Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/bu4zz7aoC4vyahBqQbJgDrevSyQ.roa
File:                     bu4zz7aoC4vyahBqQbJgDrevSyQ.roa (raw, json)
Hash identifier:          /Gpng5YL9dHh6mFtX1r2FEU4JUbQ825ZtEx5RrrbT6w=
Subject key identifier:   6E:EE:33:CF:B6:A8:0B:8B:F2:6A:10:6A:41:B2:60:0E:B7:AF:4B:24
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1362
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/bu4zz7aoC4vyahBqQbJgDrevSyQ.roa
Signing time:             Wed 29 Sep 2021 02:55:42 +0000
ROA not before:           Wed 29 Sep 2021 02:55:42 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24163
IP address blocks:        61.56.172.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4962 (0x1362)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:55:42 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=6EEE33CFB6A80B8BF26A106A41B2600EB7AF4B24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:06:34:03:0e:b7:d5:be:d5:49:c1:5f:33:31:
                    ef:f5:4d:c1:4f:44:b4:ba:7f:08:5d:49:a1:97:f4:
                    e3:5d:10:98:a9:6f:8b:36:f1:e7:6a:63:75:24:0b:
                    88:c6:37:9f:41:e5:80:76:10:8d:09:98:4f:02:ee:
                    e5:71:1e:dd:51:da:1a:3a:93:b7:3a:65:42:23:30:
                    92:2e:af:b4:06:ae:23:7a:1c:ac:c0:e3:1b:2c:fd:
                    80:b5:51:21:76:a0:67:f4:3a:55:b4:ee:38:82:95:
                    59:90:64:27:ea:24:74:0b:30:90:ae:eb:cd:59:c0:
                    04:8d:ec:91:1b:ad:5c:76:22:4a:08:6c:25:b2:d8:
                    c1:e6:f5:56:79:b5:5d:19:3a:ee:a2:63:ff:ff:ca:
                    90:ab:df:6f:e9:c7:a4:ec:65:b0:06:b9:0e:92:f2:
                    f9:7e:03:45:cb:b0:c0:ea:34:5e:eb:8d:10:0a:7c:
                    b8:dc:22:fc:ad:6f:da:88:c9:26:cc:dc:af:e7:24:
                    b0:1a:4b:df:99:9a:56:f0:dd:8d:17:da:7d:de:31:
                    90:48:94:44:cb:c0:62:55:1e:d3:f8:9f:0c:df:04:
                    8b:4c:81:49:db:cc:0b:ad:f5:a1:94:5b:4b:06:11:
                    2a:18:13:1a:a8:23:cd:0b:63:5d:d1:81:66:66:c6:
                    6b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:EE:33:CF:B6:A8:0B:8B:F2:6A:10:6A:41:B2:60:0E:B7:AF:4B:24
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/bu4zz7aoC4vyahBqQbJgDrevSyQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.56.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:ff:c5:20:f4:01:4f:ef:64:b4:6a:af:6f:b7:d4:cc:89:17:
         a8:b4:53:19:0e:19:78:39:f3:0e:57:b0:32:b4:1a:af:24:cc:
         f2:46:c4:f3:a3:5a:88:5a:59:6d:d7:e1:aa:b3:c2:09:b0:f3:
         01:4a:a5:6a:d1:75:de:d0:77:54:c7:cd:eb:de:44:51:c2:1e:
         5e:7b:e6:9c:d9:2c:05:26:84:fe:c0:75:fc:66:b3:75:e6:7c:
         34:02:aa:7a:f1:28:cc:af:13:bc:dd:fb:15:90:e7:e3:6b:ca:
         ae:fd:99:85:78:7d:39:fd:4f:bb:3e:0b:aa:9d:12:37:77:15:
         cd:f6:b9:0e:c6:bd:b6:e6:4e:61:75:da:96:f1:21:8b:d3:ad:
         2b:f0:39:c7:86:e9:a7:36:9d:9b:ac:99:08:9e:28:09:36:6d:
         c0:1a:fb:0e:ea:69:bf:5d:f4:da:fe:62:b9:49:42:1e:b2:b3:
         b9:38:96:42:3d:71:5d:6b:40:b5:88:7a:c9:c4:70:03:89:04:
         bd:f8:5c:52:fa:cc:a6:31:64:09:ac:26:da:c8:17:51:bf:78:
         57:0e:8e:a5:38:33:7b:49:fa:0f:03:c9:56:39:02:fc:29:93:
         46:4c:22:9d:fc:1e:ae:92:a0:4a:d5:68:db:71:48:ad:29:65:
         a7:11:47:f6
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICE2IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTA5Mjkw
MjU1NDJaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDZFRUUzM0NGQjZBODBC
OEJGMjZBMTA2QTQxQjI2MDBFQjdBRjRCMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDhBjQDDrfVvtVJwV8zMe/1TcFPRLS6fwhdSaGX9ONdEJipb4s2
8edqY3UkC4jGN59B5YB2EI0JmE8C7uVxHt1R2ho6k7c6ZUIjMJIur7QGriN6HKzA
4xss/YC1USF2oGf0OlW07jiClVmQZCfqJHQLMJCu681ZwASN7JEbrVx2IkoIbCWy
2MHm9VZ5tV0ZOu6iY///ypCr32/px6TsZbAGuQ6S8vl+A0XLsMDqNF7rjRAKfLjc
Ivytb9qIySbM3K/nJLAaS9+Zmlbw3Y0X2n3eMZBIlETLwGJVHtP4nwzfBItMgUnb
zAut9aGUW0sGESoYExqoI80LY13RgWZmxmt/AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUbu4zz7aoC4vyahBqQbJgDrevSyQwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2J1NHp6N2FvQzR2eWFoQnFR
YkpnRHJldlN5US5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAI9
OKwwDQYJKoZIhvcNAQELBQADggEBADD/xSD0AU/vZLRqr2+31MyJF6i0UxkOGXg5
8w5XsDK0Gq8kzPJGxPOjWohaWW3X4aqzwgmw8wFKpWrRdd7Qd1THzeveRFHCHl57
5pzZLAUmhP7Adfxms3XmfDQCqnrxKMyvE7zd+xWQ5+Nryq79mYV4fTn9T7s+C6qd
Ejd3Fc32uQ7GvbbmTmF12pbxIYvTrSvwOceG6ac2nZusmQieKAk2bcAa+w7qab9d
9Nr+YrlJQh6ys7k4lkI9cV1rQLWIesnEcAOJBL34XFL6zKYxZAmsJtrIF1G/eFcO
jqU4M3tJ+g8DyVY5Avwpk0ZMIp38Hq6SoErVaNtxSK0pZacRR/Y=
-----END CERTIFICATE-----