Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/B8fe4nRzkblfCXxBNTOz5T1lfes.roa
File:                     B8fe4nRzkblfCXxBNTOz5T1lfes.roa (raw, json)
Hash identifier:          MwMeDDKV5HQDIi3C62C4dDxVXXAfodsYXiZ5MVwmHnE=
Subject key identifier:   07:C7:DE:E2:74:73:91:B9:5F:09:7C:41:35:33:B3:E5:3D:65:7D:EB
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0D4C
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/B8fe4nRzkblfCXxBNTOz5T1lfes.roa
Signing time:             Thu 14 Jan 2021 07:34:01 +0000
ROA not before:           Thu 14 Jan 2021 07:34:01 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24165
IP address blocks:        180.218.88.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3404 (0xd4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Jan 14 07:34:01 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=07C7DEE2747391B95F097C413533B3E53D657DEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c0:da:c0:58:70:c5:da:8f:6c:cc:1c:62:10:
                    13:b1:2e:fd:f0:85:09:4e:d9:78:6b:61:ee:90:a3:
                    ed:f2:e4:4a:4c:2a:27:23:94:5d:76:17:99:e9:ce:
                    02:f5:b6:92:1c:ac:11:d9:cc:7f:94:77:84:0f:5f:
                    46:97:f3:79:3e:68:23:bb:6c:a5:ff:c1:79:c8:c7:
                    fd:48:ce:66:a2:b6:21:7b:6e:d0:af:ca:dd:28:32:
                    68:ab:83:3e:7c:91:a9:c5:6b:ea:6d:2e:d1:d0:6b:
                    13:ab:92:e2:ea:f3:a4:26:b4:2f:90:eb:87:ac:3b:
                    97:95:57:02:fd:14:65:30:f8:98:f3:41:81:e1:59:
                    d0:9e:ea:3a:b1:30:3e:5f:de:c7:07:85:82:b7:f7:
                    70:9a:aa:47:65:20:48:c7:73:bf:3b:f9:d0:0c:77:
                    a6:5b:9d:0d:64:b8:cd:9e:92:5e:a7:b0:0e:e1:24:
                    8d:e6:84:0a:5a:f4:f1:9e:d0:4f:de:98:1b:20:91:
                    30:7c:17:36:00:42:f6:9b:90:e6:94:33:c7:52:3a:
                    e7:51:c6:25:cf:71:43:01:73:75:0b:78:2c:99:e2:
                    33:c5:0a:65:ef:83:42:e9:8d:1f:46:78:9d:7f:d7:
                    b1:5d:85:9f:f5:20:46:7e:43:73:49:63:75:01:cd:
                    9b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:C7:DE:E2:74:73:91:B9:5F:09:7C:41:35:33:B3:E5:3D:65:7D:EB
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/B8fe4nRzkblfCXxBNTOz5T1lfes.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:f4:97:23:57:26:21:90:cd:d1:d7:c1:24:ca:83:bc:53:a8:
         fd:af:74:6b:a6:e8:8e:9f:83:6f:0e:37:15:bb:76:94:63:cc:
         11:29:3b:da:c9:90:93:7e:1b:4f:4b:9d:37:be:83:05:98:59:
         79:81:8d:b0:d6:33:51:98:c6:d0:e8:a9:1c:c2:8f:ec:3c:56:
         56:a0:d4:a6:ed:54:a5:11:8a:e2:ec:41:4f:5c:ca:1e:ea:65:
         b8:21:11:49:40:37:54:8e:93:66:93:98:2e:85:71:52:65:cd:
         64:89:d6:14:b3:38:fa:98:c7:70:c9:af:7d:69:38:64:5d:cc:
         e4:50:df:af:63:b1:2a:82:be:55:ba:b6:2c:37:4f:99:be:a4:
         28:cd:7c:e1:22:12:35:ee:b3:e6:b6:a7:d7:4d:44:6c:55:ec:
         6e:a5:b9:90:b4:80:df:c7:26:11:52:47:08:08:16:52:8a:e3:
         87:92:1c:34:43:a5:8d:2c:9e:33:e9:09:06:01:cc:1b:6d:ba:
         f4:e8:3f:f3:63:62:6d:ca:60:4d:ee:06:f9:b8:d9:61:6f:0d:
         b0:e2:4c:e4:37:12:2a:01:d2:c6:15:e6:e4:66:c7:2e:06:f2:
         ca:89:15:a8:eb:34:38:2c:3f:ef:3a:8e:2d:3d:89:8c:f6:29:
         1f:fe:2c:64
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDUwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTAxMTQw
NzM0MDFaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDA3QzdERUUyNzQ3Mzkx
Qjk1RjA5N0M0MTM1MzNCM0U1M0Q2NTdERUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/wNrAWHDF2o9szBxiEBOxLv3whQlO2XhrYe6Qo+3y5EpMKicj
lF12F5npzgL1tpIcrBHZzH+Ud4QPX0aX83k+aCO7bKX/wXnIx/1IzmaitiF7btCv
yt0oMmirgz58kanFa+ptLtHQaxOrkuLq86QmtC+Q64esO5eVVwL9FGUw+JjzQYHh
WdCe6jqxMD5f3scHhYK393CaqkdlIEjHc787+dAMd6ZbnQ1kuM2ekl6nsA7hJI3m
hApa9PGe0E/emBsgkTB8FzYAQvabkOaUM8dSOudRxiXPcUMBc3ULeCyZ4jPFCmXv
g0LpjR9GeJ1/17FdhZ/1IEZ+Q3NJY3UBzZvrAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUB8fe4nRzkblfCXxBNTOz5T1lfeswHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0I4ZmU0blJ6a2JsZkNYeEJO
VE96NVQxbGZlcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0
2lgwDQYJKoZIhvcNAQELBQADggEBAEr0lyNXJiGQzdHXwSTKg7xTqP2vdGum6I6f
g28ONxW7dpRjzBEpO9rJkJN+G09LnTe+gwWYWXmBjbDWM1GYxtDoqRzCj+w8Vlag
1KbtVKURiuLsQU9cyh7qZbghEUlAN1SOk2aTmC6FcVJlzWSJ1hSzOPqYx3DJr31p
OGRdzORQ369jsSqCvlW6tiw3T5m+pCjNfOEiEjXus+a2p9dNRGxV7G6luZC0gN/H
JhFSRwgIFlKK44eSHDRDpY0snjPpCQYBzBttuvToP/NjYm3KYE3uBvm42WFvDbDi
TOQ3EioB0sYV5uRmxy4G8sqJFajrNDgsP+86ji09iYz2KR/+LGQ=
-----END CERTIFICATE-----