Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/DR0vKt2rKniwoLrKgEMB24WarJo.roa
File:                     DR0vKt2rKniwoLrKgEMB24WarJo.roa (raw, json)
Hash identifier:          CnBVLv2xzGQA0Leu942BbbzOm/y2PiIDtqAENDzE3zE=
Subject key identifier:   0D:1D:2F:2A:DD:AB:2A:78:B0:A0:BA:CA:80:43:01:DB:85:9A:AC:9A
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0AFB
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/DR0vKt2rKniwoLrKgEMB24WarJo.roa
Signing time:             Tue 29 Sep 2020 10:07:52 +0000
ROA not before:           Tue 29 Sep 2020 10:07:52 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        61.60.215.232/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2811 (0xafb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:07:52 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=0D1D2F2ADDAB2A78B0A0BACA804301DB859AAC9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:cd:7d:5b:69:34:2d:ee:91:45:1d:30:62:e4:
                    40:9b:33:d1:3d:3f:f3:a9:e1:7d:80:7d:14:15:25:
                    90:dd:a5:31:a6:02:39:d6:be:86:74:22:cc:09:fa:
                    a2:26:59:4c:c4:dd:11:61:17:32:1c:aa:1c:5e:c6:
                    39:0c:82:a4:4c:b5:ae:b3:a2:f1:78:42:7d:5a:d6:
                    e2:fc:1f:f1:a7:7d:e8:97:a4:83:a1:d2:96:71:12:
                    87:da:e1:dd:75:c7:f8:06:9e:4e:f6:9f:1f:65:40:
                    75:49:51:3a:4c:4c:8f:0a:d8:82:0e:09:2a:29:69:
                    e9:21:10:3a:c8:9c:e5:6b:61:bb:a6:2f:c3:27:17:
                    81:2b:8a:cb:63:ae:06:37:d0:3e:63:3f:88:6c:ec:
                    25:5e:0a:b5:88:0f:9f:60:a7:d7:e9:d3:9a:9a:9a:
                    82:6e:22:7f:60:5b:a6:97:11:d1:e3:32:99:31:91:
                    55:80:d0:05:ea:52:34:59:79:9b:e9:64:5f:08:19:
                    37:65:67:2f:d5:f8:f2:01:df:d9:c4:94:f9:a1:c3:
                    6c:e3:fb:da:5c:16:ba:b5:16:36:21:b0:b1:d1:b6:
                    4d:ee:9b:30:04:e0:95:42:b6:ac:4a:c5:66:b8:a1:
                    39:75:ff:6e:24:00:5a:01:bf:be:97:83:0d:06:85:
                    e0:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:1D:2F:2A:DD:AB:2A:78:B0:A0:BA:CA:80:43:01:DB:85:9A:AC:9A
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/DR0vKt2rKniwoLrKgEMB24WarJo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.60.215.232/29

    Signature Algorithm: sha256WithRSAEncryption
         44:21:26:5e:ea:9a:33:97:0a:82:54:a8:0b:da:94:ed:a4:5f:
         a1:e2:5a:db:76:97:6c:2c:e3:26:6c:00:70:19:af:3e:00:e4:
         b4:64:a3:ef:88:64:4e:33:91:61:bd:65:94:33:24:8a:af:06:
         63:45:5e:b6:d7:7f:b3:ad:d4:c4:c2:70:75:78:bb:8c:06:90:
         67:e7:33:21:89:f4:f2:41:ea:bb:a4:cd:61:51:cb:be:bf:1a:
         df:ec:08:0f:bd:20:54:27:fd:f6:6d:b6:64:a8:83:66:c4:fd:
         9b:b2:da:8c:6c:b8:cf:5b:43:74:83:28:7c:56:b2:25:89:55:
         e0:21:c1:f5:90:e5:96:d2:3e:24:74:0e:aa:5a:bf:a5:4f:d3:
         f9:0b:08:ae:32:29:d7:fc:6e:8f:51:24:18:cf:d3:c6:e2:4d:
         80:bc:ad:8a:23:fd:25:ac:7b:e4:10:b5:65:b8:96:72:f7:1c:
         f5:46:e3:4e:b8:03:58:4f:84:1d:46:d3:40:b6:37:c6:48:f7:
         f5:2f:19:b7:4d:95:7d:bf:01:0f:83:8c:e8:77:b7:79:fc:8f:
         54:3a:ef:5e:b2:a1:e6:bc:21:1d:6b:e0:7f:1c:38:18:d5:7e:
         1a:3c:5e:80:88:75:f5:20:6c:d2:de:1d:1f:ae:cc:58:d5:a3:
         4d:da:f7:75
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICCvswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMDA5Mjkx
MDA3NTJaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDBEMUQyRjJBRERBQjJB
NzhCMEEwQkFDQTgwNDMwMURCODU5QUFDOUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDTzX1baTQt7pFFHTBi5ECbM9E9P/Op4X2AfRQVJZDdpTGmAjnW
voZ0IswJ+qImWUzE3RFhFzIcqhxexjkMgqRMta6zovF4Qn1a1uL8H/GnfeiXpIOh
0pZxEofa4d11x/gGnk72nx9lQHVJUTpMTI8K2IIOCSopaekhEDrInOVrYbumL8Mn
F4EristjrgY30D5jP4hs7CVeCrWID59gp9fp05qamoJuIn9gW6aXEdHjMpkxkVWA
0AXqUjRZeZvpZF8IGTdlZy/V+PIB39nElPmhw2zj+9pcFrq1FjYhsLHRtk3umzAE
4JVCtqxKxWa4oTl1/24kAFoBv76Xgw0GheCHAgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQUDR0vKt2rKniwoLrKgEMB24WarJowHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0RSMHZLdDJyS25pd29Mcktn
RU1CMjRXYXJKby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQM9
PNfoMA0GCSqGSIb3DQEBCwUAA4IBAQBEISZe6pozlwqCVKgL2pTtpF+h4lrbdpds
LOMmbABwGa8+AOS0ZKPviGROM5FhvWWUMySKrwZjRV6213+zrdTEwnB1eLuMBpBn
5zMhifTyQeq7pM1hUcu+vxrf7AgPvSBUJ/32bbZkqINmxP2bstqMbLjPW0N0gyh8
VrIliVXgIcH1kOWW0j4kdA6qWr+lT9P5CwiuMinX/G6PUSQYz9PG4k2AvK2KI/0l
rHvkELVluJZy9xz1RuNOuANYT4QdRtNAtjfGSPf1Lxm3TZV9vwEPg4zod7d5/I9U
Ou9esqHmvCEda+B/HDgY1X4aPF6AiHX1IGzS3h0frsxY1aNN2vd1
-----END CERTIFICATE-----