Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/4EoIa01EDzVXqntUKWuuRL4IKYA.roa
File:                     4EoIa01EDzVXqntUKWuuRL4IKYA.roa (raw, json)
Hash identifier:          nDH3WbpZuutopI6mMT6XGg/KqLZSSwZtFmjvznO8Eqc=
Subject key identifier:   E0:4A:08:6B:4D:44:0F:35:57:AA:7B:54:29:6B:AE:44:BE:08:29:80
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       10A3
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/4EoIa01EDzVXqntUKWuuRL4IKYA.roa
Signing time:             Sun 07 Feb 2021 12:46:44 +0000
ROA not before:           Sun 07 Feb 2021 12:46:44 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24163
IP address blocks:        180.218.224.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4259 (0x10a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb  7 12:46:44 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=E04A086B4D440F3557AA7B54296BAE44BE082980
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:24:90:36:86:68:8b:80:e0:5e:af:98:9c:ec:
                    b4:42:b6:fa:ce:52:e4:fd:b6:ea:d8:5c:ce:5d:d2:
                    e1:0f:82:f2:87:6d:a9:9d:32:83:1d:f6:2e:43:25:
                    9b:e1:80:19:79:8a:ba:ff:62:6d:40:fe:02:ff:5a:
                    21:9e:ca:82:d8:89:d8:83:4e:36:a4:9e:be:e3:bd:
                    c6:39:a8:a0:08:fd:4a:41:b8:74:82:3d:b7:d1:ab:
                    89:f9:53:b5:d7:96:36:ae:61:47:da:88:8c:78:92:
                    18:48:e2:2e:c5:15:5b:8a:fb:88:01:ee:cc:25:84:
                    a6:b4:9e:ce:c1:da:d2:1f:66:31:62:8f:52:05:89:
                    82:ea:7d:c3:fc:53:0a:cb:ee:ad:17:52:3f:c1:fe:
                    68:d4:b1:cd:fe:74:8e:93:9d:23:f6:25:20:67:b6:
                    95:23:14:de:48:ef:85:d8:d7:a8:04:de:13:21:11:
                    a9:20:5f:3a:58:a8:d5:9d:1d:88:a8:ce:5b:93:32:
                    3e:d9:6b:c3:02:bc:5d:b2:15:38:7c:b5:fc:09:cf:
                    70:cb:59:21:d7:65:73:9a:35:7c:34:53:cb:e8:7b:
                    6b:57:35:1f:79:c4:fc:b8:49:30:8a:b1:89:42:8a:
                    58:22:74:0f:4c:3d:4f:36:fa:ca:3d:c4:4a:18:8a:
                    90:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:4A:08:6B:4D:44:0F:35:57:AA:7B:54:29:6B:AE:44:BE:08:29:80
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/4EoIa01EDzVXqntUKWuuRL4IKYA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         17:64:15:2c:77:f0:50:44:22:8a:a0:62:c5:2f:c0:9d:40:3a:
         7b:9a:af:d5:14:ba:0f:6d:aa:51:21:a5:a8:dc:db:ac:60:a4:
         c9:91:e4:6b:c7:aa:f6:e5:d8:cc:e1:40:b6:ef:07:c3:60:2f:
         90:04:9f:9f:16:78:f3:eb:b2:45:f3:ef:14:d1:3f:a2:be:7b:
         1a:ab:39:79:38:db:80:0e:08:62:5f:fb:9b:80:b3:1b:5d:aa:
         df:03:20:88:2a:d4:2d:77:44:2e:ee:ec:38:f3:28:58:0e:6d:
         f1:26:17:f4:ff:ca:91:03:b8:eb:86:4e:09:e6:24:f0:2b:69:
         05:51:03:a0:99:3b:24:b4:5d:73:62:53:b2:81:52:c0:77:ee:
         23:c7:7d:4d:f6:4b:0f:d5:39:e9:99:26:56:f4:a3:73:17:50:
         72:cb:c4:76:20:0d:66:2b:dc:90:70:78:78:b1:2d:8e:64:d7:
         84:c3:19:37:c3:73:47:c6:46:65:7f:53:61:fd:98:73:d6:22:
         f3:3a:0f:f9:85:98:70:ca:70:1b:3d:ab:d2:29:c4:8e:b8:f0:
         d0:f5:ba:10:b1:03:5b:55:5b:c2:d8:99:32:52:a3:83:08:e9:
         34:34:8e:d0:49:c8:75:fb:35:9b:fd:f5:84:2f:2f:92:01:95:
         85:f0:4b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----