Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7IsaRCLMabBiPKvxuZGjpTnH1gs.roa
File:                     7IsaRCLMabBiPKvxuZGjpTnH1gs.roa (raw, json)
Hash identifier:          ik1bdpEVCq1whzY68ubkDwNPp1LzDQdM/WAaWPvVYeg=
Subject key identifier:   EC:8B:1A:44:22:CC:69:B0:62:3C:AB:F1:B9:91:A3:A5:39:C7:D6:0B
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       142B
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7IsaRCLMabBiPKvxuZGjpTnH1gs.roa
Signing time:             Tue 03 May 2022 09:10:42 +0000
ROA not before:           Tue 03 May 2022 09:10:42 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24164
IP address blocks:        61.61.208.0/20 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5163 (0x142b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: May  3 09:10:42 2022 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=EC8B1A4422CC69B0623CABF1B991A3A539C7D60B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:5b:c7:a6:69:d5:55:1e:36:7a:75:50:6b:02:
                    bb:58:3f:e1:d9:7a:cf:a8:6d:cf:2d:20:df:c6:d7:
                    5c:3c:f9:ec:11:d5:94:50:0f:fb:5e:34:65:8c:fe:
                    77:7e:25:43:f7:ef:03:e0:4b:9f:a5:8e:0f:f6:21:
                    0f:f5:85:fb:ac:84:e5:7c:05:1c:73:07:7b:8f:6d:
                    86:e7:cf:85:c0:fc:e0:e4:2e:41:b0:ce:40:26:5e:
                    21:f6:d7:cb:e7:f6:dd:b4:b1:af:86:20:1f:05:d2:
                    fb:f6:e2:f0:61:25:1b:19:9c:82:48:d4:5f:0c:66:
                    6a:51:90:ef:5d:dd:40:d0:01:a1:16:41:71:d9:dd:
                    22:c6:f8:4f:8e:c0:b4:d0:a1:08:54:6b:81:4a:70:
                    62:c3:eb:c0:b8:5d:d0:ff:69:0c:89:7e:5a:9d:7b:
                    e5:cb:27:ae:35:54:b7:54:2c:04:9b:d5:8e:8d:6e:
                    47:11:4e:f7:b7:df:43:fe:45:82:a4:e8:25:9d:63:
                    f3:08:9e:24:5f:51:4a:9e:c7:cf:8f:ab:a8:7f:7b:
                    8f:b0:cb:bb:f0:76:d9:d5:6b:3a:71:d6:7d:e1:ad:
                    68:1d:e2:1b:b8:8a:e6:93:50:39:3d:39:17:24:22:
                    0c:b9:62:7b:53:6b:6d:89:8f:2f:25:ac:2e:85:0f:
                    5d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:8B:1A:44:22:CC:69:B0:62:3C:AB:F1:B9:91:A3:A5:39:C7:D6:0B
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7IsaRCLMabBiPKvxuZGjpTnH1gs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.61.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         90:d9:05:e0:32:c3:ea:ce:b1:93:37:75:89:07:4c:71:29:6c:
         11:81:9d:b2:57:56:30:e2:35:72:f2:a9:d6:ec:93:68:83:1e:
         61:c2:40:7c:81:46:d2:5c:4a:e9:2d:d9:46:f1:48:b0:1e:19:
         22:b1:3d:da:70:07:4b:2a:60:7a:81:d7:80:38:1b:fb:44:7a:
         ec:7e:3a:18:ee:e1:88:d9:a1:c9:30:a1:4c:c8:31:64:74:bc:
         87:46:2e:33:9b:ab:03:11:80:ef:82:ff:c7:0b:f2:9a:10:d3:
         43:1c:72:23:2d:2b:a2:95:0b:a7:da:95:27:44:d0:72:2d:a1:
         23:f1:90:9e:8e:be:cd:5e:a2:c1:12:69:a9:d4:70:3e:91:50:
         a5:2a:89:31:26:7f:48:02:e0:c2:52:a9:a6:b8:e3:7e:9b:8b:
         72:14:5a:91:24:29:1e:d1:9d:08:94:3a:27:10:27:c2:50:24:
         31:d1:49:48:af:b6:55:91:bf:12:eb:02:37:bb:fc:1c:46:83:
         63:9b:4d:44:c9:c2:a7:4f:77:de:20:cd:d8:31:08:f0:0b:38:
         96:f7:07:12:30:23:6a:d7:d0:1c:42:2a:c0:dd:a5:c3:5c:28:
         b4:12:d4:4e:6b:9b:74:e9:c0:2e:74:d8:30:f4:42:b6:cb:de:
         1c:48:af:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----