Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WlUXG9v3lrslkIpRSsXKpppSiGA.roa
File:                     WlUXG9v3lrslkIpRSsXKpppSiGA.roa (raw, json)
Hash identifier:          7mLOwUGJXQq6VA8HZr4ZzGDPpkc10FzzBpAIeCY0PXs=
Subject key identifier:   5A:55:17:1B:DB:F7:96:BB:25:90:8A:51:4A:C5:CA:A6:9A:52:88:60
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       134E
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WlUXG9v3lrslkIpRSsXKpppSiGA.roa
Signing time:             Wed 29 Sep 2021 02:55:36 +0000
ROA not before:           Wed 29 Sep 2021 02:55:36 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24164
IP address blocks:        119.77.180.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4942 (0x134e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:55:36 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=5A55171BDBF796BB25908A514AC5CAA69A528860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c4:e7:e2:f7:da:b3:ea:ed:a1:8c:8d:f8:9a:
                    7f:ac:d0:4b:04:90:38:26:23:15:c8:fd:9a:af:05:
                    02:07:0d:8f:0d:77:7d:3d:ba:47:f6:3b:d9:44:e1:
                    b9:27:65:85:2c:13:ca:fe:83:b7:90:24:6b:fa:1e:
                    a1:ab:6c:6b:36:ec:c0:0c:11:3b:2c:7d:06:10:41:
                    5f:ed:16:75:8e:05:ee:14:e9:b6:af:89:84:1f:c8:
                    3d:3b:07:3d:c7:8e:36:6e:cf:43:2f:67:5b:f3:38:
                    24:31:2d:88:39:39:3d:f9:10:5b:0f:c9:be:98:c0:
                    bf:25:5e:93:06:be:7b:0e:7f:56:e6:86:8a:58:fa:
                    25:c3:da:11:bf:43:3e:7b:43:a2:50:20:d5:e0:ba:
                    3c:76:e3:db:25:7a:f1:ac:20:eb:64:da:12:fc:06:
                    ac:12:1d:41:3e:2e:a3:86:0b:21:0f:68:d3:e6:4b:
                    00:2a:dc:94:c4:59:8a:50:31:0c:cb:6f:15:08:e3:
                    b4:b5:54:1c:63:cf:e0:6d:00:aa:c7:f0:b2:69:f0:
                    51:23:f0:de:0a:42:91:82:fa:d4:56:97:b4:75:e3:
                    ac:17:b2:bf:63:fe:f3:39:ec:92:6a:f3:0c:63:3d:
                    d5:dc:66:84:55:6a:01:12:df:cd:56:c9:bc:2d:c6:
                    3f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:55:17:1B:DB:F7:96:BB:25:90:8A:51:4A:C5:CA:A6:9A:52:88:60
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WlUXG9v3lrslkIpRSsXKpppSiGA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.77.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:ed:5b:46:d0:3e:63:7e:69:48:0e:29:46:22:c9:33:66:05:
         b3:bf:46:8e:e8:cc:7d:a5:38:9c:03:1c:d2:c6:02:ef:f0:55:
         d7:c8:c6:b0:76:d5:30:58:42:6f:aa:51:80:de:18:9d:91:a6:
         cd:76:f9:df:39:2e:c7:42:01:4c:e1:98:b2:6c:4e:54:8b:14:
         9e:6c:a2:05:60:8d:0b:cd:85:ff:d2:ad:57:65:ae:9f:9f:1a:
         70:52:21:a8:d0:4f:b0:0f:6b:48:90:36:ce:80:88:e2:93:44:
         a5:e8:bb:8f:c9:97:7e:3c:d3:f7:e1:40:31:07:4e:8c:cf:3f:
         8a:45:0e:43:bd:dd:e9:76:a4:0c:09:7e:82:f0:43:52:b5:fd:
         d7:37:47:91:13:89:7a:a1:8a:67:f7:f1:31:99:b4:6c:12:90:
         9a:42:d2:bb:f2:cb:be:47:e6:01:b1:37:01:9e:46:c7:e8:82:
         e9:ff:da:63:74:41:22:9f:17:e3:b2:05:61:da:c1:60:2d:38:
         32:c0:f5:b1:73:00:e3:29:b5:fa:28:69:6d:a3:41:48:55:e8:
         28:0a:0f:5b:8d:6a:8f:33:c0:49:d3:8a:3b:ff:d4:51:8c:7c:
         b0:38:5f:42:e9:1c:1a:9c:97:b9:1d:d2:bc:a5:93:1a:4d:b3:
         cb:19:f5:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----