Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/4k9yCzr5CpGrUdkQTKKxJNUXIYY.roa
File:                     4k9yCzr5CpGrUdkQTKKxJNUXIYY.roa (raw, json)
Hash identifier:          9iEr52knYm+Ln96JW9e5c9hZmHSvOh4MUl/QHdR4htk=
Subject key identifier:   E2:4F:72:0B:3A:F9:0A:91:AB:51:D9:10:4C:A2:B1:24:D5:17:21:86
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       12F5
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/4k9yCzr5CpGrUdkQTKKxJNUXIYY.roa
Signing time:             Wed 29 Sep 2021 02:55:11 +0000
ROA not before:           Wed 29 Sep 2021 02:55:11 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24164
IP address blocks:        180.218.184.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4853 (0x12f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:55:11 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=E24F720B3AF90A91AB51D9104CA2B124D5172186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ce:31:a9:8a:3c:b4:6b:9f:64:15:c1:d8:99:
                    44:12:84:4d:85:c0:70:f2:6c:8e:34:c1:e4:8f:74:
                    24:b2:43:ac:0a:c7:f0:fc:bb:7d:49:3a:0e:5b:f2:
                    03:19:f2:9c:ab:71:7e:d2:2b:56:de:93:cc:68:bd:
                    2e:d9:1f:4a:a3:28:5b:df:1c:12:58:55:ca:a4:00:
                    82:e2:e6:83:ea:ea:16:3f:1d:a6:96:05:6c:d5:20:
                    40:b7:e2:46:82:5a:14:16:f7:c8:42:c6:c4:4d:66:
                    d8:f2:16:31:c9:e9:a9:69:34:0a:c5:aa:a4:60:52:
                    05:5f:27:e1:f8:06:a5:67:2c:93:f7:ed:d0:73:37:
                    ed:60:ca:49:9e:2d:46:56:0d:af:a7:f5:e7:e3:8a:
                    35:c7:84:33:c7:65:d3:73:a0:fe:38:24:7c:68:af:
                    d5:47:be:aa:2d:5a:59:a2:a8:22:61:35:7d:6f:bf:
                    8a:1a:0e:7a:07:ef:29:e3:f8:71:1b:cf:d7:5a:33:
                    bd:3a:76:73:94:f3:0a:59:3b:52:10:2e:de:42:5c:
                    5f:5f:35:b9:a6:77:2b:ba:07:ec:ea:6f:74:12:fa:
                    53:52:e1:16:52:8b:65:fb:6e:37:85:29:b1:f1:79:
                    14:39:eb:76:08:d3:1c:8b:17:46:56:33:20:78:15:
                    d3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:4F:72:0B:3A:F9:0A:91:AB:51:D9:10:4C:A2:B1:24:D5:17:21:86
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/4k9yCzr5CpGrUdkQTKKxJNUXIYY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         14:3c:e1:09:5e:1d:3d:0c:db:6a:a7:09:d9:1f:9d:01:ba:f6:
         0b:20:ea:6c:04:45:5f:8f:51:c7:af:8a:15:e5:bc:6c:84:e4:
         bc:8c:af:83:8f:ef:80:7b:62:00:f3:87:85:9d:fe:b1:76:7e:
         0e:07:12:a8:1b:47:48:b3:c6:42:b2:02:93:32:4c:97:84:29:
         af:14:3d:80:82:29:2f:02:ab:e8:9d:d1:04:8a:08:9d:28:1b:
         34:b3:41:e7:67:74:e9:be:a6:25:de:32:ec:49:02:c8:af:70:
         c7:f1:af:1f:cb:77:dd:61:d2:bf:63:1e:c1:d1:68:3e:88:47:
         3d:d0:20:23:52:91:64:a1:e0:d9:34:ab:f1:c2:d3:b8:28:2f:
         72:5d:ca:00:f9:54:c7:82:d6:23:0b:28:a2:5e:41:dc:d3:96:
         ad:66:4c:a3:ad:d9:e1:d2:3d:24:54:52:cf:a9:23:fb:4d:67:
         c6:ba:5b:71:23:fb:a1:58:fd:6e:cd:13:fc:d1:b1:0d:31:e0:
         56:9a:0a:35:60:a5:e0:a9:55:8e:dd:7d:6a:a7:cd:b7:68:bb:
         04:3d:6e:32:db:e8:00:98:f9:32:1f:a7:2d:ba:37:eb:1b:9a:
         8a:11:91:cc:18:55:d8:79:6c:be:4b:ec:dc:bb:ff:39:f8:a9:
         29:0e:1b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----