Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Wva0KPFM37WsU6Rg2ARy0bYPThk.roa
File:                     Wva0KPFM37WsU6Rg2ARy0bYPThk.roa (raw, json)
Hash identifier:          x/HMLJNDvgk/Kx7mYrPoa/1QNnaatng4DAQbvzXf8Ps=
Subject key identifier:   5A:F6:B4:28:F1:4C:DF:B5:AC:53:A4:60:D8:04:72:D1:B6:0F:4E:19
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1055
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Wva0KPFM37WsU6Rg2ARy0bYPThk.roa
Signing time:             Sun 07 Feb 2021 12:44:14 +0000
ROA not before:           Sun 07 Feb 2021 12:44:14 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24164
IP address blocks:        180.218.148.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4181 (0x1055)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb  7 12:44:14 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=5AF6B428F14CDFB5AC53A460D80472D1B60F4E19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e4:30:a0:01:41:1a:74:cb:49:19:9d:01:3f:
                    50:a6:5e:f8:c5:82:3f:63:9a:ab:f6:1c:9a:c7:bc:
                    92:a5:be:0e:fa:78:6b:0c:4f:cf:3f:7f:00:1e:e5:
                    cf:9e:dd:03:d5:7f:e8:df:f7:a0:51:5f:dd:cc:c4:
                    e1:6f:1f:3f:0b:a5:f9:c1:8a:0d:2e:31:3d:71:87:
                    d6:96:66:21:52:53:fc:dd:ec:c7:7e:71:4e:53:ce:
                    ee:43:d7:85:b4:98:9d:7c:b2:3c:be:a5:96:2c:2b:
                    c6:b0:f6:d8:8c:3d:82:f9:ff:82:2c:22:2b:0d:ff:
                    1a:65:94:3c:d0:14:ce:a4:aa:bf:d4:6e:f8:4d:4b:
                    5a:76:47:02:5e:50:44:41:4c:52:0d:f6:b7:5b:bb:
                    52:e0:ba:7d:75:7e:15:12:92:2e:58:ad:fa:40:f6:
                    24:3a:bb:d1:67:88:9d:c1:cd:1e:3e:f2:64:85:1a:
                    bf:64:3c:3d:f8:e4:f8:f3:e8:1f:17:cf:31:52:c0:
                    12:2e:47:aa:f5:e0:88:b6:a1:fb:6a:38:8a:e5:de:
                    1e:a3:51:41:57:51:f0:da:0b:dc:59:22:3e:fb:fb:
                    16:6b:0b:31:6f:1d:83:c5:3a:8e:e2:24:80:8f:fa:
                    63:73:9e:fd:29:31:d8:aa:dd:19:c7:86:d9:44:b6:
                    f0:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F6:B4:28:F1:4C:DF:B5:AC:53:A4:60:D8:04:72:D1:B6:0F:4E:19
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Wva0KPFM37WsU6Rg2ARy0bYPThk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:6e:2e:61:80:d7:a1:46:7a:9b:1a:e4:6b:6a:d1:f7:96:52:
         c5:52:af:0a:21:c6:e2:7e:4a:bd:e8:86:87:5c:4d:9d:74:f6:
         64:cc:22:42:d0:48:c2:ae:22:3b:9f:81:32:8e:2c:a6:e7:9c:
         08:05:d6:62:25:17:d6:bf:f4:23:be:f5:a9:ad:86:a9:16:56:
         69:82:e2:9b:07:59:31:99:f5:e6:18:b0:85:2c:41:0b:34:7a:
         d5:7a:f5:9d:39:be:9a:97:5d:d4:75:71:c1:3b:23:f2:5a:7e:
         b2:1c:bd:20:06:da:4f:99:7c:68:a1:e6:4c:5d:40:52:47:6a:
         f7:5f:00:e6:e7:86:07:2c:dd:09:74:7c:7a:ea:72:f1:01:07:
         a6:d3:01:15:b6:d1:06:21:f9:b3:42:58:e9:7d:66:88:60:04:
         26:fb:7c:af:21:57:29:00:dd:87:b2:75:9b:15:f4:22:2e:b8:
         77:4e:bf:4b:ae:c0:6c:90:0b:d0:a2:b7:b0:48:1c:e3:38:a9:
         a5:b2:9d:57:3a:c7:e6:83:47:2e:56:5e:15:1e:ec:58:2c:4a:
         ac:4d:87:41:0d:c0:dd:46:40:43:93:d7:96:d0:24:62:6b:cd:
         84:f1:a5:71:86:0c:4d:8e:43:8e:88:2f:bd:63:bf:41:fd:6d:
         7f:b1:66:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----