Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/9TJQOOdwyetGtDUH4--fuLY1WB4.roa
File:                     9TJQOOdwyetGtDUH4--fuLY1WB4.roa (raw, json)
Hash identifier:          O0BF9GmqK8c6/HlNUrgqJukjxm5L3DSrS5/9kBXbmI0=
Subject key identifier:   F5:32:50:38:E7:70:C9:EB:46:B4:35:07:E3:EF:9F:B8:B6:35:58:1E
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0D5A
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/9TJQOOdwyetGtDUH4--fuLY1WB4.roa
Signing time:             Thu 14 Jan 2021 07:42:10 +0000
ROA not before:           Thu 14 Jan 2021 07:42:10 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24163
IP address blocks:        61.56.168.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3418 (0xd5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Jan 14 07:42:10 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=F5325038E770C9EB46B43507E3EF9FB8B635581E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4a:7e:7a:47:a9:31:58:98:94:86:4e:1d:89:
                    32:e9:d4:df:2b:53:91:22:f4:09:46:b5:ea:b3:6d:
                    44:f1:c5:33:35:bd:18:8b:79:2a:9b:96:4c:58:e5:
                    6e:b6:3f:5e:f9:b2:92:38:33:ab:4c:29:30:a3:2d:
                    a5:1b:f5:47:51:be:bb:eb:19:93:a6:20:9f:74:de:
                    8b:74:f0:58:a7:0c:8d:38:73:cc:18:06:a5:26:cc:
                    ba:1e:b3:b2:a6:ba:66:11:40:08:1e:88:7c:38:33:
                    59:d1:4d:f3:1b:95:39:6d:d1:4d:97:ed:1c:71:fe:
                    cc:fc:09:a4:5e:de:b2:05:48:88:0e:75:4c:79:66:
                    45:46:3b:9c:3b:85:2f:c9:1a:8f:d1:d7:89:11:7c:
                    9a:5a:5b:64:44:7d:9b:fd:14:ad:ee:4a:b8:19:a6:
                    9b:0d:d6:03:d0:f3:eb:bb:d6:04:c7:d7:c2:2a:6d:
                    06:2f:3a:e3:73:bb:b2:03:7c:ec:96:8d:9f:83:e4:
                    5a:9e:14:dd:83:db:a5:a6:e6:20:9a:63:8a:84:76:
                    7d:02:e3:51:4b:70:8d:78:30:6a:2e:30:e7:be:31:
                    1b:1e:3a:c4:ef:0e:d0:0e:6f:21:21:ac:4c:08:7d:
                    ee:89:96:0a:fb:2e:cc:19:39:56:ae:9f:bb:ec:2c:
                    19:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:32:50:38:E7:70:C9:EB:46:B4:35:07:E3:EF:9F:B8:B6:35:58:1E
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/9TJQOOdwyetGtDUH4--fuLY1WB4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.56.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         19:25:c3:70:49:6a:08:31:91:ec:ef:71:37:f1:0e:be:3a:ca:
         be:df:34:dd:89:1c:44:00:7d:21:fc:a9:87:7c:d1:d1:16:0f:
         d2:9f:3c:af:08:6e:36:4c:a8:4c:e5:b0:3c:6c:ef:db:5e:7f:
         6f:75:eb:13:49:0a:1a:3b:a3:99:24:ac:88:c8:b4:2c:74:15:
         64:ee:86:e9:59:60:20:1f:a7:d6:82:95:a9:96:62:74:06:81:
         8f:0f:f8:51:45:89:95:95:45:97:7a:d8:18:8b:c6:7e:25:4a:
         f5:06:fc:ab:33:b5:96:77:15:a8:74:85:30:cc:cf:68:7f:df:
         0d:0a:92:4f:c9:da:d9:f2:83:53:e7:e4:d1:21:8e:c6:6a:91:
         ef:fc:cb:02:34:eb:32:45:64:55:14:c4:74:8e:ab:ff:3f:1e:
         e5:ad:dd:c3:4b:fd:6c:c9:b9:57:7b:af:fb:75:0e:c4:e1:e6:
         05:d1:63:bf:e8:c6:2a:78:99:00:1a:95:6c:15:aa:07:bd:2b:
         0a:71:e9:04:f1:f2:d7:87:25:fe:e3:81:1a:2d:1c:fd:3d:ff:
         7a:89:0d:11:6c:6b:50:7a:3d:20:a0:87:c2:bc:4d:68:fd:48:
         be:14:d9:35:9a:43:ac:2e:3a:b8:b4:7d:9b:6b:d4:94:3b:07:
         5b:f4:d5:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----