Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/NeUZn0JN5DQaB7QmD5JsjEGq5jI.roa
File:                     NeUZn0JN5DQaB7QmD5JsjEGq5jI.roa (raw, json)
Hash identifier:          UVJwdsMZm0OlSf+69/tMRe4t+6Q0UAkYhDPS1kjbzcc=
Subject key identifier:   35:E5:19:9F:42:4D:E4:34:1A:07:B4:26:0F:92:6C:8C:41:AA:E6:32
Certificate issuer:       /CN=A2FB739525B742A28A743315C6C88E766A7E0DC3
Certificate serial:       0996
Authority key identifier: A2:FB:73:95:25:B7:42:A2:8A:74:33:15:C6:C8:8E:76:6A:7E:0D:C3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/ovtzlSW3QqKKdDMVxsiOdmp-DcM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/NeUZn0JN5DQaB7QmD5JsjEGq5jI.roa
Signing time:             Tue 29 Sep 2020 10:00:59 +0000
ROA not before:           Tue 29 Sep 2020 10:00:59 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131618
IP address blocks:        103.135.118.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2454 (0x996)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2FB739525B742A28A743315C6C88E766A7E0DC3
        Validity
            Not Before: Sep 29 10:00:59 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=35E5199F424DE4341A07B4260F926C8C41AAE632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7b:75:82:1e:f3:f4:9b:74:5c:7a:b3:a1:db:
                    d6:60:88:b3:50:0e:8b:82:49:68:22:ab:9e:54:f5:
                    a2:b0:10:f3:28:ef:3d:88:05:62:50:41:87:14:c8:
                    a7:20:1e:bd:78:74:db:0f:81:c6:57:3d:f5:34:89:
                    cf:38:11:83:5b:ec:77:3b:76:7c:97:66:d2:bb:5f:
                    20:5a:78:27:fe:b3:9e:ee:9d:8e:13:a0:c5:ba:d6:
                    dd:15:de:b7:72:9e:b3:80:72:d1:5e:68:44:27:37:
                    62:35:aa:a4:0c:95:a9:fd:54:f1:98:62:b9:cc:85:
                    07:3f:7a:39:49:8e:a6:f2:0d:03:59:80:24:9e:5f:
                    12:8a:cc:5d:2a:ab:7e:72:25:db:ea:8d:af:ec:eb:
                    e0:41:80:bd:f1:4c:1e:a4:7e:52:e0:ba:1b:f5:6a:
                    f1:fd:fe:a9:dc:67:5e:79:5b:95:af:8b:9b:39:b7:
                    86:f0:b3:0e:4c:9a:e7:de:16:f1:06:81:cf:eb:2c:
                    e2:44:f8:8b:c1:8d:34:4c:33:e9:52:3d:c3:96:5e:
                    ab:aa:bd:6d:ff:dd:6e:be:30:e7:0f:60:53:10:1c:
                    7c:6b:7d:d0:1b:a2:21:75:9d:23:08:dc:ab:14:ba:
                    cd:4f:e4:f6:88:02:cc:b5:fa:69:bb:5d:87:8d:04:
                    2f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:E5:19:9F:42:4D:E4:34:1A:07:B4:26:0F:92:6C:8C:41:AA:E6:32
            X509v3 Authority Key Identifier:
                keyid:A2:FB:73:95:25:B7:42:A2:8A:74:33:15:C6:C8:8E:76:6A:7E:0D:C3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/ovtzlSW3QqKKdDMVxsiOdmp-DcM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ovtzlSW3QqKKdDMVxsiOdmp-DcM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/NeUZn0JN5DQaB7QmD5JsjEGq5jI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:bc:e9:87:91:8f:a6:72:fd:dd:99:ab:4b:6d:84:c6:c4:c9:
         07:35:db:6c:c1:12:ef:b4:40:53:ba:44:38:7b:26:b9:ea:5a:
         21:7a:fc:0a:8d:bc:16:7a:4d:07:ca:10:11:c5:bc:5c:8d:f2:
         87:ec:3b:bd:64:a0:92:91:4e:09:97:a4:3e:0b:a8:05:08:91:
         79:ea:02:7f:ef:cb:77:aa:a5:ac:bf:49:65:3c:b3:8f:cd:a4:
         9f:16:ad:45:ef:08:18:e6:e1:2d:97:e0:51:53:31:7d:5b:e2:
         5f:18:52:1c:b9:04:6d:ec:7e:79:bb:a0:d8:ef:15:84:fd:7a:
         7b:f3:7c:ce:ff:0f:01:79:56:b3:3d:6a:dc:df:d2:2a:77:ec:
         da:5c:d9:a4:c8:63:1e:98:53:dc:07:95:e6:a1:83:63:26:98:
         84:9c:95:92:ba:7c:22:49:57:e6:f2:2d:9c:97:16:55:2a:17:
         87:29:00:9d:45:f0:fa:f8:ff:ad:72:a0:77:36:6d:cd:d1:fd:
         c4:38:a7:94:b5:83:1f:30:c2:8d:a8:f1:8d:7e:53:cb:e0:8a:
         a7:63:b3:d4:5c:8f:4c:ec:78:23:02:3f:a2:17:52:f6:15:9e:
         90:93:ce:91:6f:23:5d:8b:1d:88:c1:7e:43:76:e7:33:96:0f:
         06:f8:32:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----