Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASUS/TKb6jspImW9ImHdsob4lHfuXrEk.roa
File:                     TKb6jspImW9ImHdsob4lHfuXrEk.roa (raw, json)
Hash identifier:          phmkuU41nahb+N6R0n3Xy71JRN44ju61yZ8rbgDOTOE=
Subject key identifier:   4C:A6:FA:8E:CA:48:99:6F:48:98:77:6C:A1:BE:25:1D:FB:97:AC:49
Certificate issuer:       /CN=786648F79BB79E1F0B0FF9039692F74E4F3CE1F8
Certificate serial:       090F
Authority key identifier: 78:66:48:F7:9B:B7:9E:1F:0B:0F:F9:03:96:92:F7:4E:4F:3C:E1:F8
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/eGZI95u3nh8LD_kDlpL3Tk884fg.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ASUS/TKb6jspImW9ImHdsob4lHfuXrEk.roa
Signing time:             Wed 29 Sep 2021 02:39:21 +0000
ROA not before:           Wed 29 Sep 2021 02:39:21 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     1340
IP address blocks:        103.10.4.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2319 (0x90f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=786648F79BB79E1F0B0FF9039692F74E4F3CE1F8
        Validity
            Not Before: Sep 29 02:39:21 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=4CA6FA8ECA48996F4898776CA1BE251DFB97AC49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c2:6d:7a:d0:ab:08:00:4b:79:c4:d1:8f:16:
                    98:a1:d0:28:7c:5d:38:46:fa:22:2e:a9:03:7c:97:
                    ae:e2:16:52:ee:6b:5f:39:1f:02:af:37:b1:6b:d6:
                    6a:ad:66:c7:b2:4f:0b:b5:12:b0:5f:13:b7:53:c6:
                    e2:c3:84:b9:0b:03:1b:f0:31:da:ae:94:28:41:82:
                    13:68:a5:51:0f:30:af:ce:19:c8:9a:a8:a8:8a:93:
                    9e:c8:8d:db:fd:41:ad:3d:c9:d7:e5:08:83:95:4e:
                    c6:a2:e4:2c:21:e7:a5:81:f1:1f:23:06:54:b5:8c:
                    65:e1:1f:b7:0e:c7:5c:2c:4d:57:fa:6d:7a:91:b6:
                    0b:42:db:17:f0:0b:45:95:86:22:f4:fd:cd:23:cb:
                    ae:f3:19:86:84:87:3d:40:1b:82:64:ab:9a:37:48:
                    1f:b0:77:94:43:2c:fe:db:f6:77:7e:a1:c2:73:64:
                    c6:81:a7:ed:44:9c:06:1a:96:4f:98:01:2d:ed:f6:
                    4e:3e:b9:de:b2:49:75:57:83:b2:87:f5:37:07:b8:
                    d9:0a:e6:95:60:e4:e4:36:78:ed:e8:82:a2:cb:ca:
                    aa:9e:7d:d3:51:5f:cf:fc:bd:40:d8:6d:ef:02:28:
                    45:4c:0f:a7:ac:55:db:c0:56:a0:dc:17:aa:ba:70:
                    a0:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:A6:FA:8E:CA:48:99:6F:48:98:77:6C:A1:BE:25:1D:FB:97:AC:49
            X509v3 Authority Key Identifier:
                keyid:78:66:48:F7:9B:B7:9E:1F:0B:0F:F9:03:96:92:F7:4E:4F:3C:E1:F8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASUS/eGZI95u3nh8LD_kDlpL3Tk884fg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/eGZI95u3nh8LD_kDlpL3Tk884fg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASUS/TKb6jspImW9ImHdsob4lHfuXrEk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.10.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:a2:94:ab:6e:78:ee:6e:5e:7c:4d:fa:6b:50:67:fb:84:05:
         7e:c6:3a:82:a1:41:b7:58:e8:1e:7d:92:c9:b3:a6:54:42:91:
         cc:29:c3:29:bd:89:8f:c0:cc:29:38:77:f8:32:cf:4d:1e:ba:
         13:94:29:55:a3:c6:dd:37:85:3f:05:e9:a3:0d:47:ad:34:07:
         c0:ac:9a:57:ac:c0:de:01:62:14:b2:f9:21:d1:e6:9e:69:90:
         ac:f7:bc:62:6e:7f:65:15:c2:0d:04:bd:07:79:92:f6:c3:2c:
         27:6a:f0:a3:2d:e5:b4:40:50:a8:95:8a:19:61:5d:31:57:00:
         79:f5:f6:8a:b4:e1:cf:b5:fe:34:1f:91:0b:46:66:9e:0b:af:
         c7:42:db:d5:b8:b3:8d:af:a1:a1:41:28:08:30:7f:26:ec:87:
         3c:bc:ba:a5:18:6f:04:0a:64:80:fa:2d:f2:9b:5d:99:f8:e8:
         53:ae:b4:e4:c9:41:49:8d:24:de:70:4d:75:9a:8a:99:8a:ed:
         44:7a:f2:61:e5:e6:93:12:d7:da:85:c4:bf:f6:d2:67:f8:d5:
         55:26:55:b2:e4:9f:f7:76:98:6c:0e:36:69:25:15:ce:7a:c9:
         f4:ad:eb:83:7d:9b:90:42:42:c0:69:98:99:fc:13:ef:4b:61:
         a0:08:65:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----