Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6fXWDn7yqvE9VL8eWQlfz0qr0yQ.roa
File:                     6fXWDn7yqvE9VL8eWQlfz0qr0yQ.roa (raw, json)
Hash identifier:          ky3uCfh1yY13lNbZunQiEnEx6ocA9Rw6q6UIp887Wuo=
Subject key identifier:   E9:F5:D6:0E:7E:F2:AA:F1:3D:54:BF:1E:59:09:5F:CF:4A:AB:D3:24
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0B61
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6fXWDn7yqvE9VL8eWQlfz0qr0yQ.roa
Signing time:             Tue 29 Sep 2020 10:08:21 +0000
ROA not before:           Tue 29 Sep 2020 10:08:21 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     4662
IP address blocks:        61.60.208.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2913 (0xb61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:08:21 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=E9F5D60E7EF2AAF13D54BF1E59095FCF4AABD324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:07:b2:06:10:67:8d:ae:40:3e:0c:9c:11:cf:
                    73:73:29:a2:f9:cf:07:22:de:45:8f:00:6a:ee:e3:
                    a0:5f:d7:13:9e:3d:2c:68:12:d9:97:1b:3a:a6:b3:
                    73:49:30:6d:03:37:02:f2:bc:99:e6:2b:0f:0f:61:
                    07:54:de:e7:dd:de:09:61:9b:e2:2f:2f:42:d9:7c:
                    5b:88:73:03:9c:d0:23:3b:aa:29:67:5a:07:91:94:
                    36:d9:35:e6:4e:7d:e3:61:e0:13:45:d4:df:88:5c:
                    5d:e4:6a:f4:32:ad:66:1a:9d:ea:12:04:b0:98:22:
                    57:a8:4d:93:97:33:9b:c3:52:a5:e6:e0:06:f0:fd:
                    09:7d:b1:5b:dc:08:34:77:9c:be:cf:e1:d3:fc:40:
                    85:5d:d9:93:be:60:7e:86:5b:c9:c2:b5:da:f1:50:
                    4e:48:06:c6:f1:66:8a:d7:3b:d6:01:b4:94:a3:53:
                    61:3a:fd:8a:59:f9:88:d5:f9:1d:b3:21:83:89:34:
                    7e:f6:71:16:2f:5c:33:c2:35:dd:21:39:2e:13:3e:
                    cc:c2:aa:51:1e:51:77:a6:9b:15:d5:12:c7:d7:63:
                    9b:16:ce:59:12:49:44:6f:28:17:7e:c7:68:0e:94:
                    5c:d0:37:0a:ca:f0:d4:0a:0f:70:95:dc:b1:67:cd:
                    8a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:F5:D6:0E:7E:F2:AA:F1:3D:54:BF:1E:59:09:5F:CF:4A:AB:D3:24
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6fXWDn7yqvE9VL8eWQlfz0qr0yQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.60.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6d:d3:a6:06:99:18:dd:82:98:e3:21:dd:a5:a0:ea:75:9d:2a:
         59:52:8f:a9:b7:65:d8:a2:51:2f:98:59:b0:30:79:6e:8c:79:
         f9:29:68:fd:0f:2f:e6:08:dc:13:a6:18:5d:e6:17:4a:19:e1:
         38:ec:6c:40:5b:05:07:e7:8a:ca:61:b9:d4:0d:e3:50:7e:2a:
         be:fb:1e:3e:d1:c0:7f:6c:6e:5c:e4:cf:4b:ff:4b:e4:f5:2b:
         27:50:ca:1f:94:f5:5b:2b:26:5c:df:ac:20:64:ce:84:2b:e3:
         f9:6a:bc:43:30:7d:02:c6:b7:db:00:81:cc:a3:8b:25:5c:05:
         1c:08:24:57:61:31:27:bf:80:29:80:e3:22:b7:93:bd:02:3a:
         4f:3d:11:d0:21:a4:0a:42:3d:ca:16:bb:d7:67:90:5e:84:27:
         f6:fa:c3:9c:2c:9b:49:6c:34:49:89:df:e0:a6:e3:55:4f:c3:
         6d:53:7f:4b:5c:a2:d2:25:94:ca:b0:66:ad:30:ef:2c:31:72:
         c1:af:99:c1:9d:fa:bf:fa:a8:df:da:1f:68:6b:c9:2e:94:22:
         90:a9:6a:54:06:aa:d5:02:17:72:cd:94:7b:38:6c:27:e2:99:
         68:2c:2f:8a:64:18:9e:98:7c:f5:fb:7a:bd:77:d7:7c:9f:bb:
         bd:1b:4b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----