Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QcgdBkZcYia59ZksFzAQWV29jkA.roa
File:                     QcgdBkZcYia59ZksFzAQWV29jkA.roa (raw, json)
Hash identifier:          sUy+x8sYtw7PNQBuJRGi5bRePTLQ03GLpqry2/RuCtc=
Subject key identifier:   41:C8:1D:06:46:5C:62:26:B9:F5:99:2C:17:30:10:59:5D:BD:8E:40
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0D42
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QcgdBkZcYia59ZksFzAQWV29jkA.roa
Signing time:             Thu 14 Jan 2021 07:30:20 +0000
ROA not before:           Thu 14 Jan 2021 07:30:20 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24163
IP address blocks:        180.218.124.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3394 (0xd42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Jan 14 07:30:20 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=41C81D06465C6226B9F5992C173010595DBD8E40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f5:4f:4d:60:61:a0:77:67:93:16:66:37:07:
                    f6:25:d7:05:77:d7:31:ab:98:83:65:41:ec:69:40:
                    97:8c:ef:f4:b3:a9:3d:94:bb:4d:eb:45:f3:b2:db:
                    a9:a3:dd:81:79:91:10:70:91:ba:c0:9a:56:92:dc:
                    a3:ef:45:a8:ab:19:ed:9d:f2:f1:b6:11:76:be:5a:
                    3d:51:f7:bd:53:3c:db:c4:be:04:04:f9:0c:f8:7f:
                    7b:a5:5d:6d:59:c9:f7:60:b6:14:2c:c1:a1:3e:97:
                    d7:80:dc:4e:2f:01:97:2b:7d:32:46:a3:58:e2:dc:
                    7d:f7:97:60:54:38:48:9f:9b:ff:3f:a4:fe:64:d4:
                    b9:c5:90:3a:7c:65:09:04:ae:f0:a7:a9:19:45:8c:
                    77:fe:b0:f5:0d:f9:e3:7f:14:39:1e:05:fc:09:87:
                    a6:46:b9:e5:27:f1:5d:00:86:ec:cf:a3:b0:9a:bc:
                    13:57:0d:b8:af:ee:a6:33:08:3b:d5:98:ba:32:c3:
                    2d:04:1e:6c:de:52:78:d3:54:42:31:54:d7:4e:a5:
                    40:51:18:7e:27:ac:c5:a8:36:a4:5c:16:4d:be:bc:
                    0e:fb:92:6c:03:b4:d9:18:df:85:af:8d:d8:ae:24:
                    98:22:10:95:67:02:d4:a1:da:be:f9:05:86:13:0b:
                    0f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:C8:1D:06:46:5C:62:26:B9:F5:99:2C:17:30:10:59:5D:BD:8E:40
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QcgdBkZcYia59ZksFzAQWV29jkA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:32:dc:ef:30:63:39:3a:35:ee:48:68:81:3d:ad:65:91:d9:
         65:67:3a:c8:75:83:91:6d:0a:53:88:88:ec:9a:c6:27:1e:b6:
         d1:f9:b9:b7:28:b9:86:fc:34:43:9b:82:87:dc:f5:2e:5f:8b:
         35:c6:0b:c1:12:2e:18:ae:c0:f2:b4:90:fe:df:a0:09:21:2d:
         7c:f4:5d:6c:5c:1c:32:68:f9:4a:c9:ca:ac:ae:5f:75:51:24:
         47:a3:69:48:f1:42:ae:ee:37:67:75:67:a2:35:72:08:7a:a8:
         e3:39:0c:ef:5e:48:64:04:38:00:1f:17:37:9e:fe:cb:d1:b9:
         1d:61:31:a0:9a:a7:fe:de:78:41:7c:15:aa:bb:0b:ca:af:a9:
         e7:a3:94:cf:c7:01:98:3f:d5:99:69:de:54:a8:6a:c7:fc:0e:
         fe:66:ff:1a:b0:dd:5a:6f:a1:8b:86:d2:bd:08:b4:f8:29:6d:
         df:2c:3d:e6:e5:2d:33:8c:1c:c1:a4:bc:b2:ee:a2:1b:f8:76:
         74:9d:6b:18:e0:46:ed:cb:a5:7f:bc:af:24:8a:e1:b8:f0:58:
         d2:45:c5:91:81:c8:c3:e2:39:52:fa:90:49:1f:14:ff:85:97:
         4d:08:8d:52:69:45:be:65:07:52:80:a7:4c:5e:c2:5a:08:66:
         64:9c:b5:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----