Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/TCrlsaTYdrR1Bpk0TipxHagZYBM.roa
File:                     TCrlsaTYdrR1Bpk0TipxHagZYBM.roa (raw, json)
Hash identifier:          hTk7XO8tym/eO99UwMttzCskauRMEZGq3AxHPjiEWq0=
Subject key identifier:   4C:2A:E5:B1:A4:D8:76:B4:75:06:99:34:4E:2A:71:1D:A8:19:60:13
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0D19
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/TCrlsaTYdrR1Bpk0TipxHagZYBM.roa
Signing time:             Thu 14 Jan 2021 07:05:19 +0000
ROA not before:           Thu 14 Jan 2021 07:05:19 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24165
IP address blocks:        180.218.80.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3353 (0xd19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Jan 14 07:05:19 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=4C2AE5B1A4D876B4750699344E2A711DA8196013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:52:22:dc:90:ff:36:97:71:2a:e3:9f:04:6a:
                    8c:9f:3a:ff:2f:7c:a0:c5:f4:96:6f:9c:f4:87:4b:
                    00:e1:85:87:3a:2b:4b:24:a1:90:f8:33:6f:56:40:
                    50:d8:a1:28:bd:5d:91:c8:1b:40:1f:22:b5:03:e0:
                    50:60:e6:59:8b:ae:23:de:45:40:c9:7e:62:a2:40:
                    2e:b2:9d:0d:25:1d:78:ec:95:bd:54:e8:f8:81:32:
                    be:ec:c8:d5:fd:fd:ac:4d:0b:3e:ce:99:37:7f:c5:
                    81:e4:23:0d:6e:b1:f0:f3:22:36:33:91:67:aa:0a:
                    c0:3c:85:41:4c:51:84:9c:b6:99:17:27:a5:83:2b:
                    fd:16:9e:55:b0:26:77:52:f7:4c:aa:b1:2a:25:7a:
                    9d:29:4e:bf:c3:ca:d2:54:42:87:73:4c:bf:94:22:
                    8c:87:d2:62:de:ae:66:9c:ff:7c:e8:2c:97:b9:f2:
                    ab:a8:ff:d6:e8:cb:41:fd:6e:c6:b7:74:da:ab:96:
                    99:34:1b:4f:7e:73:f6:f6:63:e1:6b:f1:04:e2:7c:
                    3a:1d:58:7b:13:79:6a:14:b5:45:23:c3:05:c1:cc:
                    f3:aa:83:83:b7:2b:c4:ab:3c:60:f6:d7:dc:c9:89:
                    ed:cd:cf:e2:66:41:3b:b4:30:5f:9e:7b:75:a8:48:
                    12:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:2A:E5:B1:A4:D8:76:B4:75:06:99:34:4E:2A:71:1D:A8:19:60:13
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/TCrlsaTYdrR1Bpk0TipxHagZYBM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:99:c1:c0:98:61:54:10:7a:0e:16:88:df:0d:6f:b4:7b:5a:
         1f:b9:9f:49:ef:2c:85:ab:14:df:04:1f:f0:73:a2:61:bd:bc:
         3c:5e:b1:33:f5:32:2f:68:d9:4e:de:06:0a:77:f0:fc:ff:81:
         f8:bc:4c:aa:bc:54:ff:42:a2:bd:72:ba:c2:9a:12:f4:7b:cc:
         57:cf:14:3c:ba:a9:17:2c:be:b7:1e:3e:c0:67:87:11:d1:ac:
         d9:af:ba:f5:86:f7:67:fe:21:59:3f:f8:f1:27:46:66:3f:c5:
         b2:77:fb:26:11:b8:f5:ac:d7:8a:d1:8d:b9:c0:a9:61:3f:d4:
         65:e6:ba:4e:db:cd:c7:3d:26:96:9f:0f:f6:19:e5:c9:85:0f:
         15:2c:b3:14:8e:50:c9:7a:06:27:83:72:8f:c8:ee:cc:e8:8e:
         f5:94:ef:87:1c:54:ec:c4:96:12:63:2f:5b:3b:73:78:69:da:
         76:03:e8:66:8b:91:36:47:1c:cb:24:37:d7:05:96:ea:04:f7:
         96:bd:bf:92:77:b9:1e:0c:2c:67:60:cb:e2:bf:46:53:58:7b:
         46:c7:73:ff:0f:6b:d3:bf:fc:66:ff:31:f7:a2:a4:5d:91:37:
         8d:cf:7b:f0:2a:2c:6b:e7:5b:dc:6c:ce:3e:1b:43:42:74:fb:
         91:95:d9:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----