Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7n7cSYTYlM71pNvZXZFd-CK3Aog.roa
File:                     7n7cSYTYlM71pNvZXZFd-CK3Aog.roa (raw, json)
Hash identifier:          EdoCEUYc+pX8g1Y4jDE720/4ygq7rk33friI8nJe4RI=
Subject key identifier:   EE:7E:DC:49:84:D8:94:CE:F5:A4:DB:D9:5D:91:5D:F8:22:B7:02:88
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0B40
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7n7cSYTYlM71pNvZXZFd-CK3Aog.roa
Signing time:             Tue 29 Sep 2020 10:08:11 +0000
ROA not before:           Tue 29 Sep 2020 10:08:11 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        180.218.84.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2880 (0xb40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:08:11 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=EE7EDC4984D894CEF5A4DBD95D915DF822B70288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6b:39:c0:42:96:44:aa:83:52:e4:4d:ac:f2:
                    d0:6a:ed:c5:3f:7a:fd:ec:d1:15:f5:bb:6a:e9:3b:
                    35:bc:56:4f:8a:07:52:3b:cf:30:ac:5e:a1:41:d8:
                    55:f9:3a:5f:81:4a:b2:97:45:f9:0d:c6:da:16:b5:
                    44:07:30:69:b8:52:3d:e0:ec:d5:44:49:68:34:39:
                    fd:ce:c5:c9:88:c5:be:69:92:de:de:e2:d9:72:c4:
                    70:dc:96:5f:b3:d4:c6:e7:06:60:fd:ee:a7:f3:7b:
                    ea:6b:01:e7:e5:fd:e3:8d:8e:ba:99:89:f8:c0:20:
                    c6:49:b0:b9:62:95:e3:8d:73:b3:e2:1c:96:0b:2f:
                    bf:c6:02:5a:1b:6c:77:53:93:1d:71:1d:65:32:7b:
                    b5:3d:a7:1b:f4:25:ba:b1:10:c7:02:af:6c:93:53:
                    18:ce:bc:81:31:b8:ff:c2:36:a8:86:45:6a:b3:e9:
                    12:db:98:9f:bf:bf:4f:50:ce:5f:a7:35:62:04:12:
                    22:be:16:ac:93:25:a8:e3:3d:e8:78:ae:fd:23:b6:
                    f2:c3:9f:ec:22:2e:1a:91:39:2f:91:34:00:cf:45:
                    71:11:0e:bf:16:e5:1e:1b:7b:17:05:a7:06:a6:78:
                    ce:28:5e:57:dc:d3:fc:d9:c9:d8:aa:76:1b:7c:08:
                    44:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:7E:DC:49:84:D8:94:CE:F5:A4:DB:D9:5D:91:5D:F8:22:B7:02:88
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7n7cSYTYlM71pNvZXZFd-CK3Aog.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:44:a8:1e:e7:10:1a:f0:61:c6:9f:f3:96:9e:2e:60:59:89:
         43:bd:7c:0b:09:0f:d1:14:35:d9:62:e6:6c:08:b7:b8:2e:61:
         e7:68:e3:df:11:5e:c7:be:61:09:cf:28:a2:aa:6c:d5:d9:2b:
         29:e8:b4:2d:4d:e4:59:32:40:76:92:72:ae:f9:f0:25:eb:26:
         9e:c0:c7:93:2e:ef:df:0d:9e:02:b6:71:ab:99:7a:73:f4:80:
         37:f9:75:c1:e5:f4:80:af:ab:fb:31:04:50:d5:d4:4c:b4:08:
         a3:df:92:80:90:42:f7:34:99:10:18:97:84:64:33:db:2d:10:
         fd:c4:34:23:a8:09:f5:9e:f2:5d:51:2c:ad:96:48:8a:66:eb:
         fc:03:df:98:df:4c:c7:5f:97:00:19:6e:5d:cf:43:13:3c:24:
         4c:64:ec:80:47:09:3d:65:b7:24:55:99:99:eb:c0:e8:33:36:
         79:8b:b7:33:87:c3:17:56:44:10:fb:35:1d:c0:a4:be:83:d8:
         a6:98:1e:01:0e:98:92:a0:9f:1a:2e:b0:a2:f2:07:d1:b6:00:
         79:e8:ff:0d:1e:f3:e8:e8:90:7c:0c:98:8b:56:81:6d:4a:5f:
         d9:45:67:99:b3:ef:cb:23:6b:15:27:24:99:ff:3c:92:13:12:
         6c:31:02:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----