Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/x_qUZjV_70oyrDDYxbFOKUrtEq4.roa
File:                     x_qUZjV_70oyrDDYxbFOKUrtEq4.roa (raw, json)
Hash identifier:          jRnI9jwG2eLHdbu/UcDlV4d9xSZUqMxzWFoZYJwFq+Y=
Subject key identifier:   C7:FA:94:66:35:7F:EF:4A:32:AC:30:D8:C5:B1:4E:29:4A:ED:12:AE
Certificate issuer:       /CN=A2FB739525B742A28A743315C6C88E766A7E0DC3
Certificate serial:       0B73
Authority key identifier: A2:FB:73:95:25:B7:42:A2:8A:74:33:15:C6:C8:8E:76:6A:7E:0D:C3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/ovtzlSW3QqKKdDMVxsiOdmp-DcM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/x_qUZjV_70oyrDDYxbFOKUrtEq4.roa
Signing time:             Wed 29 Sep 2021 02:53:22 +0000
ROA not before:           Wed 29 Sep 2021 02:53:22 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     131618
IP address blocks:        103.135.116.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2931 (0xb73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2FB739525B742A28A743315C6C88E766A7E0DC3
        Validity
            Not Before: Sep 29 02:53:22 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=C7FA9466357FEF4A32AC30D8C5B14E294AED12AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:13:86:a3:1b:53:a4:26:a4:f5:0d:88:2f:77:
                    ad:d7:48:9d:1b:bb:ac:7f:70:0e:a0:a4:77:d4:20:
                    ea:d1:12:ba:f9:31:97:ff:40:22:8b:74:8a:48:9f:
                    72:49:0c:e8:03:b0:bd:33:a5:2a:fc:db:e3:4e:10:
                    63:d1:04:91:30:70:cb:ab:ac:00:77:be:a8:99:e6:
                    c9:c3:74:60:61:b4:71:10:fd:6b:29:68:ac:6c:0e:
                    bb:3d:ed:33:7f:b1:b7:f6:42:37:cd:d2:de:e0:b6:
                    60:75:44:ab:a4:b0:92:42:89:62:66:c8:bc:73:c2:
                    73:13:c1:27:fa:1d:97:d5:83:68:fc:af:98:3b:02:
                    53:06:8c:f8:22:5f:f5:28:55:2a:02:a9:13:83:67:
                    c7:4d:78:49:6e:7d:74:ba:9f:9f:ba:5f:4c:22:f3:
                    16:07:de:c5:2f:3a:6c:be:1e:5d:74:5c:ba:cc:43:
                    64:a9:5a:16:28:22:08:a3:56:1f:72:6e:45:9f:38:
                    a2:f3:b8:d1:e2:73:a6:ce:2a:18:2e:22:ba:76:4b:
                    4e:6d:61:86:9c:74:e4:69:eb:09:25:b8:63:b6:62:
                    b0:55:45:2e:e0:61:96:f9:84:57:bf:60:d1:00:5f:
                    28:26:0e:41:f0:e6:aa:19:8a:e4:4b:3a:3a:dd:39:
                    c9:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:FA:94:66:35:7F:EF:4A:32:AC:30:D8:C5:B1:4E:29:4A:ED:12:AE
            X509v3 Authority Key Identifier:
                keyid:A2:FB:73:95:25:B7:42:A2:8A:74:33:15:C6:C8:8E:76:6A:7E:0D:C3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/ovtzlSW3QqKKdDMVxsiOdmp-DcM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ovtzlSW3QqKKdDMVxsiOdmp-DcM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/x_qUZjV_70oyrDDYxbFOKUrtEq4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:a9:42:16:8e:c4:ee:9e:5f:47:8e:90:f9:5a:12:2f:8f:77:
         87:f0:ef:e5:ee:2f:5c:80:96:db:e3:c5:ab:1b:be:f0:60:07:
         5b:62:05:ab:1b:27:7f:26:28:56:81:3d:ec:96:88:14:da:e5:
         dc:59:06:37:9d:3f:be:2b:e8:08:1c:91:95:4c:95:df:a4:d8:
         aa:c9:4c:d2:c0:47:a1:85:e7:5d:0d:1e:1e:ae:bb:bb:01:8e:
         cf:56:c3:95:4f:3f:55:e9:25:c4:58:88:04:2d:8e:8f:38:16:
         b7:3d:12:7f:84:3e:04:76:1f:0d:0c:20:53:c1:4c:86:19:ab:
         88:c8:60:74:aa:09:33:0f:da:82:ca:e0:cd:c8:4c:63:2b:a8:
         07:f8:0c:78:d8:d6:75:be:25:f1:75:59:3b:2e:c6:43:63:c7:
         3c:46:e1:50:27:06:f8:d4:8f:2e:b9:ff:2c:5a:4d:b3:1b:6b:
         f7:50:42:a9:fa:58:b9:9d:b6:cf:35:cc:0b:48:f1:36:22:32:
         e8:d4:85:a8:cb:db:1d:18:48:c0:61:2b:2c:12:fa:cf:c2:05:
         e0:60:54:95:58:0e:30:2b:29:b9:b2:f3:99:61:e9:c9:2d:b0:
         5d:5b:53:4f:a6:45:68:6e:9b:6f:19:21:81:83:ec:90:fc:6d:
         5e:2a:c2:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----