Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/eHTC-XHtvxZILKYk9h8PT6pUM1c.roa
File:                     eHTC-XHtvxZILKYk9h8PT6pUM1c.roa (raw, json)
Hash identifier:          QdsJFOhAAVI18QDJZfbEge0c4yAE67uTi1Opm2+/Dkw=
Subject key identifier:   78:74:C2:F9:71:ED:BF:16:48:2C:A6:24:F6:1F:0F:4F:AA:54:33:57
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       12EA
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/eHTC-XHtvxZILKYk9h8PT6pUM1c.roa
Signing time:             Wed 29 Sep 2021 02:55:08 +0000
ROA not before:           Wed 29 Sep 2021 02:55:08 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24164
IP address blocks:        180.218.141.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4842 (0x12ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:55:08 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=7874C2F971EDBF16482CA624F61F0F4FAA543357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e3:52:df:c6:49:b9:20:9d:4f:68:45:1b:01:
                    33:58:06:a6:4f:83:36:4e:2c:f5:86:b5:9a:b7:f5:
                    bc:46:95:82:a2:93:43:3b:12:17:77:c3:7a:b5:62:
                    80:ec:90:6d:9d:a7:33:f6:4c:37:bf:aa:a2:73:3f:
                    db:30:db:96:c3:72:cd:b6:9b:60:a0:3b:9c:f2:6e:
                    0c:b2:76:08:20:d0:82:7e:b0:e6:cb:e3:65:7a:00:
                    bc:f9:b2:52:73:fe:9c:9c:ac:66:1b:6c:7e:3d:5a:
                    20:e5:f9:de:c1:82:0b:91:9b:a1:c2:7a:08:ff:85:
                    8c:22:0c:da:61:00:62:0c:1f:e8:5a:84:46:48:0a:
                    6b:8b:28:89:c6:bb:6e:b8:42:b4:5b:44:ae:f3:00:
                    e7:9e:d3:5a:d0:64:e7:c7:d4:8c:d8:f9:01:6c:4c:
                    ac:8f:67:cf:72:64:58:39:af:d0:4d:f2:f8:17:64:
                    09:a1:fe:f7:be:ab:f4:02:72:98:a3:6b:5b:cd:39:
                    68:af:97:a4:76:f4:5c:74:02:48:eb:18:0e:22:ab:
                    d2:b0:49:90:d9:e1:f8:89:70:81:9f:07:89:13:1c:
                    f6:e7:9b:5e:9a:f7:f7:30:7b:24:a7:89:db:a2:da:
                    81:74:79:b3:88:4e:c5:59:33:c1:e9:f9:53:80:1f:
                    37:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:74:C2:F9:71:ED:BF:16:48:2C:A6:24:F6:1F:0F:4F:AA:54:33:57
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/eHTC-XHtvxZILKYk9h8PT6pUM1c.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:55:b4:89:56:b6:5b:83:7f:60:23:00:29:af:2d:a8:7b:81:
         0f:44:7f:eb:37:47:36:7a:e1:84:a9:29:85:b5:01:70:0f:4d:
         89:cb:65:d2:e2:83:bf:27:a2:80:7f:d5:1b:b5:65:c5:9f:dc:
         4d:09:42:c1:b9:fc:23:69:01:79:ca:80:6e:a5:0f:10:df:0c:
         73:9e:3b:2d:8e:d0:95:16:9d:a8:d4:ae:f2:6c:05:40:47:17:
         33:10:30:b5:91:c5:ba:fd:bc:41:23:1a:36:3b:08:0b:9b:25:
         bd:40:c7:89:b8:58:ba:32:12:ba:7f:cb:9c:85:6c:5e:a8:8e:
         a6:64:42:28:47:c3:69:32:ea:f6:0d:81:41:e5:71:a3:4c:cf:
         94:f1:f6:a2:93:2b:c2:3d:6f:f6:b8:30:cd:90:27:3d:f4:f7:
         b6:d3:17:63:f6:82:61:15:c2:0b:01:e3:3e:1b:0f:84:f4:c4:
         46:4d:83:16:89:8d:e8:bd:1f:8e:3e:a5:90:0c:5f:3a:a6:1b:
         ee:ef:c9:58:32:6c:13:9c:4c:53:17:76:6d:e7:15:a7:f7:34:
         38:de:f9:ed:60:b2:b2:4a:b8:38:f1:c5:6e:a8:fe:55:f7:94:
         2c:40:ae:7c:f8:27:5f:b9:ba:b8:3a:b4:e3:ce:e9:1c:b9:58:
         cd:2b:15:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----