Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ANSONNET/bB3793-ubTLaC90ywF5M4CeN3J0.roa
File:                     bB3793-ubTLaC90ywF5M4CeN3J0.roa (raw, json)
Hash identifier:          fOeTcB1p1ws7sLIomZsPRY3NSSuQWo/LcmOVZdGd770=
Subject key identifier:   6C:1D:FB:F7:7F:AE:6D:32:DA:0B:DD:32:C0:5E:4C:E0:27:8D:DC:9D
Certificate issuer:       /CN=802BA6123EA123F439DA91CA3DE5A5AE0AA41378
Certificate serial:       0952
Authority key identifier: 80:2B:A6:12:3E:A1:23:F4:39:DA:91:CA:3D:E5:A5:AE:0A:A4:13:78
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/gCumEj6hI_Q52pHKPeWlrgqkE3g.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ANSONNET/bB3793-ubTLaC90ywF5M4CeN3J0.roa
Signing time:             Wed 29 Sep 2021 02:42:24 +0000
ROA not before:           Wed 29 Sep 2021 02:42:24 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     136162
IP address blocks:        103.100.124.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2386 (0x952)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=802BA6123EA123F439DA91CA3DE5A5AE0AA41378
        Validity
            Not Before: Sep 29 02:42:24 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=6C1DFBF77FAE6D32DA0BDD32C05E4CE0278DDC9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:59:96:16:20:1c:e9:dc:8b:92:6b:81:4d:41:
                    bf:76:e9:de:f1:8b:4d:41:2b:9d:a3:c9:e7:d9:7f:
                    96:95:6b:0f:56:8a:b8:f5:9d:f4:1a:24:b8:4f:4e:
                    6e:92:e8:26:42:64:7b:d7:b3:e8:75:08:25:cb:f9:
                    90:36:ff:db:08:cc:bf:7e:9c:e3:dd:36:61:3f:9c:
                    16:19:58:83:65:a0:9b:3f:68:0c:eb:fe:b5:70:ee:
                    a2:07:79:50:c8:4f:1a:fe:c6:62:46:70:3e:91:8e:
                    68:7e:a9:7c:be:25:e2:fb:12:06:e4:af:5d:66:02:
                    81:75:16:7f:f1:56:c3:d8:a0:cd:cf:0c:78:ea:79:
                    0a:54:9c:77:11:f8:26:de:b7:b3:13:4b:19:35:32:
                    a7:c0:e2:aa:72:52:64:aa:15:f3:68:cc:69:5a:81:
                    d4:b8:e7:e0:35:de:04:63:a5:fc:08:5c:5d:8f:d5:
                    3c:3c:df:4a:6e:f3:95:a2:96:3c:cd:c6:0d:f8:61:
                    ad:2e:c0:a9:a7:64:95:b3:1f:29:15:cd:7c:70:b1:
                    e5:6f:12:59:ba:4a:35:c9:eb:99:f7:d7:4f:fb:6f:
                    80:9a:e0:b1:79:0a:c4:d7:c8:c8:eb:84:72:3a:ee:
                    a5:ad:2b:e1:04:9b:e5:72:b2:a7:db:1a:05:b9:0d:
                    35:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:1D:FB:F7:7F:AE:6D:32:DA:0B:DD:32:C0:5E:4C:E0:27:8D:DC:9D
            X509v3 Authority Key Identifier:
                keyid:80:2B:A6:12:3E:A1:23:F4:39:DA:91:CA:3D:E5:A5:AE:0A:A4:13:78

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ANSONNET/gCumEj6hI_Q52pHKPeWlrgqkE3g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gCumEj6hI_Q52pHKPeWlrgqkE3g.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ANSONNET/bB3793-ubTLaC90ywF5M4CeN3J0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.100.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:6c:52:e7:61:87:79:e1:b4:a3:0b:4f:14:31:94:86:99:0f:
         75:9e:8f:bf:4b:48:dd:a0:69:e3:22:57:60:f3:b2:20:9e:3a:
         fa:53:a1:67:e3:6c:76:96:f4:80:a2:43:7d:08:eb:aa:46:3b:
         e4:19:39:7b:a4:0d:5a:ae:86:43:a6:a6:06:cf:72:5b:b9:87:
         47:67:64:4a:79:78:78:24:e8:32:9a:d9:e8:47:ff:fd:e6:dc:
         c6:d9:72:d5:88:03:d2:bf:74:66:6f:f3:b5:f5:f1:a6:ac:5d:
         93:ce:7d:c9:a6:46:a3:f8:62:81:91:7f:07:37:4a:c9:a4:ff:
         a6:c5:5a:f1:ce:dd:2b:c4:29:85:8f:14:61:95:b4:ae:a7:e4:
         0f:f8:c0:de:d9:c6:a8:62:7e:18:9d:4b:10:fe:67:29:47:4b:
         8b:50:b1:97:e8:1a:c1:8b:9e:5c:54:5d:73:65:80:38:85:cb:
         dd:a1:49:99:46:c0:8a:3b:4b:dc:73:8f:48:b9:78:0e:f1:f8:
         6e:91:92:7e:91:a0:ea:c6:b3:93:2a:93:b3:79:de:7c:7e:12:
         5a:37:7c:58:85:37:fd:3b:6c:f3:17:40:6a:d5:fd:14:10:b8:
         4a:d3:a4:a2:d3:dc:d0:d0:a0:cc:21:4b:d8:34:c6:d0:cf:c9:
         6f:25:16:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----