Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/OY_sEZbAPbUFo4JlxADKN8CwZdM.roa
File:                     OY_sEZbAPbUFo4JlxADKN8CwZdM.roa (raw, json)
Hash identifier:          WjYFEwGpKcGWmzF0AZPsk2CsrWTWSlokra2J596CKhg=
Subject key identifier:   39:8F:EC:11:96:C0:3D:B5:05:A3:82:65:C4:00:CA:37:C0:B0:65:D3
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0D73
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/OY_sEZbAPbUFo4JlxADKN8CwZdM.roa
Signing time:             Thu 14 Jan 2021 07:54:13 +0000
ROA not before:           Thu 14 Jan 2021 07:54:13 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24165
IP address blocks:        61.64.8.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3443 (0xd73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Jan 14 07:54:13 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=398FEC1196C03DB505A38265C400CA37C0B065D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2f:4b:22:62:55:cf:23:63:e9:a2:02:c8:58:
                    87:89:8b:21:c4:1a:3b:c7:35:a9:3b:e5:8c:42:68:
                    97:f2:3a:06:8c:6a:55:f2:a6:b5:8c:8c:2e:fd:db:
                    c3:60:86:26:77:d9:42:18:75:3e:1a:df:e2:44:cb:
                    7a:6c:1f:f0:11:3b:95:fc:a2:e2:71:d4:b5:62:94:
                    1d:a2:f1:50:b6:5e:23:e0:a8:01:db:7f:9e:45:76:
                    29:c5:99:4e:db:ad:58:73:bc:fc:43:73:df:7f:f1:
                    fd:59:01:e1:33:69:b5:a2:6b:b8:7d:73:4e:f7:62:
                    3e:1b:f5:bd:38:5d:d9:0c:02:a6:9c:5f:f0:f2:bd:
                    40:d4:3a:ae:9c:6d:40:94:bd:68:b9:96:db:d6:fc:
                    57:5c:9a:c8:42:ee:02:f1:55:e4:17:cd:29:ad:72:
                    29:47:f5:a7:a8:32:81:69:dd:cd:f5:08:68:23:a1:
                    38:da:77:3e:6c:56:35:13:a9:5f:eb:f1:e3:b7:bc:
                    a8:54:1f:01:3d:3a:39:5a:34:c6:f3:85:bc:bc:54:
                    5a:f1:a7:82:30:f1:29:87:b3:43:33:1e:7f:c0:46:
                    9d:d9:8c:85:68:da:52:92:6c:df:8a:9e:e1:95:d7:
                    40:b6:6a:8b:ee:fb:a9:6e:25:d3:7c:f1:a0:68:78:
                    ad:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:8F:EC:11:96:C0:3D:B5:05:A3:82:65:C4:00:CA:37:C0:B0:65:D3
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/OY_sEZbAPbUFo4JlxADKN8CwZdM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.64.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:da:87:1a:e4:0f:4b:db:96:7d:70:e4:52:61:42:94:e6:86:
         2f:aa:98:3f:77:79:61:32:92:d4:41:9f:3d:d0:93:2c:1f:80:
         80:f8:0f:71:2c:90:77:2d:d5:23:5a:be:b7:57:bc:87:f3:00:
         4c:74:de:8e:04:9d:cd:e0:39:c3:cd:0f:45:ef:a2:a3:61:3f:
         8e:36:44:27:3f:fd:f9:f7:f6:8a:3b:d3:c3:ee:db:d9:d9:d2:
         1f:98:a9:91:46:e9:45:70:82:c9:4c:60:a0:a8:5b:5f:32:7b:
         0f:be:87:e4:5f:a2:be:13:95:e8:fb:4d:ae:84:73:49:19:29:
         c0:16:cb:70:52:e6:83:4b:62:fc:38:33:80:bc:1c:4a:ca:58:
         ab:19:ad:e5:39:23:61:7a:25:86:c4:17:54:47:b6:62:c5:b0:
         88:ca:8c:3a:43:a5:cf:80:d0:a5:99:37:2b:43:81:fc:5c:50:
         0a:ed:df:d1:af:75:c8:74:1e:5c:79:a8:2f:0a:fc:8f:b9:76:
         26:9c:c9:29:0c:c7:c6:05:32:bf:5d:a5:38:54:8d:21:2f:5a:
         e4:9a:68:a9:d1:1a:24:ca:a8:c8:2d:a1:f2:e6:c2:99:75:68:
         57:6e:4f:7e:60:60:3d:01:60:d6:d9:b6:2b:a6:d2:08:2b:93:
         d1:65:43:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----