Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Ry2dq6uQQz55s6G1xXCHkOH0yTA.roa
File:                     Ry2dq6uQQz55s6G1xXCHkOH0yTA.roa (raw, json)
Hash identifier:          5WJSgrhB/DJIWOwDRa2uV5cb14XyWeLTaeEbPchzXik=
Subject key identifier:   47:2D:9D:AB:AB:90:43:3E:79:B3:A1:B5:C5:70:87:90:E1:F4:C9:30
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1356
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Ry2dq6uQQz55s6G1xXCHkOH0yTA.roa
Signing time:             Wed 29 Sep 2021 02:55:39 +0000
ROA not before:           Wed 29 Sep 2021 02:55:39 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24165
IP address blocks:        180.218.104.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4950 (0x1356)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:55:39 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=472D9DABAB90433E79B3A1B5C5708790E1F4C930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:10:7c:3e:dc:d8:a5:6e:be:b6:77:80:0d:ea:
                    cc:4b:6b:2d:b9:be:c2:47:1c:ac:f6:a4:28:96:67:
                    b8:8f:c5:f5:2a:a1:38:23:ec:43:70:c4:b8:0d:73:
                    dd:a9:9e:40:bf:fd:bf:7f:f5:0f:e5:b3:f4:79:01:
                    d3:ef:ee:96:15:83:d8:47:b3:de:6e:75:85:51:1e:
                    1e:ce:3e:41:0d:b3:cc:8d:d1:65:f0:cd:c2:3f:fd:
                    5c:73:21:35:91:01:8e:c1:b1:24:99:f6:29:4e:c2:
                    af:57:01:0c:37:2b:65:04:3c:b4:d7:71:ce:61:1d:
                    7e:92:59:f7:11:ff:36:99:9d:fc:ef:86:81:21:88:
                    c1:c4:c3:8e:9e:e2:e2:91:46:4f:12:aa:36:74:2a:
                    57:69:0e:81:1a:86:06:72:b3:99:54:bd:11:dc:e8:
                    7c:e3:db:0f:3a:d7:17:93:08:27:69:e7:27:73:dc:
                    78:c8:19:17:9b:60:f4:67:94:d7:63:7c:04:53:f9:
                    9b:60:56:ec:cd:c4:7c:e8:b1:b9:0c:59:64:cf:1e:
                    8e:23:09:5d:c4:05:da:ed:31:c2:eb:6a:c0:67:52:
                    a1:4b:ee:85:24:34:55:d5:66:21:19:2a:08:d3:f1:
                    4d:54:5e:58:c3:a0:c9:ad:8e:9a:2d:4e:6a:93:15:
                    c6:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:2D:9D:AB:AB:90:43:3E:79:B3:A1:B5:C5:70:87:90:E1:F4:C9:30
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Ry2dq6uQQz55s6G1xXCHkOH0yTA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:1a:1c:0d:79:22:30:e7:8f:42:cd:76:66:19:bb:0d:e4:88:
         f3:74:07:e3:41:ba:b4:f6:4e:bc:28:7f:33:4a:e8:64:82:48:
         fc:a7:fe:5b:70:71:3b:48:f0:88:c7:1c:b6:d9:2e:f9:b8:27:
         05:00:10:74:89:a5:a8:60:50:29:a1:33:6e:05:53:65:d8:52:
         b5:34:6c:22:1a:b6:e9:8e:18:ea:f4:b9:f8:84:16:6e:f2:6c:
         22:0b:5f:13:10:98:62:a0:cc:68:a5:3d:f0:59:e9:e5:14:dc:
         82:e5:36:7b:08:95:25:1f:89:1f:cb:da:2d:6c:27:03:67:ee:
         2d:5e:3d:ba:b3:61:4f:62:5a:47:9a:4f:19:57:62:ba:b6:7b:
         12:30:d1:9a:88:1d:37:81:8c:b2:42:0f:67:56:ec:69:31:3c:
         0b:da:44:aa:36:bc:cb:8e:bf:07:7e:c5:1b:c2:7a:fc:7d:23:
         4e:35:82:24:35:20:a1:75:fc:6f:5f:fa:7b:9a:db:02:76:a3:
         5c:2d:75:05:c3:24:48:76:4c:2f:8a:26:d1:e0:6b:63:4e:3b:
         8d:4f:96:92:d7:01:af:b3:55:aa:71:6f:3d:74:df:50:fc:9c:
         5f:f6:73:5e:af:07:aa:3f:dc:0b:9c:ed:57:4c:5a:be:a6:8c:
         23:ea:67:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----