Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gtmsqU5I2HOSkUfRCcQpclCTja8.roa
File:                     gtmsqU5I2HOSkUfRCcQpclCTja8.roa (raw, json)
Hash identifier:          RMlRMnlnqPqqBGRUn8Xd+ZdFCQonoS0GvIQM1l4kiKU=
Subject key identifier:   82:D9:AC:A9:4E:48:D8:73:92:91:47:D1:09:C4:29:72:50:93:8D:AF
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       0D3D
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gtmsqU5I2HOSkUfRCcQpclCTja8.roa
Signing time:             Thu 14 Jan 2021 07:27:39 +0000
ROA not before:           Thu 14 Jan 2021 07:27:39 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24165
IP address blocks:        180.218.112.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3389 (0xd3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Jan 14 07:27:39 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=82D9ACA94E48D873929147D109C4297250938DAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:47:b8:d9:06:2b:fb:14:ec:91:c2:5e:5e:04:
                    ea:84:0b:ca:95:4d:e7:92:57:e4:4d:43:43:47:03:
                    5a:80:78:eb:ac:35:1a:18:7e:6e:ed:53:96:d2:e9:
                    0e:24:78:5f:9c:65:06:d2:a3:9c:c2:50:6e:25:d1:
                    bf:5c:11:52:ef:2c:55:a8:29:d8:25:a5:fc:00:15:
                    8d:fb:66:44:3c:6b:99:75:d2:b2:9d:df:e3:4b:e9:
                    59:d9:3a:3b:ee:7b:df:7f:f0:7a:d2:5a:33:45:d6:
                    ae:4a:9e:27:bf:b9:04:00:3e:cb:c1:53:57:45:85:
                    51:e3:93:21:fc:3a:f0:69:43:e9:eb:b1:ef:13:32:
                    77:ac:09:ec:40:46:84:0a:37:b0:e9:3d:08:71:e8:
                    c1:cf:f4:32:e3:11:22:7c:b3:83:cc:c0:e0:61:d5:
                    e4:78:cb:9c:3b:8e:00:d2:71:2e:71:29:89:dc:28:
                    6b:fd:13:ce:9e:c4:5c:93:e0:ee:34:87:07:a2:8e:
                    bb:6c:8b:24:14:f2:fc:43:36:a2:11:08:7b:af:92:
                    61:20:1c:73:0e:cf:25:2d:31:c6:8e:d0:de:2a:78:
                    fb:70:72:ba:e5:a8:87:b9:42:4b:88:84:77:22:36:
                    04:f6:00:e8:ba:13:5d:ab:18:07:05:29:c0:ca:00:
                    7e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:D9:AC:A9:4E:48:D8:73:92:91:47:D1:09:C4:29:72:50:93:8D:AF
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gtmsqU5I2HOSkUfRCcQpclCTja8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:a8:b2:54:8e:a9:23:81:a6:8a:cf:80:5a:f7:37:3e:4a:f3:
         6d:1b:3f:35:0b:5f:b7:52:39:86:d4:1a:79:ac:7f:7a:54:cb:
         91:d8:63:0b:8c:a8:0b:ee:a7:2b:29:59:9f:e6:c6:fb:81:34:
         dc:12:32:bb:89:37:28:e9:cd:ff:58:4f:ff:6f:fd:55:e0:3d:
         0c:41:9e:71:2f:d2:b1:5a:2d:89:dc:4f:41:cc:62:04:23:c8:
         3e:a2:bf:07:dd:9e:cb:f8:0b:ae:3b:0d:55:83:72:67:a0:56:
         10:a1:d0:72:37:a0:a2:e9:3f:f4:e0:83:e3:a7:1a:1a:05:6c:
         dc:08:84:58:1b:44:40:30:f2:41:94:55:f8:a7:7c:65:4d:84:
         d3:c7:e1:c9:79:69:33:eb:b2:c3:36:08:99:ac:69:89:d8:e4:
         ee:bb:75:81:bc:de:40:c3:66:a7:3a:fe:79:97:8e:b5:59:52:
         a5:d0:6b:41:4a:4a:db:27:37:ce:3b:f7:b8:2f:ca:93:1b:9e:
         10:17:94:bc:aa:fa:5d:22:92:7c:6a:ba:cc:87:de:1f:e7:77:
         21:9e:5d:68:21:80:39:ab:a5:c5:2a:0e:a0:60:f2:4a:a4:a8:
         10:26:24:56:81:24:10:db:68:8e:1b:bb:e0:be:82:1e:7d:d5:
         0f:bd:cb:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----