Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/GkqNVWCCrWU-yZO7uu8Wg4emIIE.roa
File:                     GkqNVWCCrWU-yZO7uu8Wg4emIIE.roa (raw, json)
Hash identifier:          BqOllSS00wlQiDa9sAfQ0TcQxBicCp4JxP+58w/hX/I=
Subject key identifier:   1A:4A:8D:55:60:82:AD:65:3E:C9:93:BB:BA:EF:16:83:87:A6:20:81
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0B48
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/GkqNVWCCrWU-yZO7uu8Wg4emIIE.roa
Signing time:             Tue 29 Sep 2020 10:08:14 +0000
ROA not before:           Tue 29 Sep 2020 10:08:14 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        180.218.135.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2888 (0xb48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 10:08:14 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=1A4A8D556082AD653EC993BBBAEF168387A62081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2b:0e:f2:30:31:72:ed:ea:80:57:f4:14:7b:
                    33:c0:f8:11:f6:2e:c8:2e:e4:34:aa:69:2b:0f:d9:
                    6c:68:82:0e:5f:88:9f:ff:2d:7f:3d:b3:99:44:76:
                    89:8c:27:b4:ec:fb:37:da:31:15:7e:81:ac:6d:73:
                    49:10:cc:e3:45:a8:ed:d1:f9:05:18:03:24:7b:10:
                    79:38:70:63:3f:db:8a:00:74:73:83:27:b1:e0:89:
                    b7:86:3f:2d:7a:c1:89:41:9d:10:e4:e8:c7:4d:45:
                    4a:ea:07:69:e4:4e:b4:50:a4:de:5c:96:20:1c:81:
                    8e:df:ef:ea:c8:2f:e8:12:35:e2:71:57:e9:69:33:
                    03:c0:dd:21:3b:c7:c8:db:fb:c5:75:67:bc:42:f8:
                    8b:e5:b1:04:ee:3f:ad:84:84:3e:31:da:4b:06:28:
                    e0:07:53:21:c7:d1:0c:e7:20:e3:5a:6d:03:ae:a5:
                    b1:f1:5e:18:ee:63:ff:69:00:a8:f5:23:8a:17:7e:
                    48:4b:27:12:db:ec:64:39:4a:78:dd:44:a8:69:e7:
                    80:70:c3:5d:03:78:2a:6c:e6:94:39:5b:e7:8c:e7:
                    d8:2f:3e:05:25:1e:15:43:1e:f2:7f:41:b6:7e:82:
                    07:6d:9c:c5:38:0e:5e:8b:e8:4e:19:ea:19:cd:5a:
                    8e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:4A:8D:55:60:82:AD:65:3E:C9:93:BB:BA:EF:16:83:87:A6:20:81
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/GkqNVWCCrWU-yZO7uu8Wg4emIIE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:63:6f:54:88:00:28:fb:8d:c5:06:aa:da:03:e1:09:ee:b4:
         3c:1c:8b:fd:01:db:b6:fb:1f:51:4f:44:04:81:42:8c:95:18:
         5b:25:84:4f:76:a6:50:35:24:cc:e9:e4:9f:ef:4d:ba:8b:7c:
         1c:85:a8:7b:62:86:9f:a3:98:0f:c2:5f:5b:15:9d:2d:ce:3c:
         2a:6d:61:a6:51:d6:84:aa:16:27:87:4b:47:0f:91:97:78:4f:
         e7:17:fd:c0:99:1d:5f:b5:a3:de:5a:3b:2b:7f:22:bd:c1:63:
         e0:8e:47:82:0a:a0:98:e1:76:b3:51:4f:db:1e:3c:a6:5c:2f:
         ec:94:e0:4a:12:9b:fa:4e:d1:b3:9b:7d:40:07:92:34:79:6c:
         4d:7e:fb:45:9a:44:54:41:7d:b4:b2:dd:68:2a:c6:01:27:ea:
         78:01:67:bb:e1:63:48:df:47:dd:04:4e:f0:44:a5:bd:f4:19:
         5e:35:34:00:43:c7:1d:a1:bc:06:93:a0:22:7e:9c:90:16:64:
         7d:37:1e:05:44:1d:53:48:9e:9e:a0:c5:03:97:6d:27:84:b9:
         2f:21:8c:ce:2b:f3:c9:cb:30:76:aa:e7:ad:c1:cd:8e:62:e5:
         00:46:97:b5:26:b7:83:b7:47:35:c9:c5:20:e0:57:d7:e1:80:
         0f:3a:5c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----