Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lhdvS-TPJU-rSRlvmSdqTdEvuYg.roa
File:                     lhdvS-TPJU-rSRlvmSdqTdEvuYg.roa (raw, json)
Hash identifier:          ln22PO0D6S6I1J6R2GhqtCOVtpBvfRKo1kkzaYef8O4=
Subject key identifier:   96:17:6F:4B:E4:CF:25:4F:AB:49:19:6F:99:27:6A:4D:D1:2F:B9:88
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       135D
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lhdvS-TPJU-rSRlvmSdqTdEvuYg.roa
Signing time:             Wed 29 Sep 2021 02:55:41 +0000
ROA not before:           Wed 29 Sep 2021 02:55:41 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24163
IP address blocks:        180.218.249.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4957 (0x135d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:55:41 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=96176F4BE4CF254FAB49196F99276A4DD12FB988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0a:e6:8a:50:92:8b:f7:7c:80:bb:23:22:52:
                    72:18:98:3f:e4:8b:c5:95:6b:4d:8c:ca:4f:a7:f5:
                    a7:54:59:e9:e5:43:4d:f5:37:c3:b4:db:07:38:41:
                    00:d7:06:3f:ad:1f:5c:4a:4e:6a:f3:7e:5a:66:4b:
                    72:4a:97:d6:8c:c8:19:e0:91:10:b1:8b:aa:d2:4d:
                    57:c5:ed:2e:19:09:64:32:db:d8:be:35:f0:38:db:
                    42:62:dd:ae:9b:37:40:ba:85:ed:d9:a5:e7:7a:27:
                    b9:91:b7:d0:57:97:f0:4c:1e:d5:c9:cc:3c:a2:9d:
                    df:54:4c:e5:06:1e:4a:b0:14:96:6b:b2:00:2d:d9:
                    07:b8:80:b1:24:78:82:01:8d:55:c9:82:c1:93:e3:
                    c9:5b:d4:39:10:ea:b5:f5:28:32:8d:4a:0f:14:b3:
                    23:52:4a:96:e7:0a:92:b6:13:82:17:a8:54:26:46:
                    e8:f7:bc:2e:0a:89:7c:0b:e1:7e:0c:5e:04:80:73:
                    e3:67:b6:54:1a:c0:d5:d4:bc:4d:53:50:fe:e2:19:
                    b1:88:4a:d5:06:a6:29:08:11:81:08:c3:0b:cd:60:
                    fa:49:a4:12:cf:6b:37:f3:e3:03:96:84:dd:a2:4a:
                    f2:ee:28:ac:ea:1b:2f:09:91:61:ea:84:aa:b6:f6:
                    7c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:17:6F:4B:E4:CF:25:4F:AB:49:19:6F:99:27:6A:4D:D1:2F:B9:88
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lhdvS-TPJU-rSRlvmSdqTdEvuYg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:71:0a:fe:03:c1:db:ce:c3:65:0c:f1:0a:75:e6:46:7c:7b:
         62:a0:74:a7:20:43:f4:ba:be:d2:df:e0:f0:c5:cb:91:a8:2d:
         4b:b7:33:71:17:5d:de:5f:39:83:d0:6c:a1:06:f7:69:b2:e8:
         a4:0c:7b:11:fc:2b:05:fc:a9:94:9a:e2:25:1d:f3:c3:d3:16:
         6b:fe:7a:d6:d0:0a:37:59:2e:2a:01:23:a9:be:bd:81:aa:90:
         c6:c2:14:c1:82:4d:e9:a0:fb:19:39:a2:a0:b1:c1:61:c1:ac:
         29:a9:59:c0:70:48:c0:0a:e4:da:d9:7f:3a:5d:4a:78:88:70:
         4f:ff:2d:c6:45:cd:77:5b:65:cd:36:1e:af:0c:be:6c:6b:28:
         e6:6a:52:c0:08:b4:89:b3:2e:9d:a0:e5:c1:41:9a:0a:8d:7e:
         36:d3:8e:25:b6:71:d3:53:73:e7:00:b9:8c:c4:d9:b1:0c:6d:
         45:df:63:7b:c5:30:9a:23:f8:c2:a8:7e:ca:a2:ab:a6:b3:dc:
         ab:8f:d4:82:72:ac:b2:78:15:fb:16:3c:28:23:41:f7:a7:df:
         a6:9b:c2:c6:9b:85:40:ba:ec:74:0e:ab:f4:ed:e6:97:a0:66:
         d7:80:ce:3c:2b:16:69:ee:9d:8b:82:d0:93:f7:ee:6d:0b:19:
         1f:13:f8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----