Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/RUif3xpya1tPuSsjZE8kRJ3RULg.roa
File:                     RUif3xpya1tPuSsjZE8kRJ3RULg.roa (raw, json)
Hash identifier:          lwr3Mw+bBFCGv3WMYFzPhlb05wSZ/ySXhDOWuZyngeo=
Subject key identifier:   45:48:9F:DF:1A:72:6B:5B:4F:B9:2B:23:64:4F:24:44:9D:D1:50:B8
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       12E9
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/RUif3xpya1tPuSsjZE8kRJ3RULg.roa
Signing time:             Wed 29 Sep 2021 02:55:08 +0000
ROA not before:           Wed 29 Sep 2021 02:55:08 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24164
IP address blocks:        180.218.140.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4841 (0x12e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:55:08 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=45489FDF1A726B5B4FB92B23644F24449DD150B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8f:0b:3c:f2:51:9d:3e:7a:b7:13:63:5f:50:
                    2a:b7:9e:37:71:17:77:c6:b8:31:f0:4c:ab:f6:c3:
                    29:88:fb:2a:f0:ae:f8:24:4d:25:d7:0d:64:09:f2:
                    15:a3:f6:f4:12:15:2b:94:1f:79:0b:ed:ea:45:42:
                    95:a0:36:8a:f5:4b:e9:bc:3b:fb:b7:f4:15:7b:4f:
                    84:ba:7f:01:d5:5e:de:80:a8:b3:af:dc:b2:64:4f:
                    85:ef:bc:d3:80:cc:77:05:7e:21:fb:bb:d2:92:40:
                    c9:6b:e8:be:34:44:57:c8:5e:6d:79:de:9b:c5:ad:
                    05:b5:c0:29:22:51:9d:54:f4:ea:ab:12:ef:27:20:
                    52:5c:db:7e:37:9f:20:74:71:21:8a:bf:7b:16:8a:
                    c1:3d:c4:17:b9:83:32:df:40:14:32:c3:70:f4:4d:
                    29:3c:45:cc:3a:fc:5e:cc:bd:67:f9:6c:af:d9:9c:
                    f7:3a:30:cf:ef:fa:c8:eb:c8:61:3e:01:2b:57:74:
                    ed:65:8a:21:2b:79:83:99:3f:a7:af:2d:d8:17:9f:
                    77:c0:cd:0f:f2:4c:87:2d:97:b3:f7:3b:c7:5f:9a:
                    8b:cf:14:7e:ed:c1:23:f6:e5:3b:be:ea:53:68:fe:
                    fd:c8:f1:91:49:ac:69:4c:64:51:55:88:9a:c9:a9:
                    0d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:48:9F:DF:1A:72:6B:5B:4F:B9:2B:23:64:4F:24:44:9D:D1:50:B8
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/RUif3xpya1tPuSsjZE8kRJ3RULg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:c2:3a:b8:2f:ea:45:6a:fb:7e:70:9c:60:01:c7:c5:c2:ba:
         d9:2a:eb:5b:7f:df:0e:b9:03:e3:9f:9c:04:00:30:e1:37:57:
         19:17:ed:31:d6:f2:d6:bd:f2:ee:f6:1b:9d:38:76:32:2e:fb:
         3f:37:72:e7:2e:c3:79:77:80:50:30:1e:8a:30:87:e7:0f:85:
         0a:19:86:24:49:03:f0:a6:84:d2:21:19:76:0b:3a:c1:6c:60:
         41:d1:64:40:b8:fe:bf:30:63:55:c8:f4:26:16:43:c5:fa:28:
         77:fd:63:6f:d3:bf:23:b9:f0:53:37:ba:8e:14:13:c9:77:2f:
         ba:d4:15:dd:39:10:93:bf:f6:07:37:b8:26:5b:21:b2:3f:45:
         b8:3e:0e:d6:8a:7f:b7:90:f5:d0:50:f8:de:44:51:34:af:d9:
         98:17:73:f4:4f:0c:c7:d0:26:b6:4e:aa:95:ac:22:e6:f1:34:
         66:43:cc:03:e6:94:9e:2b:2e:2c:95:79:aa:72:e1:05:9c:02:
         b9:7d:31:29:6e:cc:13:5d:dd:53:0e:48:b5:73:d3:d0:78:ec:
         fd:04:37:d0:b6:3f:be:d3:07:5d:83:23:8e:6b:b2:40:ea:6e:
         05:25:84:08:f5:b8:1b:30:65:02:d5:fb:4b:e8:e5:37:6e:da:
         66:26:c6:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----