Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lbKt0UPOMHGR4dz2rw6brMBs8uE.roa
File:                     lbKt0UPOMHGR4dz2rw6brMBs8uE.roa (raw, json)
Hash identifier:          ODb5Xqy2m0CPWjMD98Dsqs7DjRokdCmxmTpE6LhCS3E=
Subject key identifier:   95:B2:AD:D1:43:CE:30:71:91:E1:DC:F6:AF:0E:9B:AC:C0:6C:F2:E1
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       135C
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lbKt0UPOMHGR4dz2rw6brMBs8uE.roa
Signing time:             Wed 29 Sep 2021 02:55:41 +0000
ROA not before:           Wed 29 Sep 2021 02:55:41 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24163
IP address blocks:        180.218.247.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4956 (0x135c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:55:41 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=95B2ADD143CE307191E1DCF6AF0E9BACC06CF2E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f1:cb:f3:4f:96:b0:2d:30:5e:1b:0c:73:ff:
                    1f:46:64:1b:31:e1:4c:fa:6a:ed:e4:c0:e7:ed:fc:
                    83:c1:0a:be:72:ba:87:a1:82:24:1c:cb:16:b5:58:
                    ee:9c:1d:40:49:10:39:c4:56:b4:e1:6b:f1:d7:23:
                    36:d6:50:5d:10:8d:0b:12:b2:f4:f8:c5:52:5f:39:
                    5b:11:21:55:1a:cf:0e:82:91:3c:da:2e:28:47:0f:
                    fe:2f:72:30:a9:4a:f3:9e:e3:99:b6:2b:76:9c:71:
                    25:1f:22:9f:f1:45:d2:11:fe:6d:28:7c:24:45:c5:
                    b1:2b:57:d3:e7:88:1d:dd:3b:bc:49:5d:85:67:5f:
                    92:ae:de:f0:75:69:03:e3:d8:bd:51:aa:25:80:0e:
                    6d:81:01:96:21:3d:dc:b6:3e:9a:a1:ab:c7:b1:e3:
                    f8:d9:a0:71:e0:08:92:4a:af:82:39:21:54:17:37:
                    5e:1b:32:42:ed:99:a3:21:1e:70:30:65:50:38:b3:
                    e2:09:6b:9a:4c:12:b1:c9:d5:ee:c6:0b:57:a7:da:
                    c6:cf:de:ac:26:2c:31:19:1b:73:44:e7:2a:59:bb:
                    e5:0f:0c:4c:60:f2:0d:da:53:c6:46:43:57:88:01:
                    f5:6c:a8:7d:93:11:df:eb:fb:18:8f:af:b9:8b:12:
                    a3:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:B2:AD:D1:43:CE:30:71:91:E1:DC:F6:AF:0E:9B:AC:C0:6C:F2:E1
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lbKt0UPOMHGR4dz2rw6brMBs8uE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:8b:12:50:e8:a7:2b:92:81:f2:0e:e9:c3:00:70:61:f8:fa:
         8f:fb:3b:c4:a6:a6:e9:7f:13:42:a2:1d:a2:f6:53:39:4f:91:
         b4:7d:48:9d:ca:c5:1c:e6:c1:c0:75:f3:0e:9d:b2:4a:b7:6a:
         a7:c1:b5:e8:c8:64:89:90:de:ac:7f:d0:b9:ac:11:79:02:79:
         d8:5f:36:f9:c8:e7:cc:9e:c5:fb:38:f8:59:a4:f1:eb:b0:8f:
         27:af:93:5a:a5:29:27:e9:e0:5d:00:38:60:00:3e:e2:41:5e:
         d2:25:a5:fc:7e:20:e0:1c:a3:5d:ee:3c:e7:21:00:30:62:60:
         59:51:33:90:23:84:8f:42:97:f2:71:98:3a:15:07:e8:60:1d:
         28:a3:26:f6:6f:c0:40:75:cb:10:f9:cf:43:fe:63:e2:cd:79:
         c3:b1:7b:48:e5:45:76:8e:2b:a8:9f:32:05:63:8d:d4:6d:d5:
         3e:06:b7:80:28:05:57:1e:f4:c4:f5:21:4e:72:df:ec:83:1c:
         b3:11:5a:ef:70:da:6c:bd:3f:e9:8b:3d:12:4f:5d:6b:9c:31:
         45:a2:18:b7:45:ad:cf:4d:d1:1a:45:9a:27:0f:0a:dc:d6:46:
         be:64:6a:01:60:a8:b3:9e:37:67:b2:cf:c1:45:f8:03:1e:9c:
         af:30:72:6f
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICE1wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTA5Mjkw
MjU1NDFaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDk1QjJBREQxNDNDRTMw
NzE5MUUxRENGNkFGMEU5QkFDQzA2Q0YyRTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC38cvzT5awLTBeGwxz/x9GZBsx4Uz6au3kwOft/IPBCr5yuoeh
giQcyxa1WO6cHUBJEDnEVrTha/HXIzbWUF0QjQsSsvT4xVJfOVsRIVUazw6CkTza
LihHD/4vcjCpSvOe45m2K3accSUfIp/xRdIR/m0ofCRFxbErV9PniB3dO7xJXYVn
X5Ku3vB1aQPj2L1RqiWADm2BAZYhPdy2Ppqhq8ex4/jZoHHgCJJKr4I5IVQXN14b
MkLtmaMhHnAwZVA4s+IJa5pMErHJ1e7GC1en2sbP3qwmLDEZG3NE5ypZu+UPDExg
8g3aU8ZGQ1eIAfVsqH2TEd/r+xiPr7mLEqOXAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUlbKt0UPOMHGR4dz2rw6brMBs8uEwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2xiS3QwVVBPTUhHUjRkejJy
dzZick1Cczh1RS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC0
2vcwDQYJKoZIhvcNAQELBQADggEBAFaLElDopyuSgfIO6cMAcGH4+o/7O8Smpul/
E0KiHaL2UzlPkbR9SJ3KxRzmwcB18w6dskq3aqfBtejIZImQ3qx/0LmsEXkCedhf
NvnI58yexfs4+Fmk8euwjyevk1qlKSfp4F0AOGAAPuJBXtIlpfx+IOAco13uPOch
ADBiYFlRM5AjhI9Cl/JxmDoVB+hgHSijJvZvwEB1yxD5z0P+Y+LNecOxe0jlRXaO
K6ifMgVjjdRt1T4Gt4AoBVce9MT1IU5y3+yDHLMRWu9w2my9P+mLPRJPXWucMUWi
GLdFrc9N0RpFmicPCtzWRr5kagFgqLOeN2eyz8FF+AMenK8wcm8=
-----END CERTIFICATE-----