Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/u6RWCQmWQqwmr9906-kvgXympnk.roa
File:                     u6RWCQmWQqwmr9906-kvgXympnk.roa (raw, json)
Hash identifier:          V5mxV2Z9Z79+cW6ZiWYWHzHUp27jAFm+r5Yrn33K5Wk=
Subject key identifier:   BB:A4:56:09:09:96:42:AC:26:AF:DF:74:EB:E9:2F:81:7C:A6:A6:79
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0F0F
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/u6RWCQmWQqwmr9906-kvgXympnk.roa
Signing time:             Sun 07 Feb 2021 12:32:44 +0000
ROA not before:           Sun 07 Feb 2021 12:32:44 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        61.60.214.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3855 (0xf0f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb  7 12:32:44 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=BBA45609099642AC26AFDF74EBE92F817CA6A679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c0:4c:2c:a0:97:aa:b3:1b:f4:50:ef:5f:30:
                    0e:69:4d:91:38:a0:17:53:18:77:a7:04:d5:80:c1:
                    61:1a:02:d2:b6:32:26:cb:7f:9e:cd:06:90:f0:78:
                    6e:f0:ba:1f:9a:c0:32:aa:29:d0:aa:85:76:c8:2f:
                    ed:57:dc:66:a6:65:d7:9b:12:c1:6b:55:85:64:f1:
                    80:23:0d:30:e0:44:f1:83:32:06:b1:6e:57:5b:59:
                    85:93:c7:20:74:7f:a5:2b:44:fc:76:d3:67:b5:6b:
                    bf:37:ed:37:76:bd:61:0a:98:66:66:24:d3:7b:4b:
                    94:5c:15:ea:67:05:50:5e:f8:7b:bc:9c:77:b8:36:
                    b7:92:9b:e2:df:6c:26:9b:77:eb:43:a0:6c:b1:3b:
                    09:0a:e3:8f:4b:ab:23:94:3d:ca:92:b8:e7:be:85:
                    3f:36:bf:7c:f0:9a:32:63:05:c6:98:14:0e:a4:22:
                    d8:1c:ea:6a:8b:2b:76:3d:9b:b4:79:ae:02:f2:1b:
                    ba:67:dc:f9:41:12:11:b5:9b:68:31:e2:30:96:d3:
                    36:5e:91:b3:87:b9:c1:3c:98:31:20:1e:38:bd:1e:
                    88:65:de:0d:f3:c8:80:29:e5:f3:50:b7:1b:17:de:
                    ff:a1:e5:dc:1b:8b:f8:ec:d3:b7:9f:c9:3a:58:fd:
                    da:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:A4:56:09:09:96:42:AC:26:AF:DF:74:EB:E9:2F:81:7C:A6:A6:79
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/u6RWCQmWQqwmr9906-kvgXympnk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.60.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:a3:d6:37:6d:5f:88:6d:dd:97:58:e2:ce:2c:89:5f:ac:85:
         0f:5a:b6:38:f2:5b:bc:64:8d:c9:47:e4:71:e6:7b:10:47:18:
         70:d9:42:17:1d:26:f1:32:ce:8d:20:37:a7:6c:93:45:ab:24:
         56:7a:2b:8b:22:86:26:05:57:c2:9d:8f:f5:19:25:4d:75:55:
         fc:c0:9d:a0:b9:ed:a5:15:ef:3d:6a:47:e6:ec:05:e0:80:23:
         bf:13:46:8b:c7:90:ee:67:7a:ca:80:c8:fa:77:75:18:a9:a1:
         cd:87:77:00:f4:4e:00:0b:0b:23:6b:16:85:b3:20:b6:f7:96:
         f7:c8:81:0a:65:f0:20:8c:08:4d:55:ca:8e:7f:66:1c:99:29:
         dd:72:c7:f3:b5:82:a9:e9:cf:98:81:d7:b3:5c:27:77:5a:33:
         c0:58:85:7f:0b:6e:5b:65:e3:66:64:45:76:c0:c3:b5:7e:e8:
         c1:1b:8b:10:b0:89:86:f5:2b:0f:2f:ce:32:a3:1b:06:52:d9:
         2b:b6:5f:9d:1f:81:08:a5:a6:91:82:49:4e:07:82:58:12:e9:
         75:23:d1:ac:50:93:ae:c4:25:11:3c:47:90:29:0d:24:36:20:
         f2:ab:96:ef:1a:59:3b:38:87:8f:21:7d:03:80:3b:39:b3:83:
         1b:13:fb:69
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDw8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTAyMDcx
MjMyNDRaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEJCQTQ1NjA5MDk5NjQy
QUMyNkFGREY3NEVCRTkyRjgxN0NBNkE2NzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDVwEwsoJeqsxv0UO9fMA5pTZE4oBdTGHenBNWAwWEaAtK2MibL
f57NBpDweG7wuh+awDKqKdCqhXbIL+1X3GamZdebEsFrVYVk8YAjDTDgRPGDMgax
bldbWYWTxyB0f6UrRPx202e1a7837Td2vWEKmGZmJNN7S5RcFepnBVBe+Hu8nHe4
NreSm+LfbCabd+tDoGyxOwkK449LqyOUPcqSuOe+hT82v3zwmjJjBcaYFA6kItgc
6mqLK3Y9m7R5rgLyG7pn3PlBEhG1m2gx4jCW0zZekbOHucE8mDEgHji9Hohl3g3z
yIAp5fNQtxsX3v+h5dwbi/js07efyTpY/doJAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUu6RWCQmWQqwmr9906+kvgXympnkwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3U2UldDUW1XUXF3bXI5OTA2
LWt2Z1h5bXBuay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAA9
PNYwDQYJKoZIhvcNAQELBQADggEBABmj1jdtX4ht3ZdY4s4siV+shQ9atjjyW7xk
jclH5HHmexBHGHDZQhcdJvEyzo0gN6dsk0WrJFZ6K4sihiYFV8Kdj/UZJU11VfzA
naC57aUV7z1qR+bsBeCAI78TRovHkO5nesqAyPp3dRipoc2HdwD0TgALCyNrFoWz
ILb3lvfIgQpl8CCMCE1Vyo5/ZhyZKd1yx/O1gqnpz5iB17NcJ3daM8BYhX8Lbltl
42ZkRXbAw7V+6MEbixCwiYb1Kw8vzjKjGwZS2Su2X50fgQilppGCSU4HglgS6XUj
0axQk67EJRE8R5ApDSQ2IPKrlu8aWTs4h48hfQOAOzmzgxsT+2k=
-----END CERTIFICATE-----