Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/nKfWLUwmYe9JR8QCiPyjFfJo-O4.roa
File:                     nKfWLUwmYe9JR8QCiPyjFfJo-O4.roa (raw, json)
Hash identifier:          /z41MSpsk4BJiFwK80poOb5a8kzkM0M9yRS2W1JFfyc=
Subject key identifier:   9C:A7:D6:2D:4C:26:61:EF:49:47:C4:02:88:FC:A3:15:F2:68:F8:EE
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       131E
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/nKfWLUwmYe9JR8QCiPyjFfJo-O4.roa
Signing time:             Wed 29 Sep 2021 02:55:23 +0000
ROA not before:           Wed 29 Sep 2021 02:55:23 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24165
IP address blocks:        180.218.40.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4894 (0x131e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:55:23 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=9CA7D62D4C2661EF4947C40288FCA315F268F8EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:66:36:26:d8:dc:2d:e7:61:77:6e:fe:33:49:
                    16:d3:e1:bb:2a:40:3c:31:ab:ce:a9:21:ab:fe:0f:
                    61:82:3d:f8:7a:3d:b7:19:63:79:39:3c:46:bc:a0:
                    94:da:f5:52:d0:b2:78:7d:37:6e:32:55:48:35:75:
                    4e:c3:e3:65:d8:01:7b:57:d4:b9:64:fc:e3:25:6b:
                    83:84:bb:b5:ca:5f:25:89:ce:c6:4f:8b:46:3d:3d:
                    4d:d1:e2:54:9b:54:4e:09:39:44:be:4d:f7:cd:48:
                    21:d3:91:d4:7a:02:1e:e0:ce:68:f8:66:bf:2a:aa:
                    2e:b5:1d:f9:5b:4b:76:23:78:8e:09:c0:7e:af:e5:
                    fd:7a:54:58:82:d5:3e:50:e7:a0:a4:f2:e9:a9:93:
                    15:16:7d:7f:f4:5f:dd:0f:bd:59:7d:eb:5a:fd:ad:
                    3b:74:e4:09:06:f9:24:be:ca:af:29:cc:0b:3d:fb:
                    7e:06:1a:46:73:14:f7:74:b8:e0:16:5a:96:45:38:
                    11:fe:69:c1:ea:83:01:0f:95:cb:85:c2:f7:1d:dd:
                    43:47:4c:30:cd:bf:98:7b:0a:f7:1b:0c:7c:84:15:
                    6a:72:2a:d1:ce:ef:63:cc:61:4f:8f:f8:1d:a3:96:
                    f2:3d:d5:f2:3f:ec:22:0c:ae:28:35:aa:81:c9:c3:
                    24:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:A7:D6:2D:4C:26:61:EF:49:47:C4:02:88:FC:A3:15:F2:68:F8:EE
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/nKfWLUwmYe9JR8QCiPyjFfJo-O4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:78:ec:2f:41:02:68:1f:ab:0d:91:fe:75:f6:2a:90:2a:2e:
         d5:a6:e1:1e:fc:1d:97:ae:2f:32:4a:2a:88:d1:d7:3e:05:ce:
         33:07:56:2c:61:7f:68:69:16:37:28:1d:d0:9f:65:38:00:d9:
         28:24:70:46:9e:d1:9d:ce:e3:ff:11:2e:97:d1:d1:64:72:8a:
         01:31:ce:c2:11:c9:44:04:be:bc:be:82:5d:25:e9:0a:a6:91:
         f5:5e:1a:8e:5d:66:d7:51:e1:22:99:ce:75:a2:17:3c:61:0f:
         bb:a1:f1:74:fd:45:19:59:3c:9b:bc:e2:24:00:e8:95:db:4c:
         a3:ef:1c:48:2c:2e:dd:6b:02:3c:1c:18:d0:52:71:08:53:2e:
         8f:23:73:d9:80:67:d4:a9:e6:50:c1:62:d5:a0:18:b2:20:8c:
         db:85:76:ec:fb:f4:12:ef:a0:3b:14:d5:39:60:54:e3:4c:58:
         e2:85:09:10:ed:bb:a4:ab:f2:32:50:d7:77:49:10:cb:ee:f1:
         ff:45:9c:ce:7f:7e:81:2f:d6:e8:02:47:6b:37:db:0e:2a:30:
         e3:53:01:43:76:98:53:51:3a:d3:72:93:03:ba:c6:f1:b9:02:
         a8:26:76:19:c0:fc:3e:45:06:d6:6e:5d:95:9f:07:b1:bc:f1:
         3f:4d:9c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----