Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/Nb9bDJ29tQg7HbMUyBOs79dIp88.roa
File:                     Nb9bDJ29tQg7HbMUyBOs79dIp88.roa (raw, json)
Hash identifier:          iClEMYWl74f9NNLggV3SZLZdnRsHvqCdRWyi28nqCHk=
Subject key identifier:   35:BF:5B:0C:9D:BD:B5:08:3B:1D:B3:14:C8:13:AC:EF:D7:48:A7:CF
Certificate issuer:       /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial:       0C41
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/Nb9bDJ29tQg7HbMUyBOs79dIp88.roa
Signing time:             Sun 07 Feb 2021 11:35:26 +0000
ROA not before:           Sun 07 Feb 2021 11:35:26 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     17709
IP address blocks:        218.187.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3137 (0xc41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
        Validity
            Not Before: Feb  7 11:35:26 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=35BF5B0C9DBDB5083B1DB314C813ACEFD748A7CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:85:95:66:82:9a:8d:a9:96:ef:b9:5a:7d:3f:
                    b4:53:62:12:3f:8b:fe:5e:26:14:fa:b9:e7:d5:c7:
                    f4:4a:01:f2:62:f4:e2:3a:4e:86:0a:ee:77:61:6e:
                    bb:7a:8d:df:db:ed:0b:a9:56:53:f1:75:fc:39:1a:
                    c2:a1:47:8c:41:79:d0:e8:55:fa:18:7f:8b:8d:1b:
                    8b:a6:4b:2b:af:bb:3b:9a:1c:10:d5:8a:ee:df:34:
                    80:e7:a0:7b:f1:90:6a:0f:4b:05:5a:2d:2a:8c:13:
                    da:4b:25:b4:35:9b:66:73:2f:22:7e:34:cf:2b:ce:
                    5c:6a:65:62:e7:9c:3c:45:be:cd:7e:9f:6d:51:2b:
                    53:ef:23:47:1c:9f:0b:18:96:fa:4c:28:d8:4c:16:
                    71:09:ef:53:9b:3b:9d:f0:07:11:1a:a4:fd:de:e6:
                    b9:6b:b8:8d:fe:0b:a9:a0:ad:aa:1c:f8:0d:63:1f:
                    1e:46:ba:c8:bb:d6:1b:9f:d4:1f:18:9f:d7:99:2b:
                    82:63:fc:1a:72:46:49:dd:f6:25:51:90:1f:4c:e1:
                    9e:14:19:25:b9:34:f7:01:ab:bd:bb:26:3e:ca:36:
                    01:64:75:13:77:48:4d:f5:ba:77:9f:c0:96:d5:f7:
                    ad:66:63:ce:28:45:57:32:01:16:58:ba:87:08:d1:
                    d3:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:BF:5B:0C:9D:BD:B5:08:3B:1D:B3:14:C8:13:AC:EF:D7:48:A7:CF
            X509v3 Authority Key Identifier:
                keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/Nb9bDJ29tQg7HbMUyBOs79dIp88.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.187.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2b:10:74:22:4c:15:a7:cd:47:79:7c:a0:28:3c:a9:9c:dd:47:
         b2:33:94:5b:64:98:9d:ae:bd:bf:44:9a:ae:69:da:c8:42:13:
         c5:cc:3d:42:d7:18:7a:fd:56:69:b8:8c:2d:f0:0c:ac:e1:d2:
         6a:71:f2:53:96:c6:28:7b:83:db:c5:ed:1b:e8:f9:27:ee:e0:
         e7:77:99:dd:3c:df:53:89:74:a5:c1:de:a7:70:b2:5a:b7:ee:
         1f:f2:5a:27:8c:52:13:b2:2a:a9:a7:73:43:49:7c:43:05:2e:
         ab:01:14:cc:ff:63:81:f7:8a:f9:c5:77:5d:76:09:aa:2b:24:
         87:26:1f:cc:8e:0a:e3:1b:fb:48:83:89:4d:8d:8b:e1:c0:c6:
         ce:75:7d:36:a3:97:7b:c3:7b:5c:44:b7:8e:35:1a:df:1f:0a:
         56:42:bd:5d:94:f7:fa:87:6c:c0:5a:c1:0e:8e:7c:68:83:b8:
         f2:59:7e:a5:44:64:dd:1e:2e:e9:db:33:73:85:ad:ba:fc:0c:
         a9:34:ff:3b:9c:77:65:ad:fc:43:9e:bd:af:a6:c3:4c:86:4f:
         c5:e9:67:09:df:e6:6f:94:3e:e9:1b:ce:28:a5:04:fb:83:a0:
         f1:f7:70:77:1c:0a:03:a8:7a:10:03:3f:07:36:a9:09:bc:d2:
         4e:c9:ee:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----