Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/9iAF1Hszn-Z1RPB4pSRp0xELLdw.roa
File:                     9iAF1Hszn-Z1RPB4pSRp0xELLdw.roa (raw, json)
Hash identifier:          0xMkViDrpl5nNKJ55VEdVLGDy3lBlDEK8r0vN62C+C8=
Subject key identifier:   F6:20:05:D4:7B:33:9F:E6:75:44:F0:78:A5:24:69:D3:11:0B:2D:DC
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0BCB
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/9iAF1Hszn-Z1RPB4pSRp0xELLdw.roa
Signing time:             Tue 29 Sep 2020 10:08:50 +0000
ROA not before:           Tue 29 Sep 2020 10:08:50 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     4662
IP address blocks:        61.64.0.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3019 (0xbcb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:08:50 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=F62005D47B339FE67544F078A52469D3110B2DDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:11:e2:ab:8b:d7:8a:e6:73:b8:e2:7c:5f:c2:
                    28:d3:7c:29:71:06:d3:8b:76:a1:0c:cb:5c:b1:1c:
                    c0:b2:68:a7:d5:f6:70:30:21:70:97:30:f2:22:b6:
                    ef:62:c6:ec:6c:a7:0e:9b:1e:8c:7b:8d:98:be:76:
                    37:59:f3:73:27:5f:66:8a:d4:13:fb:3d:f5:9a:42:
                    57:54:e6:78:1d:cf:f6:7d:7d:19:cf:1d:b8:f8:5d:
                    59:95:f8:d3:bd:61:b0:6f:a3:b8:36:6e:4f:a5:fd:
                    ac:4a:aa:b8:97:2e:ee:8a:f9:2a:bd:2f:fc:fd:cb:
                    de:c1:35:bb:8b:04:a1:06:bc:fe:57:f9:81:02:45:
                    66:47:86:45:a6:37:6e:9d:b4:54:16:c5:d2:11:50:
                    e3:86:1a:3a:08:be:32:f5:bf:c6:70:15:1f:9a:77:
                    60:01:80:d8:1e:99:af:a7:81:68:36:c4:32:2b:8f:
                    19:11:b1:24:16:02:47:0a:12:91:a0:01:d0:62:06:
                    5e:d1:15:ec:6a:cc:44:01:4a:ee:a3:af:3a:4d:8e:
                    22:eb:3c:46:e0:c7:48:2b:72:9a:57:c1:ed:76:40:
                    4a:cc:bd:ec:46:8a:11:cc:aa:90:56:65:89:4b:07:
                    24:0c:6b:3e:91:bf:af:ac:71:f9:01:65:7d:95:a1:
                    16:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:20:05:D4:7B:33:9F:E6:75:44:F0:78:A5:24:69:D3:11:0B:2D:DC
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/9iAF1Hszn-Z1RPB4pSRp0xELLdw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.64.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4e:7b:a3:fe:8b:f1:82:19:1f:a3:31:c8:89:18:d3:4e:d3:3c:
         3a:6b:0b:0b:69:ba:f9:88:e2:96:bc:f5:c4:39:3e:ad:fa:fa:
         c8:96:f2:ed:cc:2a:0b:c6:79:cb:e9:d0:c7:a4:dd:5a:19:6a:
         c7:d5:ab:07:59:53:01:e2:ad:a6:3b:1c:95:4b:4b:55:a4:4c:
         30:bb:b8:db:e4:84:b9:b6:27:a6:1a:53:94:fb:54:5e:13:88:
         25:f8:30:bb:a0:eb:69:88:0b:6c:ce:f0:58:40:bc:c6:b9:f7:
         c9:8f:07:df:aa:03:c4:e4:09:63:03:cd:9b:5c:27:d6:8c:d6:
         82:92:da:b2:bb:b0:3e:95:1f:68:43:ad:7f:17:88:59:8b:15:
         cb:6f:79:35:61:ab:b2:22:6a:43:8c:a6:a6:c4:24:e3:9f:3d:
         c8:44:b0:60:2d:38:c8:39:2b:dd:f0:12:fa:4c:7c:93:eb:5d:
         0f:f2:59:25:19:ab:8d:c6:51:76:bc:68:e0:55:c7:f8:4e:16:
         90:26:e8:f1:11:17:38:c5:42:46:16:cb:09:82:99:a5:48:cf:
         62:a1:ed:29:84:03:b5:a3:26:86:3a:36:c7:bc:3a:73:a6:af:
         dc:fd:7a:91:d8:c5:7c:48:d1:88:0a:21:a5:fc:86:5c:27:10:
         53:5f:d0:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----