Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/XNTy7d7udu05xSCk6qI8YL3krSY.roa
File:                     XNTy7d7udu05xSCk6qI8YL3krSY.roa (raw, json)
Hash identifier:          VtbwS0IhPNwdSK7fHLzQoSqjS7RgdrZFvNk05uCnS8E=
Subject key identifier:   5C:D4:F2:ED:DE:EE:76:ED:39:C5:20:A4:EA:A2:3C:60:BD:E4:AD:26
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       114D
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/XNTy7d7udu05xSCk6qI8YL3krSY.roa
Signing time:             Sun 07 Feb 2021 13:15:00 +0000
ROA not before:           Sun 07 Feb 2021 13:15:00 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24165
IP address blocks:        61.64.12.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4429 (0x114d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb  7 13:15:00 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=5CD4F2EDDEEE76ED39C520A4EAA23C60BDE4AD26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:26:b9:ba:37:f7:aa:fa:aa:22:24:7b:ac:8d:
                    45:9a:0c:95:d2:93:11:b3:f7:62:9a:bb:05:17:7a:
                    57:df:e0:a1:7a:71:09:8d:eb:1f:46:b1:4f:32:0a:
                    53:05:b7:a0:e8:9a:2b:0a:73:f0:5e:6e:d0:9e:c3:
                    06:28:f4:53:a3:ef:00:6c:b1:c6:c6:60:8b:ae:9d:
                    0f:35:78:2c:07:80:47:13:c8:65:54:fc:f4:66:cc:
                    b6:ba:ad:ee:e3:ce:fa:93:85:6f:43:8c:af:ee:4f:
                    0f:d0:27:ff:6b:40:c7:23:c3:ad:9e:0b:bd:e3:14:
                    1e:92:ce:e4:49:18:9c:3e:76:dc:c8:fa:4e:53:9d:
                    ca:26:a0:d6:7f:08:fa:65:c3:af:c4:47:14:c8:3f:
                    e2:86:09:67:fe:6e:10:33:fc:09:39:94:a5:aa:8b:
                    06:68:e6:20:b5:4f:e7:5d:99:6b:60:bb:18:86:f2:
                    1c:d2:6b:1b:ec:ec:cc:c3:c8:1a:3e:d1:06:5d:42:
                    40:34:60:79:84:1d:a4:c4:61:d8:79:db:02:80:0f:
                    8e:a7:ec:df:0a:d4:55:6d:bc:a2:06:83:a6:56:37:
                    c0:c0:4a:7c:3d:31:27:33:b9:3b:65:aa:08:d7:b8:
                    70:bc:7a:3b:7e:0f:4d:38:c2:25:61:0d:31:7a:69:
                    3f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:D4:F2:ED:DE:EE:76:ED:39:C5:20:A4:EA:A2:3C:60:BD:E4:AD:26
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/XNTy7d7udu05xSCk6qI8YL3krSY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.64.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:26:5c:6e:75:c2:24:aa:8c:13:91:c6:d3:cd:62:51:b4:f2:
         6a:37:43:64:00:1e:d9:6d:58:54:4e:11:b5:f4:cd:cb:37:13:
         3d:82:a1:cf:e1:42:9c:76:6e:f8:9f:90:33:ed:b7:a3:31:57:
         14:80:57:67:f5:58:21:23:a9:a3:b0:67:4f:7b:a9:75:76:1b:
         59:7f:87:65:fb:d1:19:c7:38:2c:1d:ae:70:64:a4:4e:41:08:
         5e:6b:b8:48:2c:10:e7:d6:6a:b8:18:9e:84:d2:4d:49:d1:73:
         5c:ad:e9:a1:f8:47:a2:df:18:6f:9c:75:e8:16:58:56:95:03:
         f6:40:0a:66:c7:73:d8:ac:fe:ba:5b:55:61:83:94:eb:27:53:
         d9:71:c4:a0:88:11:a1:c3:4b:5f:1c:d4:56:d1:bf:3d:5c:ca:
         30:bd:da:7c:18:d2:b1:45:30:8d:a0:76:55:f0:b3:1f:78:8a:
         47:bf:05:56:9d:d9:b5:dd:3c:d8:56:51:41:20:ab:42:5b:34:
         74:a1:9b:25:e4:13:7e:da:62:6d:d3:1a:05:4e:fd:83:9d:70:
         72:f2:f0:69:31:1a:09:2d:89:39:ad:14:5a:77:e8:38:19:3f:
         ee:ed:6f:09:27:ad:fc:95:46:6c:cc:b9:78:f3:18:76:15:2d:
         6e:b0:cc:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----