a5:69:8a:89:21:3e:27:ac:
                    ae:1c:35:43:3f:00:22:5d:2f:a8:11:af:cf:c7:e5:
                    be:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:1B:B8:2D:60:02:E3:89:02:48:39:EB:9B:90:19:D8:0F:D4:62:F8
            X509v3 Authority Key Identifier:
                keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/cBu4LWAC44kCSDnrm5AZ2A_UYvg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.61.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:fe:e8:63:69:1e:13:1f:d7:b7:cb:c6:ac:91:c0:68:10:e5:
         30:d2:59:24:66:84:c4:54:05:38:8b:7c:78:cb:af:b8:23:2c:
         1b:13:60:5d:f7:74:96:c4:c6:1b:7b:64:9b:9c:43:57:00:f4:
         17:66:18:ef:6a:d7:db:76:d4:3f:83:27:8e:cd:4e:38:bb:3c:
         96:f6:c2:44:75:e9:8c:54:a1:0c:f6:a6:92:eb:04:67:e3:34:
         ef:13:32:f6:cd:83:f0:18:a6:92:80:96:42:b9:a1:2a:d6:48:
         f7:14:c8:cd:06:22:42:ce:c6:df:03:8c:4c:b4:b6:0b:e8:78:
         76:49:41:2d:12:3f:10:2e:6f:b4:48:3b:fa:64:c9:dd:8e:76:
         69:35:72:18:8a:47:94:01:8e:2e:ad:1c:1f:01:8c:5b:3c:02:
         96:c1:a2:a4:f5:4d:f8:aa:c7:fe:cb:f3:c4:d9:da:be:47:e7:
         95:75:27:a7:5e:80:06:a2:32:09:8c:22:a4:9a:3c:0c:0d:15:
         bd:49:4a:9a:e4:86:f0:1a:52:b5:7c:9d:4b:c8:63:99:67:9a:
         4a:90:66:10:20:21:73:59:28:ca:b8:10:6a:d6:9c:a6:ed:25:
         18:2a:c8:c4:32:a2:d1:88:0f:9d:1f:e8:ca:c0:bb:a0:d3:59:
         94:7e:e8:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----