Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/G_eI4NNhZuE16z7B4_LkEkc5mF4.roa
File:                     G_eI4NNhZuE16z7B4_LkEkc5mF4.roa (raw, json)
Hash identifier:          0FuzqjY0esOLvwBrq+ioOSARAlcxfxl8TT9ZIXALt0M=
Subject key identifier:   1B:F7:88:E0:D3:61:66:E1:35:EB:3E:C1:E3:F2:E4:12:47:39:98:5E
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       114F
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/G_eI4NNhZuE16z7B4_LkEkc5mF4.roa
Signing time:             Sun 07 Feb 2021 13:15:03 +0000
ROA not before:           Sun 07 Feb 2021 13:15:03 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24165
IP address blocks:        61.64.8.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4431 (0x114f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb  7 13:15:03 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=1BF788E0D36166E135EB3EC1E3F2E4124739985E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a8:70:cf:f0:63:74:8e:52:4f:b1:51:9a:5d:
                    f9:4a:12:d0:ed:68:06:90:88:ec:28:49:3c:0b:90:
                    2c:64:47:96:da:3a:69:63:21:25:97:78:ca:87:85:
                    f1:9c:29:1f:82:00:2e:90:d1:97:d1:58:18:74:d4:
                    2a:e0:99:89:21:29:a7:63:47:b5:71:9e:8c:a5:5d:
                    fe:a6:ab:de:80:27:a6:25:91:c7:5b:4d:70:1f:39:
                    79:2a:3b:75:ea:cf:eb:63:f3:b9:36:06:43:07:e1:
                    08:97:3d:2e:22:2c:31:47:81:3c:ee:22:f6:e2:e5:
                    2b:8c:6c:16:96:1e:5b:63:96:53:a2:3f:56:57:a6:
                    76:4f:75:50:bd:da:8d:cf:f9:13:cf:6e:34:a5:3a:
                    db:d9:8e:7d:cf:23:5f:d1:9b:f5:8a:de:07:5d:31:
                    c4:de:ca:b5:33:2e:eb:0c:e2:95:93:bf:40:c4:f0:
                    4c:a0:13:8e:04:92:fd:30:49:ee:3f:d0:11:eb:a1:
                    6d:e1:56:2b:cf:27:9c:75:2a:fd:6b:1d:f4:6c:a4:
                    88:32:1c:63:1a:40:92:57:30:90:39:99:33:23:ad:
                    d6:cc:5c:3a:48:f0:c1:58:27:cc:20:20:f3:ae:b8:
                    ff:58:db:21:54:3c:cc:31:23:a4:58:d6:0d:14:fd:
                    90:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:F7:88:E0:D3:61:66:E1:35:EB:3E:C1:E3:F2:E4:12:47:39:98:5E
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/G_eI4NNhZuE16z7B4_LkEkc5mF4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.64.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:00:fb:6e:47:57:bb:0e:1a:45:b8:34:f1:2e:13:33:1c:d2:
         20:a7:43:8a:54:4b:3a:33:f8:d1:89:99:16:8e:11:a2:3c:c4:
         6c:4a:59:59:39:a0:62:fc:5f:04:59:4f:90:bd:48:5a:9d:26:
         6f:41:08:ba:d3:18:cd:6e:1f:49:68:c9:93:76:d6:9c:5f:33:
         f2:cd:40:98:c7:ff:71:68:4a:47:44:f6:23:d5:8a:86:b8:ef:
         28:46:c0:04:87:7d:7b:01:9d:2b:90:d4:a9:2c:27:55:b6:25:
         15:29:e3:1c:4f:47:de:38:06:53:e0:df:be:2b:c7:97:87:cf:
         da:2a:89:d6:60:c7:3a:3f:3b:fd:84:78:d4:64:59:df:2c:00:
         5d:98:9a:1c:6d:f4:25:f2:e7:a0:44:5f:3e:ad:43:bf:1c:4e:
         e0:44:a8:78:b1:06:84:9b:6c:3b:77:a4:44:51:03:ff:9c:8c:
         7b:c9:5a:a4:17:55:8e:73:cd:90:20:b4:7d:20:19:c3:ee:c1:
         5e:08:4c:50:94:f2:c1:00:4b:84:ac:d7:fe:ab:c2:f4:9f:9f:
         a3:6a:e7:b3:8d:a0:f4:02:b4:c1:37:c8:eb:13:30:79:20:3c:
         bc:32:b0:ba:d4:74:ef:1a:b6:9c:ff:f7:c7:bf:63:b0:ac:f2:
         77:7b:5a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----