Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/D1FiF8FRsBfeyDsvghCan47-GJc.roa
File:                     D1FiF8FRsBfeyDsvghCan47-GJc.roa (raw, json)
Hash identifier:          dxCJM47KQzUi3Zb3glnkyfirsbHxHbJCjR2YmJvxXNI=
Subject key identifier:   0F:51:62:17:C1:51:B0:17:DE:C8:3B:2F:82:10:9A:9F:8E:FE:18:97
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1035
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/D1FiF8FRsBfeyDsvghCan47-GJc.roa
Signing time:             Sun 07 Feb 2021 12:43:34 +0000
ROA not before:           Sun 07 Feb 2021 12:43:34 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24163
IP address blocks:        61.58.108.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4149 (0x1035)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb  7 12:43:34 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=0F516217C151B017DEC83B2F82109A9F8EFE1897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:26:52:40:61:26:b8:d3:49:c6:7f:c5:61:f0:
                    73:60:a2:d9:25:93:3e:8b:4f:31:86:bc:70:c0:0e:
                    73:3e:0a:97:a4:c7:22:98:63:f8:fa:9e:f9:fe:5a:
                    c0:68:9a:f0:82:8e:77:7b:61:ab:46:ff:e8:5f:13:
                    e5:82:78:0d:e6:36:00:8d:c0:95:46:15:f9:08:a0:
                    c0:dd:c0:c6:86:3e:eb:f8:e1:ea:1c:25:3a:06:ff:
                    47:1a:18:29:c4:d1:75:64:bf:d0:1d:a0:c5:54:5d:
                    9e:7b:fb:18:42:e1:65:5c:ed:2d:86:37:bd:89:59:
                    20:b5:62:37:4b:21:0a:05:f0:8c:36:1d:0d:99:ef:
                    1d:ed:b1:ff:93:40:b5:15:78:a1:4b:73:37:59:f5:
                    e7:37:26:10:6a:d6:c5:cf:e0:65:56:8e:72:f3:33:
                    5c:90:9c:40:24:d0:44:61:5b:4b:56:0b:39:96:7b:
                    d2:5d:43:e0:d2:34:c5:ee:80:cf:44:8d:c2:38:a0:
                    a3:65:31:2b:c5:34:0a:dc:c9:ef:ca:b9:d5:79:c8:
                    bf:b3:cd:89:f3:7c:ee:c2:28:af:b7:3f:d3:dd:6d:
                    c0:32:11:e5:6c:de:7c:81:d4:5d:49:d1:50:3c:1c:
                    c4:e7:d3:09:4c:5f:4a:02:42:e5:1c:04:cf:fd:5b:
                    a7:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:51:62:17:C1:51:B0:17:DE:C8:3B:2F:82:10:9A:9F:8E:FE:18:97
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/D1FiF8FRsBfeyDsvghCan47-GJc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.58.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:52:a8:45:5e:fb:64:fb:91:f4:d6:1f:0a:8d:e8:4c:4c:88:
         9d:d6:30:4c:37:d3:9f:a1:8f:49:be:36:4a:62:68:cb:39:19:
         74:0c:da:b3:02:39:21:c7:2e:a3:82:47:a7:89:88:8e:1f:ab:
         8a:a3:6c:97:d5:f1:bd:0a:1d:4d:3b:03:c7:cb:e4:d6:2b:06:
         bd:5b:0e:57:9f:ca:84:15:b0:36:12:5a:a2:af:af:05:57:68:
         32:9c:e1:48:f9:11:e7:61:58:5d:5d:c7:4f:8e:af:f3:e0:a1:
         97:59:30:ff:a6:e1:3f:e9:fa:cb:87:e0:68:22:d6:44:9a:6e:
         29:96:41:94:73:60:d6:7f:b9:d9:2f:5b:6e:13:7e:8a:8b:3b:
         54:74:b4:66:55:1a:60:6e:8d:7e:74:bf:f4:ed:d0:57:23:aa:
         2a:68:07:43:d7:df:d8:fe:c7:2f:a1:d7:18:2f:b0:1e:71:3f:
         74:df:e6:5c:f6:f0:1e:a3:ad:21:10:e9:36:f8:35:d4:1f:d2:
         3f:6a:9f:e9:d7:e7:90:fc:ec:04:5e:c6:ff:45:5f:ab:f2:b6:
         3e:95:0d:dd:69:a2:40:dd:a6:82:74:05:a4:54:07:b1:3d:7b:
         bb:e1:63:9a:d1:4f:d0:9e:4e:9f:2d:ff:56:65:90:02:47:18:
         d6:b1:fd:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----