Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Espibi8ZSrD6jGTkyDpZJboLFpI.roa
File:                     Espibi8ZSrD6jGTkyDpZJboLFpI.roa (raw, json)
Hash identifier:          lonfElIG/XFAu2xXifQDfUCq3vFE2u1yDPIQrs4OxD0=
Subject key identifier:   12:CA:62:6E:2F:19:4A:B0:FA:8C:64:E4:C8:3A:59:25:BA:0B:16:92
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0B0E
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Espibi8ZSrD6jGTkyDpZJboLFpI.roa
Signing time:             Tue 29 Sep 2020 10:07:57 +0000
ROA not before:           Tue 29 Sep 2020 10:07:57 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        180.218.144.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2830 (0xb0e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:07:57 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=12CA626E2F194AB0FA8C64E4C83A5925BA0B1692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ae:f6:98:98:81:26:7a:e7:ed:09:c0:db:84:
                    82:e1:f6:ef:3a:6d:08:15:73:56:ae:00:28:ee:53:
                    6e:53:5f:ea:d5:90:0b:fe:dd:62:90:bc:f9:96:0c:
                    96:08:ff:9c:56:32:a5:7f:34:f5:68:8d:69:b5:af:
                    8d:cf:ce:7a:e7:b2:93:11:ef:e6:8c:12:f2:dc:6d:
                    36:a9:67:a9:0e:2c:f4:c7:ce:b3:34:9c:b3:e2:da:
                    47:ec:54:cc:96:da:21:d6:3d:2a:78:31:3a:a0:f2:
                    99:d6:1c:e1:64:ed:15:57:63:0b:9f:7e:37:28:f5:
                    b5:bd:1c:d4:a0:78:8b:cd:90:6b:f2:2b:84:25:e6:
                    e5:ff:d8:67:88:a8:aa:8f:bb:b7:b0:20:38:8b:9c:
                    f4:42:32:a9:64:47:d6:f9:9a:26:b1:6f:25:6f:85:
                    43:34:6a:93:32:f9:cc:82:da:20:f6:9f:68:df:26:
                    b9:0c:02:a2:8a:c5:0e:75:49:96:75:a3:58:a6:ec:
                    eb:dc:48:29:02:77:7f:26:53:21:42:d8:73:c9:32:
                    28:09:5c:2b:ba:e9:0e:ee:95:58:74:d3:26:76:69:
                    96:0d:42:62:da:33:35:8c:55:04:ea:c3:a6:6d:97:
                    20:b9:7d:2a:42:f7:c4:ad:3b:52:cf:eb:78:28:bb:
                    72:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:CA:62:6E:2F:19:4A:B0:FA:8C:64:E4:C8:3A:59:25:BA:0B:16:92
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Espibi8ZSrD6jGTkyDpZJboLFpI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:0b:fc:28:d4:da:a8:cc:af:6e:2d:85:9b:91:cf:c0:e2:c4:
         70:6a:fc:a6:59:fc:7c:3b:fb:a5:8a:e0:c6:75:b3:c7:c4:1c:
         04:35:b9:98:13:88:f3:ca:08:ca:93:93:8f:3e:c7:66:91:19:
         de:b1:c1:6a:15:e3:78:8d:a1:c8:4b:30:f3:a5:80:6c:ca:00:
         45:a9:6f:23:2b:90:2a:21:93:69:b8:9c:ab:af:2a:9d:32:cc:
         34:b7:44:89:54:22:9a:cb:26:70:0e:5c:ad:0b:bc:a0:06:3e:
         68:d2:83:35:52:4e:f1:49:fb:b2:1c:07:8a:35:04:96:82:1c:
         e6:1d:2a:54:b2:0a:5e:da:ef:c5:f6:f8:04:21:d6:59:19:af:
         42:5e:50:06:90:62:1a:36:6c:8b:ea:0e:9a:77:29:7d:7c:61:
         b6:19:a1:c5:0e:b9:e7:3d:e5:3c:9d:f9:6e:3e:0f:72:d2:6e:
         64:67:76:f6:b8:b5:5c:6c:9e:28:8a:34:ef:68:2f:a0:84:b2:
         21:7e:2a:c8:9f:c6:43:f7:2c:c3:4c:0c:6d:8e:ed:46:9e:e6:
         47:c7:5b:26:8f:34:4d:a9:8d:17:78:4a:53:50:20:c2:3d:e7:
         aa:ce:7a:49:da:6f:8c:ff:cd:54:a6:34:83:13:29:dc:fb:fd:
         a6:7d:9d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----