Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/u8AvSdrQR53vrGrKYwjT5rUVSXA.roa
File:                     u8AvSdrQR53vrGrKYwjT5rUVSXA.roa (raw, json)
Hash identifier:          1aKUotiwraEXMi++1qjYOQIePfKQiWuVy8D07VcCepo=
Subject key identifier:   BB:C0:2F:49:DA:D0:47:9D:EF:AC:6A:CA:63:08:D3:E6:B5:15:49:70
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       12F7
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/u8AvSdrQR53vrGrKYwjT5rUVSXA.roa
Signing time:             Wed 29 Sep 2021 02:55:11 +0000
ROA not before:           Wed 29 Sep 2021 02:55:11 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24164
IP address blocks:        180.218.200.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4855 (0x12f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:55:11 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=BBC02F49DAD0479DEFAC6ACA6308D3E6B5154970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:28:24:c1:23:7a:47:03:4f:81:2d:d8:14:ec:
                    fc:8c:bb:a0:5d:1d:f4:c8:64:dc:d4:95:8f:57:53:
                    c3:43:1a:20:58:71:5b:3e:94:7e:80:ae:25:2f:e3:
                    02:14:4f:d6:b1:38:ec:b2:7f:39:65:5c:9e:13:a5:
                    f0:42:a4:8d:e9:58:4d:ef:85:43:e0:b8:b5:ba:3a:
                    45:fa:89:3c:0c:fa:76:0c:3b:da:ac:9a:19:c2:f7:
                    5a:7c:d7:0a:16:14:f4:81:05:df:1d:a1:4b:ea:e2:
                    26:8c:d6:48:14:90:ad:c9:f8:96:10:2e:84:79:b4:
                    be:b0:d9:c8:43:1e:41:a7:97:7b:0f:be:06:23:93:
                    47:a3:56:a3:19:8d:f1:c4:87:71:0a:0e:35:4d:0e:
                    9b:3b:35:e6:8c:bc:0d:2e:c6:5e:56:16:b6:c6:48:
                    6a:b3:19:ef:a0:33:43:11:8a:43:75:13:e5:82:1b:
                    4a:ea:e0:35:e9:a5:92:9b:27:93:24:08:5d:1c:87:
                    40:ce:30:d7:de:7a:0c:51:1c:64:a0:8b:67:b4:42:
                    c7:e1:80:b7:c0:6b:6f:36:92:72:92:3e:78:18:6e:
                    3a:e7:b4:c4:06:c5:53:e0:88:81:1b:90:5d:43:34:
                    50:9f:d6:1b:88:54:1f:b4:87:2b:b9:da:cf:8b:4e:
                    18:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:C0:2F:49:DA:D0:47:9D:EF:AC:6A:CA:63:08:D3:E6:B5:15:49:70
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/u8AvSdrQR53vrGrKYwjT5rUVSXA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         85:d8:a1:ce:ff:df:74:ef:21:2d:7b:a2:5a:6d:70:e5:15:48:
         85:19:68:7f:9b:94:25:00:44:1a:9c:aa:f2:d0:f7:00:e4:f3:
         5e:de:99:df:59:3c:17:d4:52:e2:24:5a:e2:70:39:bf:64:18:
         1e:ff:37:95:70:22:22:3b:eb:be:d1:8c:dc:ca:dc:01:2d:fa:
         02:b9:d1:af:f0:d1:f0:53:51:f6:df:51:b1:fe:09:d7:26:ad:
         f8:85:c3:0f:6f:d0:b4:c0:6f:7b:d2:26:23:09:fb:ad:c5:9a:
         d5:58:8a:49:0c:9b:cf:02:9c:c4:c9:82:87:b0:72:12:90:84:
         45:55:ac:ea:2d:aa:5c:a3:87:c3:d8:eb:18:9e:ce:82:8e:70:
         dc:e1:41:18:7e:e3:e1:f4:f1:e6:51:2e:38:3e:6d:55:3e:f8:
         81:a1:63:75:6d:ec:a6:8a:d2:94:c7:aa:65:b7:63:89:80:c2:
         4a:23:4a:a9:a8:64:10:88:1b:ff:3e:8e:86:9c:19:71:a4:a2:
         ff:ea:85:04:14:e4:82:c8:9c:cd:0f:b6:c1:6c:ad:97:26:01:
         5e:94:de:38:a7:85:7a:7b:72:8e:15:ab:a7:3b:a1:f7:2c:83:
         81:4f:63:a8:d0:75:e7:fd:76:32:72:be:0c:5e:88:db:59:63:
         e3:c0:80:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----