Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/NtcE--bFPvcrxE-JAJIqotwyKuA.roa
File:                     NtcE--bFPvcrxE-JAJIqotwyKuA.roa (raw, json)
Hash identifier:          t/ivcRt/wtuWQVyhxHiqFPpLQRWPG1ELHwlnLuyykg8=
Subject key identifier:   36:D7:04:FB:E6:C5:3E:F7:2B:C4:4F:89:00:92:2A:A2:DC:32:2A:E0
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1149
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/NtcE--bFPvcrxE-JAJIqotwyKuA.roa
Signing time:             Sun 07 Feb 2021 13:14:53 +0000
ROA not before:           Sun 07 Feb 2021 13:14:53 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24163
IP address blocks:        61.61.220.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4425 (0x1149)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb  7 13:14:53 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=36D704FBE6C53EF72BC44F8900922AA2DC322AE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:55:ba:3a:9c:a7:c3:44:2e:23:28:d0:7b:8f:
                    ad:47:47:6d:80:1a:cb:7e:61:e6:5b:b8:ee:de:6f:
                    24:a6:ee:4d:1a:7c:67:7b:54:17:47:ed:67:7e:97:
                    e1:14:17:85:8c:f5:75:33:90:1e:f8:5b:f6:e6:29:
                    6f:9f:ad:aa:5b:03:83:3e:97:d6:ab:3c:46:a8:13:
                    72:f9:37:0e:24:0b:d4:e9:22:ae:ed:20:a0:f1:12:
                    0e:71:54:e9:cb:fb:51:e1:1b:fe:af:fd:04:56:2b:
                    9d:67:25:a8:34:14:6b:20:c0:86:00:84:2d:77:46:
                    b4:b5:4a:7a:6e:79:29:cf:5a:e8:a5:b3:4f:bb:b3:
                    14:81:52:44:6d:d0:84:8e:3a:66:0d:51:08:dc:9e:
                    dd:ac:10:87:8f:c3:85:b6:cc:f1:61:41:d8:60:99:
                    a7:2b:33:64:18:88:99:f3:a4:0b:56:6e:6f:42:99:
                    ac:bc:f8:db:98:df:2a:70:57:ff:16:d8:32:b2:2a:
                    b5:e3:8d:ab:06:17:a4:76:2e:9c:f1:f3:85:86:69:
                    6d:55:05:07:21:fc:14:77:01:08:f2:79:46:a0:cd:
                    51:0c:99:70:da:7c:50:6d:46:56:76:82:10:03:3b:
                    04:62:c6:2c:c9:f3:22:27:0c:d7:30:de:c2:58:fe:
                    df:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:D7:04:FB:E6:C5:3E:F7:2B:C4:4F:89:00:92:2A:A2:DC:32:2A:E0
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/NtcE--bFPvcrxE-JAJIqotwyKuA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.61.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:5c:3b:8d:bc:36:8f:06:7c:bf:b2:9a:ef:19:5a:2f:dc:f6:
         b9:fb:e6:5b:67:29:b3:f3:44:02:38:f6:4b:16:6a:b8:3a:7a:
         1b:f0:e0:f1:a4:b0:6d:a5:28:2b:31:8d:c4:00:65:67:f8:29:
         de:db:59:77:49:82:92:1d:d9:1e:90:05:5c:63:fc:d5:ca:06:
         3e:8b:e1:a0:1b:42:ed:34:ff:dd:b8:df:58:a2:8d:d9:8a:4d:
         f9:c3:bb:49:17:cb:5c:b0:e4:8b:af:f4:2b:ea:7b:6f:53:59:
         d8:c1:12:1b:2a:ff:a4:0c:35:27:84:3e:bb:09:98:1a:4a:25:
         b0:29:53:c7:d3:f8:73:8d:1d:12:46:90:36:55:2d:42:65:1d:
         e5:58:0d:09:3b:83:77:86:59:35:f8:11:30:0b:34:a5:ea:8b:
         de:93:8d:d8:41:07:ce:cb:5c:e6:af:c5:c0:8f:45:b0:26:5d:
         bc:64:7c:48:84:5d:74:b0:e1:b9:e2:f2:c0:23:46:91:bf:23:
         a0:03:61:30:00:17:69:65:49:dd:fc:b1:5e:ae:c5:29:9e:93:
         89:7c:bf:65:32:53:cd:2d:33:cd:9b:f1:b8:36:6e:e4:12:ec:
         d7:e1:b9:0b:a1:54:bf:3b:56:10:77:15:7f:26:63:c0:c8:87:
         ae:9e:5f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----