Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/5IRcflVX3ezoN9UyYJseuVeUUBA.roa
File:                     5IRcflVX3ezoN9UyYJseuVeUUBA.roa (raw, json)
Hash identifier:          IUmjW/xHHXza+gsgQvTnBLkPX04R1aIH6p9Hvr78f7M=
Subject key identifier:   E4:84:5C:7E:55:57:DD:EC:E8:37:D5:32:60:9B:1E:B9:57:94:50:10
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0BB5
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/5IRcflVX3ezoN9UyYJseuVeUUBA.roa
Signing time:             Tue 29 Sep 2020 10:08:44 +0000
ROA not before:           Tue 29 Sep 2020 10:08:44 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     4662
IP address blocks:        61.58.112.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2997 (0xbb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:08:44 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=E4845C7E5557DDECE837D532609B1EB957945010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4a:e5:7a:ba:6a:04:71:50:f0:90:8c:17:34:
                    d3:1b:69:72:5a:60:2c:68:30:f2:a9:f1:29:9e:06:
                    ce:92:5a:ac:c9:f5:f1:82:d6:f3:12:c4:d9:f7:a2:
                    f5:1e:46:d0:bb:14:9d:00:48:68:33:c5:0d:4c:55:
                    75:a2:f3:f2:e5:d6:dd:04:a0:30:45:82:ad:27:64:
                    46:a6:5d:41:b2:94:d5:1c:c5:52:8c:e7:b1:0a:27:
                    64:53:e8:ee:cb:94:02:ba:da:f4:36:75:f8:13:f7:
                    8e:1d:59:b2:58:07:ed:3a:ab:8a:03:39:0a:c7:81:
                    d9:d5:3d:5f:3a:4f:fc:4b:12:ec:ab:03:0f:f6:46:
                    10:5f:be:67:20:5d:fe:f3:48:b3:dd:8a:4c:e3:9a:
                    c1:19:89:c4:e8:06:54:7e:34:b0:fd:4c:86:1a:14:
                    c7:ee:fe:81:73:41:6d:83:53:fe:20:99:b7:20:2b:
                    0c:9e:3f:49:0e:82:f8:38:6d:b7:de:ec:3d:b7:2c:
                    93:ee:8b:84:de:2a:69:56:8d:4f:fb:c0:82:dc:ef:
                    fc:c2:b3:b7:74:67:db:b7:6f:fd:d3:b7:68:97:7c:
                    0d:66:6b:49:8f:37:4e:8c:9b:eb:a3:83:03:22:11:
                    e1:bc:43:fe:37:0f:5e:e8:92:43:d1:fe:56:31:51:
                    84:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:84:5C:7E:55:57:DD:EC:E8:37:D5:32:60:9B:1E:B9:57:94:50:10
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/5IRcflVX3ezoN9UyYJseuVeUUBA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.58.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3b:e0:4c:c0:39:68:9c:9d:91:31:b9:a7:ce:a6:ee:df:94:ee:
         f8:f0:05:7b:0b:95:2a:bc:f8:d1:bd:20:a4:ce:69:0d:7b:27:
         b5:56:11:48:a5:9e:ab:c2:f1:18:b2:02:be:28:05:10:80:12:
         30:f7:ed:86:a5:ce:7d:bc:04:bf:70:88:36:04:5e:bf:41:5e:
         31:91:12:86:b4:ac:b4:02:3c:57:e4:80:29:d0:51:27:b6:24:
         0d:10:75:34:3d:c5:14:c3:6d:95:ab:16:a5:80:fd:f9:c2:33:
         e0:bd:fd:8e:b3:7a:fb:a0:98:95:f2:24:c4:11:55:0a:7f:5c:
         28:ee:6e:4b:56:1d:b7:c8:f4:82:df:f3:74:d2:a5:47:87:87:
         96:a2:2f:67:55:b0:29:f2:97:25:79:22:02:ab:ac:39:2a:ec:
         12:a9:9f:75:aa:74:3c:ad:51:d2:2b:43:60:d1:92:e1:49:fe:
         23:47:a1:dc:31:d2:98:0b:f8:2d:b9:7a:4d:ae:69:30:d5:04:
         b8:8b:c4:9b:29:78:0a:74:b2:95:cc:7a:1d:df:1e:8a:f1:53:
         29:32:21:af:77:d5:04:df:d9:6c:11:c5:7d:77:10:a8:a6:1b:
         84:5c:26:d4:0c:e8:3c:93:8c:f4:44:b6:9a:e0:7d:2a:c9:f7:
         53:30:40:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----