Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/rS-E8sjUWufcFWbWoxRNU8Sz8ow.roa
File:                     rS-E8sjUWufcFWbWoxRNU8Sz8ow.roa (raw, json)
Hash identifier:          mChhJbNKmPW6iKIoJLIm/SVDwl30bIcS7u6rZ+6glHg=
Subject key identifier:   AD:2F:84:F2:C8:D4:5A:E7:DC:15:66:D6:A3:14:4D:53:C4:B3:F2:8C
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       10F9
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/rS-E8sjUWufcFWbWoxRNU8Sz8ow.roa
Signing time:             Sun 07 Feb 2021 12:50:03 +0000
ROA not before:           Sun 07 Feb 2021 12:50:03 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9924
IP address blocks:        180.218.245.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4345 (0x10f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Feb  7 12:50:03 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=AD2F84F2C8D45AE7DC1566D6A3144D53C4B3F28C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c1:38:30:80:86:d0:00:46:6d:09:3b:46:0c:
                    8c:64:ab:db:f0:b1:e4:74:86:ce:c2:83:1f:83:0e:
                    d6:1e:e4:b3:a0:b7:1c:47:45:9d:40:e9:c9:d9:02:
                    4b:bf:fd:1c:31:88:92:8a:3d:6a:17:eb:b1:99:5f:
                    77:f3:60:0a:df:71:f8:33:9f:35:58:17:04:64:ac:
                    75:3c:89:73:f7:df:0c:fa:9b:29:bb:f7:75:47:6b:
                    89:15:d8:8a:37:69:65:7f:91:f7:06:75:7d:34:3d:
                    36:11:9b:91:d8:bf:1f:36:19:79:9b:78:2c:ff:28:
                    72:d9:3d:46:8e:bb:56:96:9c:85:cd:96:b3:16:1b:
                    b9:f5:fd:a1:00:e0:c8:0d:01:37:c6:fb:43:11:d5:
                    94:67:91:98:71:fa:65:55:ab:2b:1e:ce:f1:c9:bf:
                    75:db:12:1d:de:7a:5a:36:89:44:c6:eb:0f:c0:b4:
                    97:76:ec:ce:d4:4e:1f:30:ec:01:f3:25:f7:09:a8:
                    73:c0:51:15:8f:f1:87:74:1a:65:c0:2b:05:b2:dc:
                    18:3e:5a:69:66:d0:f5:92:07:c8:db:40:fa:90:94:
                    de:96:77:26:4b:30:ef:cb:29:0a:fd:9a:a8:bd:05:
                    2f:4e:fe:ae:3d:80:e9:53:a3:ca:7f:de:49:3b:7d:
                    a6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:2F:84:F2:C8:D4:5A:E7:DC:15:66:D6:A3:14:4D:53:C4:B3:F2:8C
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/rS-E8sjUWufcFWbWoxRNU8Sz8ow.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:d6:20:7e:c5:78:09:80:3d:7e:0c:d2:05:ed:a7:84:f5:73:
         af:a5:f0:f6:37:85:59:23:1d:99:ac:1c:15:fb:ba:b3:10:57:
         20:37:63:72:ce:f4:e9:f7:06:74:25:89:fc:af:09:0b:db:0f:
         25:40:98:e1:c9:bf:8b:74:54:18:b2:e0:37:1b:46:0e:92:a0:
         47:f0:bd:9f:ae:f5:fd:4e:3e:b6:7e:77:5d:68:13:96:70:c1:
         be:2c:ef:5b:25:3e:e8:46:09:55:7b:5e:e1:e1:ad:06:ba:dc:
         28:8b:72:fa:f4:05:68:8b:6d:a5:6c:4b:f3:b5:4a:74:af:ab:
         3a:38:46:a9:82:6e:de:cc:39:d2:76:06:ba:73:92:63:ff:5e:
         04:0c:61:60:8c:50:66:55:5b:92:4a:6e:ed:6d:93:75:73:0f:
         b5:31:ae:56:fc:31:ad:02:69:49:9e:e6:d8:bc:f3:7e:07:9f:
         4a:d2:98:fb:f5:8e:30:68:8b:9f:db:46:f3:a8:65:c2:84:53:
         77:b2:de:ea:4c:38:8e:cc:fb:4e:4a:b9:78:34:20:99:b8:7c:
         e4:30:48:1b:ea:75:79:36:29:89:5c:fd:9a:99:34:05:c9:79:
         70:3b:7c:16:fb:f1:09:b9:57:69:48:64:df:69:61:08:f6:cf:
         f6:1e:6b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----