Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/fBufl_9kR7d1w1zEn4HSdQOEsKw.roa
File:                     fBufl_9kR7d1w1zEn4HSdQOEsKw.roa (raw, json)
Hash identifier:          9x0rMJj7GwejUAjPYgk6zfiyzyr6ANCjMBLJxZ79yW0=
Subject key identifier:   7C:1B:9F:97:FF:64:47:B7:75:C3:5C:C4:9F:81:D2:75:03:84:B0:AC
Certificate issuer:       /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial:       0C65
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/fBufl_9kR7d1w1zEn4HSdQOEsKw.roa
Signing time:             Sun 07 Feb 2021 11:35:57 +0000
ROA not before:           Sun 07 Feb 2021 11:35:57 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131142
IP address blocks:        223.22.0.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3173 (0xc65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
        Validity
            Not Before: Feb  7 11:35:57 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=7C1B9F97FF6447B775C35CC49F81D2750384B0AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b6:7f:9e:ba:50:8c:00:f1:1a:1f:b9:6e:d2:
                    d3:54:4b:96:03:4c:b0:3d:2a:b1:09:bd:81:3c:29:
                    7d:3a:6d:73:3f:39:ce:ad:1b:75:aa:6f:43:9c:07:
                    b1:e9:50:4c:45:dd:3b:00:2d:8d:56:0b:e1:40:c1:
                    9d:a6:c4:21:63:9e:a3:fc:ae:2a:81:ab:d6:05:19:
                    a0:8f:ee:2c:dd:24:19:62:f6:5b:a8:d9:ea:96:aa:
                    40:e0:9c:51:f8:19:db:14:14:f1:f6:62:74:89:91:
                    fc:bf:a5:a5:07:70:3b:91:82:1c:49:50:14:20:f7:
                    5d:90:d3:35:bc:e9:89:cc:c1:54:3f:d5:0f:a5:aa:
                    15:96:11:5c:e6:4b:59:0a:49:16:8c:eb:ae:34:3c:
                    16:72:df:64:1a:54:ae:36:8c:f1:59:2f:42:ad:2f:
                    1b:cb:64:57:d0:6d:45:da:ee:2e:d7:dc:ac:09:53:
                    bd:23:ba:d7:31:11:eb:8b:21:26:33:92:57:af:e1:
                    7a:61:f1:1f:58:23:d8:09:cf:db:46:b3:b9:11:8b:
                    f0:2b:d3:58:ee:c9:dd:60:87:33:24:38:8e:6f:9e:
                    eb:f2:63:01:d9:e5:fd:18:f0:f2:da:2b:ac:8a:ee:
                    ad:20:c5:b1:fc:72:12:4f:20:7b:3b:1b:0c:75:fa:
                    c9:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:1B:9F:97:FF:64:47:B7:75:C3:5C:C4:9F:81:D2:75:03:84:B0:AC
            X509v3 Authority Key Identifier:
                keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/fBufl_9kR7d1w1zEn4HSdQOEsKw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.22.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         77:b7:f1:48:73:ea:f8:ce:c3:14:e2:57:d0:47:82:f8:83:65:
         cc:77:c0:a3:6c:b9:84:62:e1:2d:a2:ed:26:37:f6:16:bc:59:
         f5:f2:d4:2d:b1:41:24:b4:e8:45:f2:73:ac:e9:fe:cc:a3:ff:
         2a:2c:62:97:26:89:7e:6b:03:f7:37:b4:da:b1:b5:15:ac:87:
         55:dd:7a:20:d2:07:48:f0:e5:80:7d:13:bf:0b:59:b8:5b:9f:
         91:06:ee:d6:6f:b9:e1:d2:ad:a8:99:b4:63:4e:46:a5:f9:06:
         ff:08:db:70:07:e2:f0:bd:f5:41:67:ff:cf:b6:15:05:7e:8d:
         0d:c2:b4:31:6b:e6:cc:8b:57:55:8f:c4:20:57:51:de:04:12:
         dc:dd:e0:bb:89:4d:bd:b0:d6:ed:10:87:75:7e:17:8a:7d:3b:
         32:ac:c2:39:bd:b6:da:ec:f7:5a:a4:c2:88:76:ba:1e:10:b7:
         ac:82:c8:77:38:b0:6e:21:7b:05:96:60:1c:00:c0:fb:9f:87:
         22:30:5e:46:37:a7:43:88:97:4e:bc:17:1c:fd:9c:40:da:28:
         6d:15:73:ea:67:75:ee:89:32:16:44:45:fb:d2:6f:e5:9f:13:
         5b:22:23:18:0e:57:eb:81:b0:9b:c4:eb:b0:35:41:f7:11:bc:
         ad:55:33:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----