Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/bWre3LfM3ZsdrevZnBfZdUtsYqY.roa
File:                     bWre3LfM3ZsdrevZnBfZdUtsYqY.roa (raw, json)
Hash identifier:          T73sTgs9bM/xvhwG9S0pwk/Fkdx7Bb5gk7xTvd93L4M=
Subject key identifier:   6D:6A:DE:DC:B7:CC:DD:9B:1D:AD:EB:D9:9C:17:D9:75:4B:6C:62:A6
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0B33
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/bWre3LfM3ZsdrevZnBfZdUtsYqY.roa
Signing time:             Tue 29 Sep 2020 10:08:08 +0000
ROA not before:           Tue 29 Sep 2020 10:08:08 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        61.64.24.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2867 (0xb33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:08:08 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=6D6ADEDCB7CCDD9B1DADEBD99C17D9754B6C62A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a1:49:a7:f0:0b:3b:3e:53:9a:ac:8b:99:d9:
                    5b:da:e9:9f:3f:19:85:d7:e8:d6:12:5b:39:e3:51:
                    b3:ce:6b:52:2f:30:53:54:99:35:b8:a5:5f:7d:60:
                    5d:b2:4c:8d:cb:a4:40:5e:79:fc:df:2b:54:bf:22:
                    0c:88:a6:fc:9f:10:d8:b8:1a:d9:8e:6d:90:33:56:
                    7d:f3:29:24:49:de:b4:7a:20:26:09:03:eb:73:c3:
                    05:ea:e1:11:03:0d:91:08:4a:b9:0d:ad:6e:d8:09:
                    aa:7d:07:fc:70:19:ac:f9:1b:1f:23:77:be:9d:d3:
                    08:ee:24:83:f1:6a:7f:62:e0:17:93:2e:d2:db:e1:
                    be:ba:23:49:34:a4:79:f6:32:60:a2:fc:d1:41:d6:
                    d2:94:93:19:35:60:e9:b3:98:63:e3:88:75:78:82:
                    f3:48:f6:13:25:3c:d7:85:b9:3e:b2:67:bf:a7:21:
                    ef:d9:3e:88:6e:4a:25:9c:9b:e1:2b:5f:da:bf:5d:
                    e6:82:4a:d2:d9:ae:79:25:7d:30:1e:7d:a4:c3:4b:
                    dd:d7:80:c1:0a:5e:30:59:75:3f:9f:58:26:e5:87:
                    1a:be:e5:76:56:05:a6:45:56:0f:43:96:75:65:5c:
                    bf:36:5a:93:b5:bf:5b:c0:9f:79:c4:08:f6:69:c1:
                    6b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:6A:DE:DC:B7:CC:DD:9B:1D:AD:EB:D9:9C:17:D9:75:4B:6C:62:A6
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/bWre3LfM3ZsdrevZnBfZdUtsYqY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.64.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:b1:b5:02:17:4d:a9:93:08:a7:3b:11:e8:95:74:44:32:b7:
         33:15:65:6d:dc:49:60:4a:20:92:05:a8:b9:4c:b5:81:75:84:
         89:e9:65:c4:78:1d:d1:5c:49:2a:19:81:66:36:21:14:2f:de:
         ba:0b:fe:52:aa:31:42:f6:fa:f0:3e:44:b5:6a:63:9c:87:96:
         c4:af:f8:a5:f4:47:a8:6b:ca:02:2e:99:d2:60:14:ea:0f:fe:
         54:8c:8a:2a:2d:05:fa:82:27:7d:f7:2e:a9:fa:f9:78:98:be:
         bb:60:ce:2f:d4:8c:af:a7:cf:42:70:75:1d:ba:20:f8:77:23:
         74:88:26:48:df:56:7f:5e:4d:c3:07:fd:c6:70:00:f1:20:dc:
         4f:c7:18:94:2e:14:db:17:b2:d4:95:ee:ce:dc:cd:2b:a6:5d:
         70:ce:1a:70:a5:ca:20:43:f2:e8:d4:7d:21:16:21:56:dd:1e:
         ab:73:a3:49:37:fc:f2:d1:1f:10:f5:7e:5c:e6:11:df:c7:dd:
         9d:10:19:62:61:2a:0e:30:24:b7:18:98:2a:fd:1c:44:ff:10:
         7c:76:41:ba:0a:8c:28:ea:6e:ea:4c:fa:10:ac:d8:dc:fb:56:
         63:df:5d:06:5c:db:4a:15:9b:b7:94:01:e7:63:7b:f4:30:b5:
         c2:ab:75:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----