Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/26nFMMEXPpqRwMGWj7NgQGZyrqk.roa
File:                     26nFMMEXPpqRwMGWj7NgQGZyrqk.roa (raw, json)
Hash identifier:          YXF1J/jJW12XoH3ng2JgPbH7ixUhV82jmDdeSAlGVrg=
Subject key identifier:   DB:A9:C5:30:C1:17:3E:9A:91:C0:C1:96:8F:B3:60:40:66:72:AE:A9
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1306
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/26nFMMEXPpqRwMGWj7NgQGZyrqk.roa
Signing time:             Wed 29 Sep 2021 02:55:16 +0000
ROA not before:           Wed 29 Sep 2021 02:55:16 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24164
IP address blocks:        180.218.188.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4870 (0x1306)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:55:16 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=DBA9C530C1173E9A91C0C1968FB360406672AEA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e5:44:a3:1e:b7:b2:8f:e0:d8:92:99:ff:89:
                    6b:51:76:ba:cd:af:6d:c3:9a:57:4d:a6:09:66:e5:
                    ba:8a:67:d7:bb:0e:28:d2:28:80:f2:53:6a:4e:65:
                    52:7e:57:11:c1:e1:a8:de:11:92:45:3c:8a:08:42:
                    2a:54:dc:77:ad:d1:4c:21:7d:2b:01:c5:85:b6:bb:
                    5d:e5:fc:59:c8:9a:44:02:75:28:92:e4:80:38:2c:
                    23:1d:ca:c9:86:99:1a:33:38:b7:a1:ce:77:10:61:
                    82:29:14:da:d7:72:6c:98:7f:98:22:75:e9:75:8c:
                    90:6e:ef:63:b7:5c:65:70:11:d1:df:a7:d3:78:fa:
                    08:45:a9:59:c6:57:c4:ed:01:63:0c:ff:9d:b6:4a:
                    18:13:33:18:c5:f1:20:d3:09:fe:29:7a:c3:9f:7d:
                    81:5e:03:d2:79:0c:25:67:9c:06:7a:69:6f:23:dc:
                    b7:41:93:dd:fb:c0:7f:f2:92:8f:f6:c0:77:e2:e9:
                    82:c4:c4:d2:b0:39:8d:ff:fc:46:d7:56:51:d8:c9:
                    00:75:5d:5a:30:27:f1:1e:16:f3:2f:b0:b5:e4:60:
                    01:fe:83:d3:a0:17:e8:8c:cb:31:33:15:95:9e:8e:
                    8c:60:fc:4d:29:c8:60:c8:f9:f3:9c:65:0f:38:61:
                    20:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:A9:C5:30:C1:17:3E:9A:91:C0:C1:96:8F:B3:60:40:66:72:AE:A9
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/26nFMMEXPpqRwMGWj7NgQGZyrqk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:1c:cc:9a:b2:b4:d8:d7:10:53:ef:6b:11:48:f1:fe:13:df:
         6b:89:5c:25:47:3e:ae:d8:bb:12:4f:35:e7:bd:26:ef:4f:05:
         fe:90:1b:f9:3b:7e:db:51:88:ec:4d:8c:72:44:2a:86:0f:b2:
         e7:86:82:5f:6c:72:82:1e:a6:49:8f:5f:36:cc:0b:eb:33:f5:
         16:05:72:6c:8d:ee:a1:dd:29:31:0d:1f:5e:64:77:c3:80:3d:
         bd:fc:96:3c:47:55:1b:e4:80:2a:13:c9:6a:6a:0f:3c:09:07:
         57:88:28:8e:c4:b2:90:f7:b8:2f:58:a9:6c:7d:ee:fe:10:9b:
         81:89:a0:d4:52:1a:d0:b7:2a:ce:92:86:89:23:22:d8:09:6e:
         46:66:79:07:49:2b:94:d5:25:96:35:03:97:23:fc:45:a7:87:
         7e:77:16:14:ba:61:78:de:03:42:20:80:66:96:31:fb:7d:85:
         de:34:91:ea:8b:f0:a0:35:db:dd:10:59:fc:cf:c0:11:1f:97:
         b4:f0:69:45:84:3e:90:91:a4:6a:d7:e0:4e:3e:73:ed:e6:07:
         6a:3e:29:b3:e5:b5:e2:7e:e6:bc:3d:31:66:a8:55:71:15:e8:
         0d:1e:92:0a:49:42:f0:80:ed:2e:97:d0:ad:37:d2:cd:e8:58:
         1d:80:b0:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----