Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/oCYl4uxTpMPRP33jNdqz4cDJQPE.roa
File:                     oCYl4uxTpMPRP33jNdqz4cDJQPE.roa (raw, json)
Hash identifier:          e/HCZXCHL6hw9kcaj0C/AehHxg2K0Sm3Ap48Qiuow08=
Subject key identifier:   A0:26:25:E2:EC:53:A4:C3:D1:3F:7D:E3:35:DA:B3:E1:C0:C9:40:F1
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1139
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/oCYl4uxTpMPRP33jNdqz4cDJQPE.roa
Signing time:             Sun 07 Feb 2021 13:14:28 +0000
ROA not before:           Sun 07 Feb 2021 13:14:28 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24163
IP address blocks:        180.218.247.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4409 (0x1139)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb  7 13:14:28 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=A02625E2EC53A4C3D13F7DE335DAB3E1C0C940F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b6:fe:6f:71:24:f2:46:03:73:de:61:26:e8:
                    ad:fc:08:1c:45:3c:88:71:56:64:ca:87:ad:90:1d:
                    c0:32:24:91:73:6d:e8:2b:6b:d5:35:53:f5:64:df:
                    bd:12:66:21:9d:84:54:e1:ba:1f:49:3d:11:05:28:
                    dd:4a:7b:65:9d:af:33:98:6b:94:ee:42:8d:fa:31:
                    0a:32:f2:e6:9c:36:a1:43:e5:e6:80:24:3e:7b:00:
                    89:21:68:55:dd:12:b8:64:c0:33:de:71:56:b2:2d:
                    e4:ba:00:d9:9f:e3:6c:b6:91:ad:dd:e9:6e:1c:ab:
                    8e:5c:b3:71:1e:e3:12:71:2e:d7:d7:03:20:bb:bd:
                    4a:52:c5:b9:64:f6:c2:9e:66:94:c5:68:48:b6:a8:
                    b8:1f:98:d4:ee:79:1c:4d:6e:78:ec:1d:68:90:b9:
                    49:ce:2e:2d:11:1c:65:c6:f0:7e:c8:3b:87:5c:90:
                    ab:5a:dc:6a:6c:69:70:4c:32:82:ff:03:1b:b9:3a:
                    2a:74:84:bd:1d:5d:a4:ac:09:13:29:e1:3f:56:18:
                    1c:ae:2f:5b:2f:9b:ae:43:48:b8:8d:ec:21:77:8f:
                    6a:14:b6:26:94:23:5d:b7:28:66:94:0c:64:fa:63:
                    62:60:86:47:13:c8:ef:de:e9:42:f7:12:40:3c:a6:
                    17:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:26:25:E2:EC:53:A4:C3:D1:3F:7D:E3:35:DA:B3:E1:C0:C9:40:F1
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/oCYl4uxTpMPRP33jNdqz4cDJQPE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:ab:39:18:f7:c6:0b:6b:80:f8:a3:cc:d1:b2:6d:f3:7f:93:
         7b:b0:7a:a5:a7:bd:df:d4:f0:40:16:ae:02:9f:e5:27:13:4e:
         3b:c8:da:f6:3c:1a:c4:03:20:e3:e6:7f:f3:fb:f2:2e:d9:f9:
         f7:e4:13:0e:35:34:d9:21:a3:cd:0d:72:c4:0b:8b:ee:d9:a4:
         1a:8f:48:7f:79:7c:d9:53:d6:d1:b3:b0:e0:0b:74:26:c3:cb:
         14:ab:bc:dc:c6:64:a6:99:1c:6f:1f:ff:6d:15:9e:51:bc:d0:
         64:7c:13:22:a7:50:d7:f6:eb:34:95:b6:28:dd:c9:6b:81:f6:
         96:78:4d:b3:75:c1:cf:3d:9b:eb:64:f1:f6:08:0f:42:f8:10:
         73:37:4d:65:be:1d:8f:1a:b9:85:15:58:0b:e5:85:33:0c:ba:
         24:8f:42:60:f2:1e:f5:c9:c3:47:68:7a:7b:e6:5f:a4:00:f1:
         29:1a:01:51:82:4a:8d:62:60:e9:d0:d4:24:4d:36:e6:4c:58:
         43:f5:71:ca:b1:9e:6f:76:50:88:59:6e:7a:ea:8b:90:d6:28:
         0c:d5:0f:05:e3:b7:ed:4e:78:1f:c5:a7:6c:e3:e8:47:29:cc:
         04:cd:5a:9d:0a:81:c9:48:6a:8a:1a:d6:7a:bd:e7:9a:8d:40:
         3e:5b:1d:b1
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICETkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTAyMDcx
MzE0MjhaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEEwMjYyNUUyRUM1M0E0
QzNEMTNGN0RFMzM1REFCM0UxQzBDOTQwRjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDFtv5vcSTyRgNz3mEm6K38CBxFPIhxVmTKh62QHcAyJJFzbegr
a9U1U/Vk370SZiGdhFThuh9JPREFKN1Ke2WdrzOYa5TuQo36MQoy8uacNqFD5eaA
JD57AIkhaFXdErhkwDPecVayLeS6ANmf42y2ka3d6W4cq45cs3Ee4xJxLtfXAyC7
vUpSxblk9sKeZpTFaEi2qLgfmNTueRxNbnjsHWiQuUnOLi0RHGXG8H7IO4dckKta
3GpsaXBMMoL/Axu5Oip0hL0dXaSsCRMp4T9WGByuL1svm65DSLiN7CF3j2oUtiaU
I123KGaUDGT6Y2JghkcTyO/e6UL3EkA8phe1AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUoCYl4uxTpMPRP33jNdqz4cDJQPEwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL29DWWw0dXhUcE1QUlAzM2pO
ZHF6NGNESlFQRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC0
2vcwDQYJKoZIhvcNAQELBQADggEBADSrORj3xgtrgPijzNGybfN/k3uweqWnvd/U
8EAWrgKf5ScTTjvI2vY8GsQDIOPmf/P78i7Z+ffkEw41NNkho80NcsQLi+7ZpBqP
SH95fNlT1tGzsOALdCbDyxSrvNzGZKaZHG8f/20VnlG80GR8EyKnUNf26zSVtijd
yWuB9pZ4TbN1wc89m+tk8fYID0L4EHM3TWW+HY8auYUVWAvlhTMMuiSPQmDyHvXJ
w0doenvmX6QA8SkaAVGCSo1iYOnQ1CRNNuZMWEP1ccqxnm92UIhZbnrqi5DWKAzV
DwXjt+1OeB/Fp2zj6EcpzATNWp0KgclIaooa1nq955qNQD5bHbE=
-----END CERTIFICATE-----