Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qld2kyi4TOjMvqs5qru3yv1jZgQ.roa
File:                     qld2kyi4TOjMvqs5qru3yv1jZgQ.roa (raw, json)
Hash identifier:          tmlyMQa0Sii2rK9AzV+Ffs2FJ2gltk1O1WtOf/hZBIw=
Subject key identifier:   AA:57:76:93:28:B8:4C:E8:CC:BE:AB:39:AA:BB:B7:CA:FD:63:66:04
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       12E5
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qld2kyi4TOjMvqs5qru3yv1jZgQ.roa
Signing time:             Wed 29 Sep 2021 02:55:07 +0000
ROA not before:           Wed 29 Sep 2021 02:55:07 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24164
IP address blocks:        180.218.136.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4837 (0x12e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:55:07 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=AA57769328B84CE8CCBEAB39AABBB7CAFD636604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2e:36:f7:eb:dd:2c:54:e3:2a:d8:80:bc:51:
                    57:7a:c5:9b:f9:2e:85:11:00:d3:35:f0:71:be:85:
                    a1:e3:67:a8:47:9a:01:d6:32:80:a0:b4:71:db:5e:
                    5f:d4:d8:14:51:2c:bd:a4:37:25:39:1d:be:06:84:
                    a7:2a:29:5a:2f:8d:41:c3:d6:46:55:8f:0b:86:51:
                    c7:93:f8:37:a2:ab:cb:45:1a:a1:85:ab:b5:d8:fe:
                    f3:01:39:98:ff:6d:d8:09:31:0c:3a:2a:dc:ed:ce:
                    1e:a0:e8:07:0a:89:46:03:60:0c:c3:b3:10:2d:45:
                    17:a2:53:d9:39:67:ce:f6:07:4f:87:d8:5b:57:e1:
                    4b:85:25:8a:1f:f8:82:a9:99:8c:18:9f:42:5f:91:
                    65:ba:6e:8f:7d:0f:b7:63:6c:9c:25:f4:55:5a:20:
                    f8:31:74:eb:53:bd:ef:68:d4:9d:d6:59:98:22:ad:
                    9f:d5:ee:99:e0:16:d7:ae:c2:c5:be:76:d0:d6:91:
                    6e:72:1d:26:78:ca:cf:f1:46:8a:e3:6c:eb:16:bb:
                    89:f2:dc:ed:8a:c3:df:47:95:d5:f4:4e:41:e0:a7:
                    2f:0b:ec:0f:b9:06:a4:68:bd:d3:82:4f:a8:b9:76:
                    8e:ca:69:82:5e:1a:69:8d:6f:c5:17:77:69:4f:b1:
                    45:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:57:76:93:28:B8:4C:E8:CC:BE:AB:39:AA:BB:B7:CA:FD:63:66:04
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qld2kyi4TOjMvqs5qru3yv1jZgQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:b9:03:44:d0:28:04:04:1c:5a:b3:4f:61:8c:50:5d:ad:93:
         0a:a6:6b:6b:75:79:c0:8b:ae:9a:57:d9:1c:3a:78:f7:18:cf:
         49:32:4b:65:6f:43:55:8f:07:18:2d:97:ea:11:e8:e6:75:23:
         e8:1b:fb:52:ca:d7:a2:f3:3b:f9:62:f9:54:b1:38:90:7a:71:
         26:91:31:3d:20:eb:c2:9b:40:9a:4d:01:95:65:dd:e5:a2:23:
         cc:02:f3:6d:25:3c:03:e1:bb:ae:7f:16:ae:50:04:17:b2:51:
         60:8d:41:3e:cb:91:2d:9c:ac:df:1f:dc:82:82:be:d3:18:ac:
         62:2d:10:bc:b2:bf:5c:20:8e:c9:de:c7:e7:a0:c5:d7:92:6e:
         00:fb:9c:df:f5:fa:7d:d9:0d:4d:81:53:30:33:35:30:0c:93:
         a9:8d:f4:b5:bb:44:4a:ad:ed:be:bd:0b:87:8f:45:9d:06:17:
         4a:db:7e:c7:07:68:39:6d:a1:90:bd:a7:02:f7:be:70:b1:9d:
         af:fc:88:3b:ba:b5:84:43:17:e9:0c:64:88:ae:10:86:f2:c3:
         62:44:00:8c:01:bd:2f:39:14:63:89:31:9b:3c:7f:9a:79:c3:
         8d:c9:f9:e8:b2:e4:a4:60:66:d8:d5:a8:dc:ac:5d:0f:65:d6:
         49:4d:93:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----