Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/1G4BfMdwo53NyjqdvrzYCRLm2LA.roa
File:                     1G4BfMdwo53NyjqdvrzYCRLm2LA.roa (raw, json)
Hash identifier:          C7944evYRbQxerpydygYF+w6/kf8FdxQ89i3Uj+FyIk=
Subject key identifier:   D4:6E:01:7C:C7:70:A3:9D:CD:CA:3A:9D:BE:BC:D8:09:12:E6:D8:B0
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       10D7
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/1G4BfMdwo53NyjqdvrzYCRLm2LA.roa
Signing time:             Sun 07 Feb 2021 12:49:14 +0000
ROA not before:           Sun 07 Feb 2021 12:49:14 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24163
IP address blocks:        180.218.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4311 (0x10d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb  7 12:49:14 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=D46E017CC770A39DCDCA3A9DBEBCD80912E6D8B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:26:2f:4e:49:5a:f6:b7:65:a1:22:d4:0d:b7:
                    3c:37:95:41:c9:02:7e:a5:8c:86:c4:2e:e3:31:d1:
                    34:d8:6f:73:83:ae:43:e6:96:0f:37:e9:cd:c0:15:
                    bf:c9:70:47:e5:80:c7:03:a4:e7:93:34:52:0a:9f:
                    6b:24:fd:c4:44:7a:18:10:8b:9f:46:7c:41:ca:7f:
                    fb:61:43:4d:18:55:cd:72:c1:42:1e:fc:cd:d0:61:
                    26:6c:9a:0e:d5:62:70:ab:2a:60:ab:d8:19:f3:2c:
                    12:5a:19:ac:57:ac:82:ee:cb:1a:d0:ff:35:59:aa:
                    a5:89:1f:9a:84:e3:30:45:95:1f:5d:8e:5b:9b:72:
                    c9:03:7a:18:c7:bf:30:94:9d:c3:df:77:df:e8:aa:
                    c1:52:4b:03:d5:dc:67:ad:65:0c:e3:83:ba:9b:a5:
                    8b:ef:33:db:8a:e6:43:57:d2:a5:da:76:b8:d7:0d:
                    6e:78:6d:d2:40:ba:1a:68:f1:e0:a0:73:34:1e:77:
                    96:8c:8e:b9:c3:c9:47:95:56:da:02:d7:ce:c6:12:
                    d4:eb:78:fb:02:2e:a8:eb:f3:41:f8:43:62:89:b9:
                    57:0c:be:52:0c:a1:2b:3a:28:f9:7b:97:13:03:51:
                    e6:44:cc:e8:d2:c5:10:ec:35:61:60:47:b8:be:93:
                    33:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:6E:01:7C:C7:70:A3:9D:CD:CA:3A:9D:BE:BC:D8:09:12:E6:D8:B0
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/1G4BfMdwo53NyjqdvrzYCRLm2LA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         79:01:93:74:7e:e4:43:c6:64:0a:5a:fa:69:b8:d5:d6:e7:d4:
         88:a0:ba:47:22:bd:df:20:c3:82:98:be:7d:f3:76:56:91:00:
         75:56:9b:96:8f:74:87:d4:8d:66:11:1c:1a:18:29:45:bb:61:
         f1:75:0d:93:d8:eb:c8:bb:bf:44:c2:6f:10:6c:70:1e:e6:d4:
         5b:58:3a:d6:ce:38:58:0f:b4:63:0f:46:55:9c:26:6a:b1:c9:
         fd:e2:47:94:10:26:97:7a:06:ed:ca:69:ff:4e:0e:8b:23:0c:
         94:ba:38:45:43:69:ad:ee:bc:80:2f:e7:b6:e4:e2:2b:96:76:
         60:c7:f2:84:bc:65:57:69:8e:19:90:7b:a7:dc:ac:50:37:cc:
         86:4e:b7:a3:4e:ab:bd:91:dc:5f:14:eb:1a:47:28:47:37:17:
         61:a9:f2:af:bc:c2:b0:10:e4:7e:c9:5e:0b:8d:aa:b4:b6:a4:
         c2:83:31:2a:ef:ad:b9:80:13:72:8f:4d:39:9a:c9:3d:b7:6e:
         aa:36:58:76:e5:ea:a8:b6:3c:05:48:4f:c9:9d:12:0b:47:ad:
         b4:6b:48:c2:37:a0:89:4a:d1:aa:4a:34:b1:17:ab:3b:d4:4b:
         11:8b:f6:9d:ee:a3:6f:aa:15:cf:0c:6f:2f:e1:5a:91:4c:dd:
         e6:4b:72:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----