Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CENTROID/fgekY_HfjpgVzED8Io18t1oXLG8.roa
File:                     fgekY_HfjpgVzED8Io18t1oXLG8.roa (raw, json)
Hash identifier:          2V91WBeFQgAYKBbDWDmZiqfDvoQVlgbs54u1+STtleg=
Subject key identifier:   7E:07:A4:63:F1:DF:8E:98:15:CC:40:FC:22:8D:7C:B7:5A:17:2C:6F
Certificate issuer:       /CN=795A91ED40AAA15B9ABCA21C205B36EC74949FC8
Certificate serial:       0860
Authority key identifier: 79:5A:91:ED:40:AA:A1:5B:9A:BC:A2:1C:20:5B:36:EC:74:94:9F:C8
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/eVqR7UCqoVuavKIcIFs27HSUn8g.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/fgekY_HfjpgVzED8Io18t1oXLG8.roa
Signing time:             Mon 25 Jan 2021 03:55:10 +0000
ROA not before:           Mon 25 Jan 2021 03:55:10 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     135293
IP address blocks:        103.104.149.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2144 (0x860)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=795A91ED40AAA15B9ABCA21C205B36EC74949FC8
        Validity
            Not Before: Jan 25 03:55:10 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=7E07A463F1DF8E9815CC40FC228D7CB75A172C6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:dd:99:5c:26:eb:31:7a:1d:1d:a8:30:36:b6:
                    48:67:fa:53:48:c2:6a:a2:9f:15:cb:e7:85:50:4e:
                    93:57:b6:52:6e:07:de:f5:42:67:57:99:61:7e:0a:
                    68:9b:8b:d3:28:10:9a:dd:c4:7a:82:6c:9e:7c:cf:
                    68:59:c4:1e:82:ff:4b:d9:83:fa:e7:d0:e6:08:df:
                    d7:19:0d:9a:11:39:c8:9f:74:42:45:0a:2f:60:40:
                    e8:48:8a:b3:6c:1f:5a:d5:42:03:eb:76:c1:a7:74:
                    3f:d3:77:b5:ee:96:df:34:0f:5d:26:6b:fd:af:30:
                    d1:75:bd:0d:c8:b3:18:47:56:5a:2a:6a:e7:1f:21:
                    54:bb:a0:3a:44:7e:f3:0c:98:18:c8:77:90:e5:d3:
                    3f:4c:dd:48:84:4d:00:0d:e5:c0:63:af:f9:df:14:
                    e0:23:17:27:ae:eb:d0:90:2f:ae:9f:44:76:df:d8:
                    ad:c4:ce:45:e0:ee:fb:9d:e5:e1:47:90:fc:25:68:
                    af:f2:a3:19:a3:a6:bc:35:66:c7:2c:26:6a:47:9f:
                    9a:98:bd:67:cb:c9:91:46:d1:49:27:2b:c7:04:7b:
                    79:59:ae:3f:7c:75:9d:df:59:d5:19:3e:d9:4f:7b:
                    62:f2:10:de:7f:9a:1e:74:a3:38:bc:24:e1:ec:33:
                    b8:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:07:A4:63:F1:DF:8E:98:15:CC:40:FC:22:8D:7C:B7:5A:17:2C:6F
            X509v3 Authority Key Identifier:
                keyid:79:5A:91:ED:40:AA:A1:5B:9A:BC:A2:1C:20:5B:36:EC:74:94:9F:C8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/eVqR7UCqoVuavKIcIFs27HSUn8g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/eVqR7UCqoVuavKIcIFs27HSUn8g.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/fgekY_HfjpgVzED8Io18t1oXLG8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.104.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:b8:52:6e:ce:12:90:3d:19:17:22:1c:2d:f0:40:7b:ac:5d:
         e0:48:e4:7d:4e:9a:59:59:6c:f8:e2:08:75:79:c3:d5:d6:ed:
         2c:0e:cf:32:fa:6d:39:bc:1c:81:94:59:6d:29:79:17:77:73:
         f7:7a:af:f6:4a:88:7e:f2:d9:3b:1e:73:c6:46:72:4b:81:2a:
         06:66:a6:b9:34:59:6b:90:3f:94:db:29:aa:ce:ba:30:3b:00:
         35:40:60:1c:8a:c4:dd:bc:75:06:0e:6a:96:66:38:86:28:85:
         24:5a:d6:7d:c6:88:00:71:cb:75:d9:de:14:14:b3:73:4c:58:
         4e:fa:62:6f:49:7f:0d:17:62:2d:09:2f:ab:50:9e:d4:28:cd:
         ec:c8:ed:50:ea:3f:7f:d9:6e:aa:db:8e:67:b4:c1:a4:d0:b0:
         bc:94:7a:ba:46:15:b1:5f:9b:cb:a5:ba:63:e1:11:3b:34:51:
         2e:90:4d:66:38:83:0e:e3:84:af:a0:5e:1d:37:cd:7f:65:d0:
         a6:a8:c4:ea:3f:80:5a:f2:24:15:94:d2:aa:8c:9c:35:90:8e:
         0d:b5:d4:48:e4:0c:09:4a:7f:ae:02:e5:cd:01:61:4a:2a:ec:
         d6:a8:2d:ab:f6:61:30:13:50:87:65:46:5a:d4:26:66:47:e7:
         bb:13:9b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----