Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/1ffj8vmasx7T9wIf-0Jl6xHAMSY.roa
File:                     1ffj8vmasx7T9wIf-0Jl6xHAMSY.roa (raw, json)
Hash identifier:          M1+mM3OQETgrlsZVER6ufKH4005pJzXeKU21hTeEdc8=
Subject key identifier:   D5:F7:E3:F2:F9:9A:B3:1E:D3:F7:02:1F:FB:42:65:EB:11:C0:31:26
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0D6D
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/1ffj8vmasx7T9wIf-0Jl6xHAMSY.roa
Signing time:             Thu 14 Jan 2021 07:50:31 +0000
ROA not before:           Thu 14 Jan 2021 07:50:31 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24163
IP address blocks:        61.61.232.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3437 (0xd6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Jan 14 07:50:31 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=D5F7E3F2F99AB31ED3F7021FFB4265EB11C03126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e3:d0:fc:1d:30:40:31:f9:9f:3b:e6:c3:63:
                    4c:9d:16:d9:08:72:80:c9:24:cf:1f:2e:5b:71:9c:
                    51:e3:fd:f0:78:53:66:48:a6:51:d3:ec:85:62:f0:
                    8c:5d:ba:ec:23:c0:c7:2a:52:e8:49:c1:b0:a4:7f:
                    98:99:ad:b1:ac:62:78:46:55:0b:6e:0f:3a:08:15:
                    de:1f:b8:b0:b3:61:b5:3b:03:5f:f5:d8:00:c9:fa:
                    53:b3:06:b1:21:e2:a1:84:27:23:12:87:64:71:70:
                    df:5b:96:8b:8a:83:48:72:38:dd:b5:fd:34:ba:5e:
                    45:37:02:30:03:e8:3e:f8:88:81:71:d7:ac:f9:ad:
                    66:26:96:20:23:ca:d6:e6:71:a7:2f:85:b0:f4:65:
                    66:26:5d:4b:42:1b:6b:ff:26:6f:2a:d5:bd:33:b7:
                    41:53:2e:77:aa:a9:96:b2:9a:a6:18:06:35:f1:b0:
                    3f:fd:84:6d:03:64:82:1e:b3:d7:74:cb:e2:7b:44:
                    19:6d:6b:13:72:e9:49:aa:c6:59:1e:9b:9e:46:2c:
                    9f:95:2a:ad:26:b4:e7:fd:b0:ad:c9:eb:33:2a:3d:
                    dc:6b:64:3a:75:17:1d:a8:ea:59:77:6a:c4:6b:1c:
                    c3:dd:8e:29:6d:c6:47:99:1a:ea:5f:01:c7:21:f7:
                    15:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:F7:E3:F2:F9:9A:B3:1E:D3:F7:02:1F:FB:42:65:EB:11:C0:31:26
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/1ffj8vmasx7T9wIf-0Jl6xHAMSY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.61.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:c6:d6:ca:c2:59:5e:d1:d0:19:0f:94:b8:1f:3a:59:7a:e5:
         20:e2:ca:76:be:4f:2d:09:a7:a4:63:5f:e8:4c:a9:f2:d5:6d:
         02:a5:a2:94:9a:b6:e0:90:b5:10:db:e6:93:bc:8e:3a:01:00:
         ef:4d:eb:0b:e5:de:5a:44:69:d8:bc:5b:12:ba:4a:13:b5:43:
         3d:eb:6b:59:e7:c0:66:3f:8c:51:04:29:fb:b8:67:06:d4:17:
         55:35:a0:23:b3:da:06:b6:82:19:27:b4:ca:a2:53:87:c4:99:
         3c:77:03:48:69:51:71:ec:f7:1c:89:94:18:16:df:3f:e5:64:
         e1:c7:11:2f:f7:55:42:f0:96:1e:ec:da:46:e6:bb:a1:98:bd:
         16:e0:76:f6:5a:d1:8f:ab:f8:92:2c:fd:f8:74:77:34:3b:07:
         cc:a7:f3:c7:84:c9:7c:a5:f6:d1:40:51:42:b6:ad:66:f9:65:
         64:d2:35:fe:91:64:d3:0a:35:8a:87:ea:e7:60:e4:19:16:46:
         35:d3:0a:43:7b:78:95:b3:1d:6e:50:76:2b:0c:67:47:7d:a1:
         b0:44:93:f4:7a:d1:f4:9f:07:91:f5:53:e5:ce:1d:b9:63:54:
         7c:5d:d2:2a:23:d9:e6:26:ed:a5:8b:44:ec:4d:40:17:d4:55:
         15:6b:70:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----