Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Zf-Yl54VimoPLEa0LLR1YqiJliI.roa
File:                     Zf-Yl54VimoPLEa0LLR1YqiJliI.roa (raw, json)
Hash identifier:          8N6cc6Sc6rEB8c6ChPE/lNcGFami3axljit19KHUtMQ=
Subject key identifier:   65:FF:98:97:9E:15:8A:6A:0F:2C:46:B4:2C:B4:75:62:A8:89:96:22
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0AFD
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Zf-Yl54VimoPLEa0LLR1YqiJliI.roa
Signing time:             Tue 29 Sep 2020 10:07:53 +0000
ROA not before:           Tue 29 Sep 2020 10:07:53 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        61.60.216.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2813 (0xafd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:07:53 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=65FF98979E158A6A0F2C46B42CB47562A8899622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b3:65:a2:4c:e9:ec:f3:f3:62:02:d5:03:5e:
                    b5:0a:6b:b7:03:6b:89:2b:af:44:ee:ea:6f:47:73:
                    5d:b9:96:b0:0a:29:66:43:b6:9c:f2:24:20:68:6a:
                    ef:17:fe:e7:b0:fc:28:29:c2:0d:3c:80:36:89:b5:
                    29:fe:bd:1e:94:4a:03:fa:02:9d:95:37:eb:8f:1e:
                    94:ae:8c:a6:87:e9:66:c5:ee:19:41:e2:61:76:03:
                    d1:49:a7:48:73:6e:47:f9:9a:91:84:36:5a:71:ee:
                    85:8d:d3:ef:68:52:a8:c2:dc:b8:92:5b:26:a6:1d:
                    07:f9:42:16:5c:85:70:df:f7:8a:da:14:af:3f:23:
                    2c:da:17:67:5f:fa:09:66:00:20:88:84:ad:90:b6:
                    4a:f2:19:6a:64:c0:b4:15:63:98:39:5d:e6:17:89:
                    6c:56:d9:84:d5:82:2a:34:86:bb:78:5a:64:88:03:
                    dd:a4:3b:9e:78:7f:b9:ae:4e:41:ec:ec:c2:9a:17:
                    2a:c9:de:98:0f:35:d2:4f:20:5e:ab:1e:f2:56:27:
                    8e:8e:b9:09:f5:14:8c:86:d2:8a:4f:2f:de:b7:0f:
                    2a:c4:0d:43:24:97:78:8f:8d:7c:dc:8d:95:23:6c:
                    3c:b3:ee:be:ef:60:c3:c6:3b:ca:5d:0a:99:a4:06:
                    4b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:FF:98:97:9E:15:8A:6A:0F:2C:46:B4:2C:B4:75:62:A8:89:96:22
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Zf-Yl54VimoPLEa0LLR1YqiJliI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.60.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         58:66:9c:43:7c:9b:db:91:a0:ae:d1:48:eb:b7:35:e7:96:ae:
         d5:dd:ba:e3:94:39:d5:1c:15:b1:f3:0e:42:ce:90:25:a8:55:
         62:3a:4e:3e:3c:d6:5e:a2:8d:f5:6d:65:f1:fd:27:15:25:63:
         ba:03:d1:23:76:b6:70:25:b9:70:1e:f1:05:9d:0a:54:25:96:
         76:06:d8:71:7b:22:f0:a1:40:7f:76:96:92:f2:6b:bd:a2:08:
         68:c9:49:b6:ab:90:af:9c:e5:44:0c:c3:71:3b:d8:15:2a:72:
         0b:c7:b5:f9:18:89:52:42:c4:4d:af:66:23:6d:7b:bb:e4:aa:
         02:08:2d:92:d0:44:60:44:1b:5c:ff:8e:0a:f7:5d:bb:e5:3a:
         cf:3d:4d:73:36:c4:9c:06:12:67:1f:e7:05:bd:28:a9:02:b3:
         23:78:4d:e7:55:27:de:f6:f3:8f:3c:61:af:c1:2f:de:23:af:
         9a:29:42:b9:4e:d6:09:76:61:ec:3f:76:21:4a:fe:17:48:43:
         75:9a:d9:48:cd:4f:64:db:af:cb:68:b6:49:b6:df:cc:81:6c:
         0c:53:cb:21:21:bc:33:bb:b6:d3:7c:d3:f8:fc:60:5f:cd:04:
         c3:bd:21:30:26:e4:97:64:32:4a:81:2e:cc:65:fb:01:24:b5:
         93:53:b6:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----