Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/D9KgDptuCL07eRKc5S2vilHYyH4.roa
File:                     D9KgDptuCL07eRKc5S2vilHYyH4.roa (raw, json)
Hash identifier:          DSDyQqvL76aMKInwDlE+uiqT+QYYcnmEUFAVI1FDYW4=
Subject key identifier:   0F:D2:A0:0E:9B:6E:08:BD:3B:79:12:9C:E5:2D:AF:8A:51:D8:C8:7E
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0AF8
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/D9KgDptuCL07eRKc5S2vilHYyH4.roa
Signing time:             Tue 29 Sep 2020 10:07:51 +0000
ROA not before:           Tue 29 Sep 2020 10:07:51 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        61.60.214.192/26 maxlen: 26

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2808 (0xaf8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:07:51 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=0FD2A00E9B6E08BD3B79129CE52DAF8A51D8C87E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:35:f2:f2:bf:5c:20:c0:cf:46:eb:53:72:85:
                    99:18:2f:36:5f:3c:83:ac:9e:34:d5:e8:3f:11:81:
                    30:ed:39:f2:05:7e:f1:73:93:b5:e9:46:44:4c:53:
                    0e:a2:38:62:af:9b:c4:e0:80:2c:97:b3:5e:64:19:
                    d6:ee:04:d4:10:31:b9:77:82:d0:b8:ad:b1:5f:e5:
                    f7:5f:f5:15:73:66:db:17:91:10:00:c4:1b:e8:ad:
                    84:55:b4:80:35:01:70:e1:e0:a8:88:71:1c:44:6c:
                    9f:27:3e:6e:c3:2f:1c:74:ee:05:b5:6d:32:c4:bb:
                    cd:76:d6:f0:34:ef:7d:7f:a2:56:58:3e:d7:d1:9f:
                    ff:45:74:e4:2b:de:3d:87:2c:53:18:cd:28:c7:03:
                    8b:8f:c0:57:39:a4:a9:3a:f8:3f:04:1e:8b:92:56:
                    e7:9f:bb:db:4c:33:ae:53:f7:b9:9d:76:5a:5e:e7:
                    16:bf:90:8c:49:cb:77:8b:0f:b9:b7:e5:76:b2:08:
                    97:55:c9:d3:bd:76:22:fa:ba:1c:26:2c:d3:9e:3f:
                    0d:b2:3b:9c:4c:b1:2b:05:4b:66:ff:62:81:4d:ef:
                    b0:7e:7a:fd:34:34:0a:06:de:7f:e4:65:42:3b:f1:
                    87:f6:41:be:23:a6:4d:87:dd:1b:7a:bc:92:d5:b1:
                    92:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:D2:A0:0E:9B:6E:08:BD:3B:79:12:9C:E5:2D:AF:8A:51:D8:C8:7E
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/D9KgDptuCL07eRKc5S2vilHYyH4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.60.214.192/26

    Signature Algorithm: sha256WithRSAEncryption
         83:17:4f:21:0e:ac:3c:38:86:6a:c4:d9:df:b5:9b:89:2d:96:
         9e:0c:cf:77:71:44:f0:5b:e7:83:01:42:d1:51:ac:78:8c:ba:
         6f:4f:58:d0:ac:46:d1:0e:f3:ea:4e:fe:b4:b3:f6:b3:47:ef:
         8b:f2:85:ab:6c:e4:d0:38:ac:cb:7a:bd:65:47:8c:f0:99:75:
         b2:88:60:c3:04:f5:6c:e4:89:95:24:16:c9:1f:21:3c:de:09:
         48:5a:fa:78:99:f2:1c:ef:7b:4b:3b:ea:a1:20:a7:80:03:e3:
         90:34:bc:ac:15:30:28:b3:32:33:67:05:6a:ff:c2:32:e7:da:
         78:89:34:54:e3:87:33:e5:1d:38:25:85:81:13:b5:e9:34:3c:
         2f:fb:90:34:90:f1:05:c6:56:e8:f9:05:b7:2e:b8:54:41:f4:
         05:e6:82:97:ec:e3:fb:d2:89:bb:36:09:ca:c3:2c:c5:fd:98:
         bd:c3:3d:01:df:13:aa:94:0f:3b:cc:f2:e7:c1:1d:3c:4c:db:
         47:59:d4:52:e3:c7:df:54:2f:eb:2c:5e:0d:f8:67:d1:69:39:
         5b:21:a8:6d:ac:e8:5c:de:89:8b:23:05:26:ef:7f:e2:53:cf:
         fd:ad:f7:74:7d:01:c8:3a:1c:b8:ac:a8:dc:bd:f3:c7:97:23:
         1f:8a:d0:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----