Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/e53QTzw1vZ22n0wYZ08HRjySlUQ.roa
File:                     e53QTzw1vZ22n0wYZ08HRjySlUQ.roa (raw, json)
Hash identifier:          oi7B6NSDGDgoqt01pN3JWEQ/AXVM1gzTrCCeFRiqYJo=
Subject key identifier:   7B:9D:D0:4F:3C:35:BD:9D:B6:9F:4C:18:67:4F:07:46:3C:92:95:44
Certificate issuer:       /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial:       0DFB
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/e53QTzw1vZ22n0wYZ08HRjySlUQ.roa
Signing time:             Wed 29 Sep 2021 02:39:49 +0000
ROA not before:           Wed 29 Sep 2021 02:39:49 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24154
IP address blocks:        210.63.220.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3579 (0xdfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
        Validity
            Not Before: Sep 29 02:39:49 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=7B9DD04F3C35BD9DB69F4C18674F07463C929544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:2c:4e:d4:67:54:62:7e:e8:c4:e7:cc:42:9c:
                    4f:81:b7:75:23:ea:e8:45:b4:05:56:f4:e0:9d:83:
                    0a:e6:b7:dd:c8:d6:ce:31:dd:8e:ae:48:72:2a:1a:
                    85:12:13:a7:6a:92:8c:c1:b1:00:f4:63:c7:1b:d1:
                    1a:34:48:09:81:8d:83:f0:a8:9a:f7:a9:2a:c9:a6:
                    7b:ab:91:fc:53:38:72:87:fc:fd:f1:5e:40:7e:50:
                    69:83:92:37:e1:73:a2:b9:1f:26:39:c2:8c:3e:3c:
                    ac:5f:6a:7c:45:e8:18:c5:58:fc:64:01:e3:a8:9a:
                    86:d7:95:97:29:bd:fc:f8:a1:53:71:5d:fe:20:53:
                    c3:5e:35:04:eb:4d:0c:ee:21:38:2f:be:2b:78:50:
                    08:65:fa:cf:31:9b:5a:3a:78:ed:f7:06:a1:ab:31:
                    30:47:a4:bc:ab:a1:03:89:e5:36:83:6e:d0:a2:a7:
                    3d:04:0e:1b:de:94:a4:f4:a7:67:61:a9:38:21:ac:
                    c0:a4:aa:a2:f2:2b:4d:df:35:17:35:6e:41:ea:68:
                    7b:31:b2:91:f6:67:84:db:d2:f6:c7:ed:5e:91:64:
                    1a:a9:4e:0a:12:79:79:6b:a6:6b:0b:dc:e2:ca:28:
                    20:a6:43:68:64:a0:e5:bd:4d:fa:cf:80:90:79:1a:
                    da:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:9D:D0:4F:3C:35:BD:9D:B6:9F:4C:18:67:4F:07:46:3C:92:95:44
            X509v3 Authority Key Identifier:
                keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/e53QTzw1vZ22n0wYZ08HRjySlUQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.63.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:9b:60:6c:92:d4:7a:f8:a1:81:8d:cd:d7:da:da:72:39:59:
         4e:d4:ce:3e:50:0d:00:05:99:61:43:ff:d5:0d:89:37:1d:50:
         e6:30:58:fa:87:4d:17:fd:aa:af:3f:60:e2:c8:1a:fc:87:ad:
         86:88:13:a8:7b:b0:4f:42:7d:73:57:be:a6:89:fd:ba:5d:2a:
         8d:57:a3:80:da:2b:c9:15:d3:26:9d:11:b3:27:8e:55:17:7b:
         db:9d:3d:9e:8a:f8:bb:91:ee:ed:64:dc:ce:da:d6:d0:7e:00:
         61:4b:3d:7d:94:42:4c:c7:f7:49:5d:f1:71:fe:9b:9e:fe:d9:
         92:04:0a:6b:17:52:f2:34:7e:a7:80:eb:34:54:d3:fb:77:11:
         f6:9f:68:9a:0d:43:45:9c:f3:64:6f:6b:0a:e3:54:21:97:cc:
         fd:56:f6:2e:a9:1f:0a:ca:57:ec:7f:70:0a:cb:ab:10:d2:ce:
         54:ac:98:c6:16:a7:31:e4:24:ae:11:02:36:69:20:aa:2f:ed:
         6a:6e:b9:b3:f8:8d:ff:ad:bd:dc:1c:7b:25:38:65:70:b1:64:
         07:a4:57:6c:43:f9:08:79:33:d8:2a:71:ea:d1:76:ba:87:b2:
         c2:8d:d6:15:19:fc:05:81:6f:80:28:f5:80:d7:82:37:3f:4d:
         d5:0c:35:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----