Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/9D7zuOZtpOvY_514gZwB6FZ--OQ.roa
File:                     9D7zuOZtpOvY_514gZwB6FZ--OQ.roa (raw, json)
Hash identifier:          Gq3Peme/iTyVenMLaXSv0wqTEUj7mT4LRoiyV2b+K2U=
Subject key identifier:   F4:3E:F3:B8:E6:6D:A4:EB:D8:FF:9D:78:81:9C:01:E8:56:7E:F8:E4
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0AFC
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/9D7zuOZtpOvY_514gZwB6FZ--OQ.roa
Signing time:             Tue 29 Sep 2020 10:07:52 +0000
ROA not before:           Tue 29 Sep 2020 10:07:52 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        61.60.215.240/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2812 (0xafc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:07:52 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=F43EF3B8E66DA4EBD8FF9D78819C01E8567EF8E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:3e:87:87:3c:3b:fc:23:a4:9b:9f:4e:0a:87:
                    41:bb:ae:22:5c:77:01:ab:23:ba:55:28:a1:b7:0e:
                    d6:95:56:ff:b5:cc:ee:a8:b4:c3:5c:a2:27:92:0c:
                    32:97:ef:ad:b6:ac:ae:7e:6b:e1:e2:05:e9:eb:84:
                    ec:38:35:5d:aa:cf:2f:34:6e:5e:ed:3e:7d:cb:81:
                    e0:02:ff:8c:3f:89:af:51:2d:8f:46:b7:d3:32:ec:
                    3f:2b:db:8d:68:90:26:98:d5:8d:9f:3b:fc:6d:eb:
                    ab:83:4d:38:a3:7b:b8:e2:db:3e:de:f0:94:4e:10:
                    bf:06:5b:b5:1d:5f:5c:57:fd:0a:cf:f8:9c:76:a8:
                    79:a1:2e:3c:61:3b:7b:a6:72:36:cb:49:6d:a7:c7:
                    bd:c5:b8:6b:db:aa:ce:3d:a5:1a:72:92:f9:0b:e7:
                    4c:17:72:1b:6a:04:e2:b1:be:62:61:76:1f:57:a4:
                    4e:d7:5a:0a:f6:30:82:d6:36:8d:ce:eb:80:7d:0e:
                    6e:f8:dc:43:3c:a4:53:0e:5f:93:50:6c:14:d7:8e:
                    3f:91:99:d7:38:9c:fa:e8:b2:88:8e:0f:bd:5c:90:
                    a0:07:bc:04:39:38:91:c1:d9:51:5c:b8:ad:b5:f1:
                    26:e3:4b:fb:ac:98:10:e5:16:53:bc:4c:16:95:50:
                    a5:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:3E:F3:B8:E6:6D:A4:EB:D8:FF:9D:78:81:9C:01:E8:56:7E:F8:E4
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/9D7zuOZtpOvY_514gZwB6FZ--OQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.60.215.240/29

    Signature Algorithm: sha256WithRSAEncryption
         31:27:2f:5c:87:9c:1f:31:a1:c5:b0:7d:2b:99:05:25:1b:a2:
         42:6c:bf:59:2b:b1:1e:00:28:f5:9c:d7:f9:79:10:62:77:bf:
         0c:c0:89:58:1b:43:ac:2c:9e:08:dd:d2:e3:87:02:2a:20:c2:
         b5:0d:3e:02:c7:26:03:de:5a:bc:5a:44:64:1b:ab:c2:1b:8a:
         3b:82:75:fe:61:fc:e8:35:5a:bb:4f:29:63:e1:2b:00:f0:74:
         ba:c6:b5:e9:bb:4c:fd:ba:ba:f2:48:3c:32:06:e7:02:e9:16:
         67:9b:63:a8:10:d9:c7:4a:2b:a6:a1:44:4b:08:1f:39:2a:12:
         01:9f:b2:19:bd:19:bd:e3:9d:8b:eb:f3:68:dc:f2:eb:49:9a:
         e0:dc:27:a6:d6:04:0d:b1:db:8f:9c:de:d7:31:27:3d:b5:ce:
         d7:87:3b:d6:5c:6c:cd:4a:fa:ba:81:0d:8b:4c:57:b3:43:ae:
         2d:6b:8e:3a:d8:29:06:25:61:d7:d8:8d:2d:87:20:23:06:03:
         86:39:47:f4:18:30:78:d6:0e:ba:f6:5c:28:51:64:e2:79:89:
         7b:f2:38:6c:e0:92:90:ef:62:9c:37:d1:da:4f:8e:32:43:07:
         7e:1f:47:01:38:b2:01:0d:c9:66:58:a0:89:3c:b1:1d:ae:9d:
         8a:19:ff:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----