Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CENTROID/IsBDTNupnclN-qYxPHgvHNZLqbo.roa
File:                     IsBDTNupnclN-qYxPHgvHNZLqbo.roa (raw, json)
Hash identifier:          W61IfS/jsSVdMvWXaveDKgQHHe6wUsupiEg3vJRdmIk=
Subject key identifier:   22:C0:43:4C:DB:A9:9D:C9:4D:FA:A6:31:3C:78:2F:1C:D6:4B:A9:BA
Certificate issuer:       /CN=795A91ED40AAA15B9ABCA21C205B36EC74949FC8
Certificate serial:       0731
Authority key identifier: 79:5A:91:ED:40:AA:A1:5B:9A:BC:A2:1C:20:5B:36:EC:74:94:9F:C8
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/eVqR7UCqoVuavKIcIFs27HSUn8g.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/IsBDTNupnclN-qYxPHgvHNZLqbo.roa
Signing time:             Tue 29 Sep 2020 09:59:16 +0000
ROA not before:           Tue 29 Sep 2020 09:59:16 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     135293
IP address blocks:        103.104.148.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1841 (0x731)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=795A91ED40AAA15B9ABCA21C205B36EC74949FC8
        Validity
            Not Before: Sep 29 09:59:16 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=22C0434CDBA99DC94DFAA6313C782F1CD64BA9BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:42:90:13:1f:49:8c:c2:1d:44:dc:41:43:fc:
                    4f:2a:59:01:d8:a8:8f:3d:33:af:b2:99:94:4b:d0:
                    91:2f:61:c3:c6:46:71:30:1b:18:02:d1:1d:40:66:
                    06:9e:fb:d3:e6:ce:74:16:71:cb:9a:a9:2c:c7:bb:
                    a3:b2:9e:77:af:46:46:76:6c:27:9c:fb:4b:b4:44:
                    04:74:64:88:1f:22:f4:1f:f9:94:75:96:f3:2d:b0:
                    5b:ab:cb:16:94:46:d7:20:e8:1e:18:e0:a9:e3:d1:
                    46:4c:13:71:3f:be:ea:75:ba:30:fd:60:94:5b:3f:
                    37:dd:a4:86:4a:54:6f:a3:f8:62:2f:ea:7e:8a:68:
                    37:a9:6e:a2:03:31:48:d8:2f:f9:ca:9f:13:d5:4c:
                    f7:79:a2:66:01:a9:9a:86:dd:a9:b9:99:58:1f:35:
                    70:a6:c6:80:cc:16:43:b7:09:2a:59:70:92:cd:7f:
                    82:40:68:82:c4:82:d3:9a:64:9f:af:00:c7:98:5b:
                    1d:a6:6c:43:e0:3d:19:47:84:4e:36:78:7e:f6:d6:
                    02:88:ce:5c:ef:96:5f:5b:f2:74:2a:a3:a3:87:40:
                    cd:69:42:0c:82:f0:b9:bf:67:23:1c:d0:a7:99:88:
                    ce:69:d8:d8:8b:77:43:b1:b6:63:be:8a:23:90:5a:
                    b0:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:C0:43:4C:DB:A9:9D:C9:4D:FA:A6:31:3C:78:2F:1C:D6:4B:A9:BA
            X509v3 Authority Key Identifier:
                keyid:79:5A:91:ED:40:AA:A1:5B:9A:BC:A2:1C:20:5B:36:EC:74:94:9F:C8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/eVqR7UCqoVuavKIcIFs27HSUn8g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/eVqR7UCqoVuavKIcIFs27HSUn8g.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/IsBDTNupnclN-qYxPHgvHNZLqbo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.104.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:09:63:30:ba:a3:e1:c7:cb:8a:5f:05:b8:33:a5:83:d3:1e:
         8e:7a:4f:31:be:69:62:23:5f:4a:8a:e9:dc:31:92:68:66:4d:
         ad:3f:7a:11:49:06:36:c4:0b:09:54:c9:4b:26:75:12:94:4e:
         55:8f:d5:f2:39:34:8f:5f:53:72:74:28:43:44:fa:2c:73:3d:
         db:ed:a0:28:de:00:00:c5:68:17:7a:9d:8f:6c:1f:6a:ee:95:
         c8:81:44:54:d7:97:8c:39:34:62:dc:e3:f9:19:7c:54:4f:8e:
         06:39:f8:30:e5:27:ae:f3:a5:35:fa:50:85:0c:ae:31:4f:6b:
         a5:f0:28:cb:3c:3d:4c:4a:81:23:36:11:f5:52:74:59:e8:ba:
         0b:5b:90:3f:0f:39:65:8c:54:29:83:dd:9d:9b:58:27:44:a8:
         96:8e:79:19:34:2b:41:a0:66:4f:15:b4:83:d8:ae:0d:bd:71:
         6d:ce:f8:c8:31:d5:4d:95:02:9c:7e:e3:8f:c5:51:8d:b8:1d:
         b0:e4:d9:48:73:21:b7:7e:57:68:4d:9d:5a:51:99:fa:6f:92:
         a0:db:fa:6e:a3:e9:70:69:59:e2:9b:be:1f:29:58:54:98:91:
         d1:7e:06:e1:76:e4:16:53:35:87:bb:a7:ef:43:94:6d:62:41:
         cf:4b:e6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----