Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/dtfcHoe_qjOMZZIau7kWlsay6Hg.roa
File:                     dtfcHoe_qjOMZZIau7kWlsay6Hg.roa (raw, json)
Hash identifier:          FaWUGdw7y1Hg5t0DY+P9QwRW7jNjVs181mOoegL55xk=
Subject key identifier:   76:D7:DC:1E:87:BF:AA:33:8C:65:92:1A:BB:B9:16:96:C6:B2:E8:78
Certificate issuer:       /CN=A2FB739525B742A28A743315C6C88E766A7E0DC3
Certificate serial:       0995
Authority key identifier: A2:FB:73:95:25:B7:42:A2:8A:74:33:15:C6:C8:8E:76:6A:7E:0D:C3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/ovtzlSW3QqKKdDMVxsiOdmp-DcM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/dtfcHoe_qjOMZZIau7kWlsay6Hg.roa
Signing time:             Tue 29 Sep 2020 10:00:59 +0000
ROA not before:           Tue 29 Sep 2020 10:00:59 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131618
IP address blocks:        103.135.116.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2453 (0x995)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2FB739525B742A28A743315C6C88E766A7E0DC3
        Validity
            Not Before: Sep 29 10:00:59 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=76D7DC1E87BFAA338C65921ABBB91696C6B2E878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a8:0c:36:e8:4d:a2:bc:31:98:3e:d6:54:55:
                    e2:ba:4c:64:3c:08:55:99:01:e2:58:fa:b3:e4:63:
                    af:9b:bb:88:e2:34:d7:dc:73:7b:31:70:36:78:3f:
                    c6:01:5d:1b:94:0a:e7:ce:68:5a:e4:66:d1:c8:89:
                    bf:eb:ec:91:07:b7:2a:5f:5c:47:3a:3a:c7:ef:40:
                    9f:34:c1:45:9c:19:52:61:1a:ae:d0:4d:27:c6:ee:
                    8b:e2:44:f6:25:41:d3:a8:3c:a4:03:52:fe:1d:ad:
                    91:35:e8:fd:93:b5:88:43:59:c0:2c:ae:9d:cb:fe:
                    3b:92:c8:73:4c:5a:98:00:5d:68:03:c0:74:8f:0a:
                    9b:cb:1c:ff:b8:42:42:54:bf:e8:29:5e:3d:c4:79:
                    6e:72:5c:70:b5:f6:c2:2a:87:27:d1:8b:d7:86:21:
                    99:8f:37:de:fb:5d:ae:f8:be:98:03:82:93:c1:b8:
                    26:64:7b:29:14:17:d0:d1:b4:18:8b:58:60:78:c0:
                    d9:a4:c6:84:5b:c8:ab:ef:9f:cb:02:de:db:db:1e:
                    af:46:15:01:9a:e9:1e:42:d6:37:44:d7:af:25:86:
                    83:eb:a8:56:e9:91:a0:8f:aa:22:1c:32:97:68:2d:
                    ba:1b:45:3c:99:70:3b:d9:2f:14:0b:d0:9e:fc:2d:
                    24:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:D7:DC:1E:87:BF:AA:33:8C:65:92:1A:BB:B9:16:96:C6:B2:E8:78
            X509v3 Authority Key Identifier:
                keyid:A2:FB:73:95:25:B7:42:A2:8A:74:33:15:C6:C8:8E:76:6A:7E:0D:C3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/ovtzlSW3QqKKdDMVxsiOdmp-DcM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ovtzlSW3QqKKdDMVxsiOdmp-DcM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/dtfcHoe_qjOMZZIau7kWlsay6Hg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:f2:69:20:26:35:81:0f:93:a1:db:a7:2e:c1:14:2e:d2:f1:
         d2:c7:da:51:20:d7:67:46:5a:5d:47:45:17:6b:51:7f:23:50:
         d5:8b:0a:37:ab:0f:d6:cd:99:13:6e:6f:e1:18:c0:34:62:cd:
         56:9c:b4:04:30:8e:b4:6f:9c:aa:07:1d:82:56:75:96:5e:99:
         a9:b5:a1:2b:6c:f1:6e:81:b6:89:38:8c:95:17:ba:3b:31:d1:
         4b:92:a6:e2:97:7c:f1:04:99:64:c7:97:b8:58:b9:c4:eb:c5:
         f3:97:e3:7c:8f:7a:47:32:c3:71:e8:73:1c:6e:8e:26:e0:aa:
         41:45:57:75:f8:5f:db:ae:fe:15:b1:23:6d:38:8c:68:0e:0c:
         b3:87:a3:22:98:d7:25:33:d6:5e:7f:7f:73:23:28:44:56:8f:
         4a:28:67:bd:50:77:e2:3e:df:ac:f9:06:07:4e:53:a0:eb:32:
         82:05:68:67:b3:2a:50:9c:84:64:6f:2e:50:31:a2:f3:87:44:
         66:0d:0e:a8:00:5b:28:3e:eb:8f:d8:83:3b:22:ac:02:76:e1:
         0e:ca:0c:a1:64:bf:dd:37:4c:36:17:31:14:28:49:bf:05:74:
         d3:3f:73:ed:6e:f4:c9:3b:ba:b6:1a:4a:3b:b1:6f:a5:68:1a:
         17:bf:54:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----