Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/5B0l4ALUojmIFbL8cH4xEeccY9g.roa
File:                     5B0l4ALUojmIFbL8cH4xEeccY9g.roa (raw, json)
Hash identifier:          7S8t/LkEBVCv5Y5CJaAeY81QMuB+JkhXwBf/BMIg2gg=
Subject key identifier:   E4:1D:25:E0:02:D4:A2:39:88:15:B2:FC:70:7E:31:11:E7:1C:63:D8
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0B5C
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/5B0l4ALUojmIFbL8cH4xEeccY9g.roa
Signing time:             Tue 29 Sep 2020 10:08:20 +0000
ROA not before:           Tue 29 Sep 2020 10:08:20 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24163
IP address blocks:        61.56.176.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2908 (0xb5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:08:20 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=E41D25E002D4A2398815B2FC707E3111E71C63D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:13:76:db:69:01:9b:d2:37:d3:a3:09:eb:5e:
                    5b:a3:2f:09:69:2e:96:3c:3f:bd:a5:ed:37:7f:52:
                    a7:cb:5b:e6:fe:fc:f4:60:30:2a:a4:87:de:0f:63:
                    ba:0f:77:f7:1b:6b:1c:c2:43:cb:c0:88:b4:bc:37:
                    b2:fe:5f:ac:de:bb:02:0f:bf:02:c9:09:2a:48:d9:
                    84:9c:c2:40:fd:65:59:04:4a:07:c8:eb:fc:34:ab:
                    23:10:4a:78:42:1b:71:af:9c:54:1c:8f:b0:6d:eb:
                    e6:72:00:f6:6f:f4:ac:2d:2d:18:60:14:e3:01:6b:
                    b3:ee:3a:ed:58:ec:91:77:d2:c4:94:a1:39:cb:9c:
                    62:48:0d:d6:0a:55:ac:52:2f:20:29:85:b0:22:5d:
                    75:bb:6c:b5:b8:39:f3:94:20:33:e8:02:63:3d:77:
                    6e:33:4d:4f:1b:77:d8:a5:3e:84:61:88:10:27:3c:
                    1b:8c:db:60:cd:56:af:0d:4a:13:5f:c6:64:40:3f:
                    34:99:90:16:95:bd:90:14:d0:24:da:9d:2e:a6:d1:
                    77:1e:c0:32:5e:1b:a9:d1:7a:75:2e:8f:c6:e2:6a:
                    f3:a4:d4:2c:71:db:a6:07:e7:e1:fc:34:9e:d3:d3:
                    5b:de:a1:e2:37:c3:27:06:27:12:97:f3:63:38:64:
                    74:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:1D:25:E0:02:D4:A2:39:88:15:B2:FC:70:7E:31:11:E7:1C:63:D8
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/5B0l4ALUojmIFbL8cH4xEeccY9g.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.56.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         93:94:49:95:db:51:02:c9:60:24:09:b9:8b:ee:80:bc:90:aa:
         28:8c:76:6a:8f:b7:29:68:bc:e0:f6:61:05:d2:5d:17:1b:10:
         e1:f0:96:dd:ae:55:49:49:7a:3e:99:62:45:17:90:d1:d0:31:
         6a:46:f2:2a:d5:3d:b9:cf:63:35:19:1f:0c:85:78:4d:2b:94:
         4d:d4:31:51:d0:55:07:eb:c7:8e:a6:06:67:33:e6:9a:63:b9:
         6d:ce:1e:4c:34:79:8f:d5:d9:ab:60:39:d8:65:bc:af:b9:15:
         58:8f:d4:25:39:a7:ff:9a:fb:23:d9:76:07:40:97:1b:c6:d7:
         39:c0:fd:7d:03:1d:66:75:bd:41:a9:9c:5d:21:b3:29:3a:a2:
         c8:be:93:6a:aa:82:4a:cb:d9:8c:f3:6d:4a:25:83:fc:7d:90:
         ab:83:98:68:44:4e:63:10:0f:b5:71:e4:94:43:d1:5b:8c:4d:
         a5:7a:1b:7e:cf:10:f9:77:3d:78:a9:38:32:df:00:39:88:b2:
         32:7d:1d:dd:71:09:38:24:d7:c4:87:d6:f5:1f:8c:e6:04:cd:
         6f:c9:1f:34:cf:a3:a3:e7:f9:e6:f1:9f:11:8c:89:5e:8c:1f:
         56:1b:8c:5e:78:05:3b:1c:d0:25:ff:9d:e3:da:fa:d1:67:d3:
         1c:5b:75:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----