Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yeE7Br2hbT47d-zgxcWOvQPZToI.roa
File:                     yeE7Br2hbT47d-zgxcWOvQPZToI.roa (raw, json)
Hash identifier:          FCJo/oJdvZ2GRy+rOdojcXcAJpGS21t5UNE+FL5rJyI=
Subject key identifier:   C9:E1:3B:06:BD:A1:6D:3E:3B:77:EC:E0:C5:C5:8E:BD:03:D9:4E:82
Certificate issuer:       /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial:       1210
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yeE7Br2hbT47d-zgxcWOvQPZToI.roa
Signing time:             Wed 29 Sep 2021 02:54:10 +0000
ROA not before:           Wed 29 Sep 2021 02:54:10 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24164
IP address blocks:        180.218.128.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4624 (0x1210)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
        Validity
            Not Before: Sep 29 02:54:10 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=C9E13B06BDA16D3E3B77ECE0C5C58EBD03D94E82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:60:7c:45:25:0a:a8:4a:61:9f:5b:5c:a1:14:
                    ec:66:51:7d:9d:26:42:60:5a:be:b8:17:c1:3a:db:
                    14:3f:5d:6d:41:b5:88:45:df:c9:9a:2d:32:3c:46:
                    28:b3:95:1f:f6:b2:ca:45:7f:92:e4:42:ed:fa:55:
                    a2:74:c9:6a:60:11:8d:50:c0:55:1d:07:19:92:80:
                    89:d7:e2:fd:aa:c7:20:7c:fb:8b:06:14:01:bb:bb:
                    02:71:ad:91:97:8a:21:9f:7c:6a:ce:0f:b5:88:0f:
                    57:00:72:5a:13:3d:76:fb:ac:70:d6:5b:bf:c7:b0:
                    f9:46:d8:98:5c:d9:5e:23:ad:21:e4:79:70:46:82:
                    9d:24:a6:c5:26:e0:d4:a4:f5:81:c3:ee:e4:e0:93:
                    41:ba:2e:b2:2e:b7:e9:9d:c7:81:02:a7:e5:db:52:
                    61:69:48:5b:11:9a:e1:05:ef:a8:25:9e:5a:f8:54:
                    b3:20:46:e4:08:f8:3b:b5:7d:c9:4d:2f:32:91:f2:
                    31:74:ca:bb:f5:b5:1a:7f:ee:b5:b3:1b:55:6e:73:
                    eb:5a:98:1f:80:a8:5c:76:ea:5e:07:ee:8c:04:60:
                    51:79:0b:26:5a:aa:49:18:d8:11:06:50:7c:7b:f0:
                    13:5f:93:f8:87:47:1c:e9:32:b5:db:3f:9c:10:dc:
                    4f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:E1:3B:06:BD:A1:6D:3E:3B:77:EC:E0:C5:C5:8E:BD:03:D9:4E:82
            X509v3 Authority Key Identifier:
                keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yeE7Br2hbT47d-zgxcWOvQPZToI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.218.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:71:65:b2:15:29:4b:f7:a3:74:69:3e:70:ca:f5:bb:6c:e8:
         3b:0e:c8:18:62:cc:fe:8d:94:47:0c:2d:0f:0c:90:4b:4f:7e:
         94:a0:30:58:2e:bb:cf:f2:93:4f:9b:ae:3e:02:3a:e6:fe:ca:
         70:70:4a:23:77:b1:06:c5:7e:84:96:86:d6:da:9d:cc:65:2d:
         46:a5:f5:c1:76:c8:9b:94:a9:90:b0:2d:1c:97:35:13:10:87:
         e1:4f:a0:05:01:a3:63:ee:43:23:17:d0:19:00:81:ce:93:ca:
         cb:7a:72:03:8c:6b:3c:39:e6:02:a8:c8:f5:79:d2:24:d9:54:
         89:64:c7:ea:5e:de:a1:78:4a:48:e8:c9:83:03:7e:af:76:aa:
         4a:11:db:36:e3:ee:c5:b3:e4:c9:0b:49:9d:a7:da:46:12:49:
         00:95:f3:68:65:67:22:c7:e4:81:11:e1:f9:d6:40:f9:55:04:
         f7:47:84:34:ea:02:da:5d:fd:47:92:eb:5f:71:c1:4c:23:21:
         4a:b7:41:d1:9b:73:6f:4c:cd:a3:9e:25:70:76:ab:d2:21:63:
         b8:be:82:ce:be:e8:60:d6:2d:a9:ee:d4:36:df:1b:f7:f4:6c:
         4d:3e:80:6f:93:53:51:82:f3:6c:80:b8:43:7d:35:56:80:a8:
         b5:1f:b6:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----