Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/oE5Bg1XMOHZs4cfsypn6djL5pEE.roa
File:                     oE5Bg1XMOHZs4cfsypn6djL5pEE.roa (raw, json)
Hash identifier:          Adq863Dz11Bw//z2NNAGkJLKvI/rJiehIoC41oNGEVk=
Subject key identifier:   A0:4E:41:83:55:CC:38:76:6C:E1:C7:EC:CA:99:FA:76:32:F9:A4:41
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       12F4
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/oE5Bg1XMOHZs4cfsypn6djL5pEE.roa
Signing time:             Wed 29 Sep 2021 02:55:10 +0000
ROA not before:           Wed 29 Sep 2021 02:55:10 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24164
IP address blocks:        180.218.176.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4852 (0x12f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:55:10 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=A04E418355CC38766CE1C7ECCA99FA7632F9A441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:af:76:0e:b4:0b:4b:14:c5:78:bd:11:0b:7a:
                    6f:a5:f0:82:1e:77:55:63:3b:f8:dc:f8:33:39:03:
                    b9:ed:88:22:2f:cd:56:16:b4:a2:90:b4:14:cb:44:
                    e9:07:9e:97:b0:14:4f:9c:6c:23:4e:23:56:15:ae:
                    c8:93:42:8b:c6:af:b2:57:08:1b:11:da:43:03:1a:
                    29:0d:12:28:ea:25:98:8d:e9:30:09:67:e0:ee:e5:
                    24:24:5c:11:47:8c:e0:04:87:37:15:4f:d7:7b:aa:
                    32:81:23:a5:7b:c9:ab:c6:d7:96:02:e7:be:1f:b3:
                    69:87:80:99:0b:71:a9:e4:c6:75:63:46:09:c6:d6:
                    ed:6d:b6:b3:c1:a8:0d:12:fb:8b:77:2c:d8:ee:43:
                    26:23:c9:ec:fb:7c:7d:20:00:38:5f:e3:4b:fe:a8:
                    24:bb:9f:0b:12:b1:80:f8:e6:b0:aa:b8:b9:a7:9e:
                    a8:61:06:43:51:b7:cd:c8:ef:e7:11:fe:5a:25:0b:
                    4a:0c:3d:6a:97:81:df:56:87:98:8a:f7:d9:f7:92:
                    5a:37:80:92:8b:11:2d:4e:b5:05:f5:c4:4e:60:36:
                    2f:bd:cc:8e:0a:ba:de:9f:08:92:a9:a1:81:d2:30:
                    c6:63:11:c0:1e:19:83:db:9d:93:62:67:97:70:88:
                    a3:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:4E:41:83:55:CC:38:76:6C:E1:C7:EC:CA:99:FA:76:32:F9:A4:41
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/oE5Bg1XMOHZs4cfsypn6djL5pEE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6b:0a:d7:e1:7f:5d:10:44:43:6d:5d:4e:5e:a0:89:a3:55:d0:
         f2:e4:65:a1:50:ec:33:2b:75:62:21:fc:a9:63:55:40:29:e9:
         c0:74:b4:d5:33:57:02:13:2c:c1:fb:1c:53:43:fb:e1:2d:62:
         32:4f:82:67:20:d7:3e:8c:94:85:c7:d0:41:42:fb:56:e7:91:
         9e:de:d5:75:74:69:d2:cb:0a:64:26:b7:6e:c2:02:11:f3:3e:
         a3:ba:6f:f1:4f:b3:4b:f9:91:26:e0:cb:60:e2:7e:9c:c7:3c:
         2b:80:24:2f:cd:32:9c:c0:66:c6:1a:76:ed:6c:8e:f6:c1:7c:
         65:36:a9:ca:e6:08:77:c0:8d:83:5d:37:4a:b2:3a:ea:1a:b0:
         79:66:b2:84:d6:07:1b:6a:b5:f6:6f:d1:41:80:9f:65:b5:df:
         5e:ef:86:05:12:9f:9b:da:77:c6:f4:b7:f8:4e:2c:42:65:15:
         8a:ee:e3:15:92:44:5e:fb:ce:ec:d4:7f:d4:3e:e1:e6:98:bd:
         2c:9d:98:41:22:aa:f3:2d:2a:da:35:a9:7f:67:88:eb:a5:ab:
         55:46:0c:7d:99:1d:d8:24:86:71:da:fb:66:b8:c3:59:62:55:
         8b:da:33:ee:3d:38:34:1d:d3:72:cf:4c:9d:16:7d:2b:14:2a:
         de:83:0d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----