Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/h6xmEEg4jhV68Udz4GwTcKVe1Yk.roa
File:                     h6xmEEg4jhV68Udz4GwTcKVe1Yk.roa (raw, json)
Hash identifier:          iYTE+krY9xaLbl5Q0Blpp4jT0LHxqna4VxWxyUV8NQw=
Subject key identifier:   87:AC:66:10:48:38:8E:15:7A:F1:47:73:E0:6C:13:70:A5:5E:D5:89
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       131F
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/h6xmEEg4jhV68Udz4GwTcKVe1Yk.roa
Signing time:             Wed 29 Sep 2021 02:55:23 +0000
ROA not before:           Wed 29 Sep 2021 02:55:23 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24165
IP address blocks:        180.218.44.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4895 (0x131f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:55:23 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=87AC661048388E157AF14773E06C1370A55ED589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7e:75:5f:62:0a:e6:c6:c2:a5:38:6e:2c:2e:
                    38:e0:8f:d5:74:c0:1b:0a:12:cf:59:03:61:c0:ae:
                    2a:80:37:b4:81:3d:ec:4b:0e:ed:11:83:39:96:16:
                    0b:34:4f:f8:85:4f:d2:77:74:1b:e2:fc:6e:06:c7:
                    5f:5a:25:ec:00:ea:7d:b9:0c:49:ab:61:6b:69:77:
                    2f:9e:28:12:73:ad:c5:6a:ad:bf:4e:22:53:63:2a:
                    6a:c9:6a:b1:51:68:d8:6f:f0:37:8d:06:c3:6c:bb:
                    2a:5c:a8:1c:f9:cf:ed:5c:24:bd:81:ca:8e:ae:44:
                    cd:f8:d8:59:3d:20:01:b1:a0:33:37:24:97:41:0f:
                    12:b7:70:18:ba:fe:3b:f4:db:49:4c:b3:4e:55:fc:
                    34:d8:c0:e0:8d:39:fd:19:3e:39:68:b5:52:87:08:
                    78:2f:fa:f0:41:cc:23:07:42:dc:19:4d:47:c2:f4:
                    7f:6a:b8:80:f6:3b:b7:98:e5:1b:6e:8e:aa:8b:68:
                    85:6b:e6:3f:e4:4f:7d:17:1a:47:b6:23:03:ee:2d:
                    12:49:f8:cd:51:7c:45:1a:d6:18:b9:2e:a0:28:8e:
                    b6:27:bf:4c:db:1b:ef:26:c5:89:f8:44:4d:f2:4c:
                    14:34:86:2f:2c:ab:c6:3f:f1:a4:12:9d:56:39:d4:
                    a1:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:AC:66:10:48:38:8E:15:7A:F1:47:73:E0:6C:13:70:A5:5E:D5:89
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/h6xmEEg4jhV68Udz4GwTcKVe1Yk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:92:db:0b:11:b8:ad:31:b0:ff:e8:a9:3f:ef:32:01:e5:79:
         08:cc:87:58:a7:98:c8:55:8e:cc:b8:ec:9b:96:c4:7c:2b:5a:
         66:f3:b2:4a:13:7e:55:64:46:d9:13:5a:2c:c1:e6:27:cf:1e:
         72:a3:a6:13:1b:a4:43:71:c7:44:b0:64:80:cd:ee:40:30:2a:
         93:34:9e:bc:28:25:87:aa:92:70:2a:97:2c:c8:ff:51:6e:e0:
         55:07:53:e5:c1:c3:f6:9f:67:61:0e:db:7f:c1:b2:25:86:26:
         1f:e7:5e:82:e1:58:ae:a3:26:34:17:3b:d2:e7:ea:d8:21:ff:
         6f:da:0d:5f:58:3c:09:38:39:d4:b9:3d:0d:66:08:c2:93:bf:
         9d:8e:2a:2d:be:6d:3f:03:da:1e:54:69:8b:01:b5:16:e1:ea:
         43:7b:e9:7e:ae:65:e0:14:6b:34:40:8a:5b:df:1e:43:9c:09:
         c7:77:7e:61:21:3f:85:2f:a1:ea:29:42:57:84:34:fe:ab:d5:
         6d:ee:e7:39:6a:80:67:db:72:c2:ec:48:ba:f6:3b:b0:e2:ae:
         a0:f4:91:fa:78:90:a8:21:f6:99:50:f0:01:97:fa:e6:50:75:
         f8:59:37:76:fd:a9:c6:64:3f:99:6a:d7:23:79:b1:4e:57:9d:
         30:23:0f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----