Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/MbLykupZetFQWwGX2kp1I4zX1E8.roa
File:                     MbLykupZetFQWwGX2kp1I4zX1E8.roa (raw, json)
Hash identifier:          qkYq7OJwAkrMh9i0R8OgeeUpKcakAZ5d5jEbNbEZUuc=
Subject key identifier:   31:B2:F2:92:EA:59:7A:D1:50:5B:01:97:DA:4A:75:23:8C:D7:D4:4F
Certificate issuer:       /CN=A2FB739525B742A28A743315C6C88E766A7E0DC3
Certificate serial:       0994
Authority key identifier: A2:FB:73:95:25:B7:42:A2:8A:74:33:15:C6:C8:8E:76:6A:7E:0D:C3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/ovtzlSW3QqKKdDMVxsiOdmp-DcM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/MbLykupZetFQWwGX2kp1I4zX1E8.roa
Signing time:             Tue 29 Sep 2020 10:00:58 +0000
ROA not before:           Tue 29 Sep 2020 10:00:58 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131618
IP address blocks:        103.135.117.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2452 (0x994)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2FB739525B742A28A743315C6C88E766A7E0DC3
        Validity
            Not Before: Sep 29 10:00:58 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=31B2F292EA597AD1505B0197DA4A75238CD7D44F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c1:75:6f:3d:e3:98:d8:76:2a:5b:a4:63:58:
                    66:e9:22:ab:ae:2d:91:0e:82:65:17:79:61:2b:2a:
                    ec:d1:e2:9f:dc:aa:62:7a:8c:b6:d2:9f:93:ce:bf:
                    41:be:91:4b:5e:14:a9:ff:24:7b:c0:16:95:f4:e1:
                    8e:08:f7:d5:0b:f4:bc:79:d5:e2:77:dc:ad:f6:46:
                    f4:f0:b9:18:11:06:61:93:4a:5f:b0:f6:72:15:a0:
                    2e:59:25:5e:83:15:54:a9:08:28:29:fa:c1:24:df:
                    db:a0:fb:0c:6c:f6:34:84:61:04:4e:d4:5b:d8:dc:
                    5e:3a:6e:71:72:31:5d:d1:73:36:1a:7e:b9:b5:f1:
                    96:80:f5:8c:5e:ca:a2:d0:b0:e6:72:da:ca:00:eb:
                    d6:53:f7:a4:81:df:2a:de:47:2f:51:8a:dc:c8:73:
                    80:0f:95:c8:68:bc:2d:81:56:a6:bb:82:a9:7c:ff:
                    85:b7:8f:1f:a7:71:85:31:45:c7:f5:e7:c7:34:da:
                    5c:6c:76:ae:50:b4:8f:eb:74:19:d7:e0:9d:f5:aa:
                    05:a6:52:b7:e3:92:0a:42:d1:8c:70:ce:41:7d:55:
                    ee:ca:b2:19:53:fe:27:cd:d2:7a:c6:2c:91:f6:de:
                    ce:4c:f1:39:de:bd:a7:4f:29:70:5b:c9:1a:53:e9:
                    50:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:B2:F2:92:EA:59:7A:D1:50:5B:01:97:DA:4A:75:23:8C:D7:D4:4F
            X509v3 Authority Key Identifier:
                keyid:A2:FB:73:95:25:B7:42:A2:8A:74:33:15:C6:C8:8E:76:6A:7E:0D:C3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/ovtzlSW3QqKKdDMVxsiOdmp-DcM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ovtzlSW3QqKKdDMVxsiOdmp-DcM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/MbLykupZetFQWwGX2kp1I4zX1E8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:1e:ae:05:77:8e:ef:e4:b5:28:cf:08:ce:7d:57:09:b9:3f:
         5a:18:bd:87:14:a5:0b:dd:a4:01:7a:1a:ce:0f:95:76:b7:e4:
         b3:40:22:8f:3a:7b:f5:60:91:c7:3d:f0:0a:c8:2b:77:0c:ea:
         29:58:59:5a:91:95:6b:15:e5:6a:25:bc:2d:82:6e:db:2b:b3:
         ec:e7:9e:ed:92:36:8b:b9:9e:b4:60:f4:57:e3:dd:c6:5b:62:
         16:68:85:34:f1:73:75:d8:e6:27:f6:d7:70:e4:c5:ec:e2:d3:
         5e:01:8d:a8:aa:db:03:20:20:ae:d3:94:a5:1e:7a:9a:e7:03:
         83:b9:63:fd:7f:cc:52:56:25:75:67:fa:e2:61:0f:79:cc:4b:
         48:1a:93:b8:e1:11:d1:0b:bd:66:d4:3e:31:d1:c4:f9:75:00:
         3a:72:d1:1a:3e:ce:77:01:92:db:c1:7f:31:79:33:8a:79:ae:
         61:fc:9c:0e:b7:68:46:55:09:b8:2e:fb:0b:f5:7c:cb:0b:1e:
         bf:b9:d1:53:a6:aa:b1:4b:69:6d:af:72:d6:f9:9e:9d:f2:6b:
         be:d2:24:bb:9e:ef:2f:a0:42:59:6a:79:41:af:ed:4e:fb:67:
         70:ed:a5:e0:83:1b:01:88:5e:44:63:82:42:8e:a8:90:e6:8f:
         78:d4:7a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----