Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CENTROID/vX-wxA7Th3I4KUP2xYbt3OY8qVw.roa
File:                     vX-wxA7Th3I4KUP2xYbt3OY8qVw.roa (raw, json)
Hash identifier:          OJTJHEggaU7fk3GhVwZgxACImCwWP0rozhaEkuvV8kY=
Subject key identifier:   BD:7F:B0:C4:0E:D3:87:72:38:29:43:F6:C5:86:ED:DC:E6:3C:A9:5C
Certificate issuer:       /CN=795A91ED40AAA15B9ABCA21C205B36EC74949FC8
Certificate serial:       0912
Authority key identifier: 79:5A:91:ED:40:AA:A1:5B:9A:BC:A2:1C:20:5B:36:EC:74:94:9F:C8
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/eVqR7UCqoVuavKIcIFs27HSUn8g.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/vX-wxA7Th3I4KUP2xYbt3OY8qVw.roa
Signing time:             Wed 29 Sep 2021 02:51:56 +0000
ROA not before:           Wed 29 Sep 2021 02:51:56 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     135293
IP address blocks:        103.104.149.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2322 (0x912)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=795A91ED40AAA15B9ABCA21C205B36EC74949FC8
        Validity
            Not Before: Sep 29 02:51:56 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=BD7FB0C40ED38772382943F6C586EDDCE63CA95C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:93:bf:49:46:ee:9e:f8:57:4a:b4:ba:54:11:
                    63:cc:1d:11:e5:a8:9c:22:f5:0b:6b:5e:9a:0f:e9:
                    fe:ec:11:81:2f:17:03:ea:da:98:fc:0f:93:ab:0c:
                    8e:cc:20:f5:8b:c0:8f:ae:59:92:fb:50:67:b7:8f:
                    60:5d:ff:83:66:0f:bd:da:ea:a9:70:dc:8d:4f:6d:
                    c1:0a:2f:79:3f:92:93:69:f7:45:4d:aa:c3:c0:4d:
                    5d:c2:55:62:41:50:a6:56:c3:5f:ae:57:e7:b3:aa:
                    6e:58:76:80:90:fa:b0:70:ab:d0:73:14:63:ba:15:
                    96:d6:63:af:55:65:89:5a:47:58:62:17:be:3c:5e:
                    76:2d:96:79:0d:aa:6c:8c:21:f2:f3:f1:a3:e9:0e:
                    a8:97:52:2a:75:91:5f:31:3a:2d:91:ab:da:3a:22:
                    20:52:74:22:57:aa:bb:18:33:5a:31:e7:fd:54:6f:
                    64:a6:02:44:be:9c:02:07:98:3a:95:04:a9:b7:dc:
                    f2:a1:39:a7:bc:c6:02:95:47:19:01:9b:70:2d:b9:
                    db:e9:a8:cd:3b:f0:2b:a6:d2:46:91:c9:78:19:94:
                    10:9b:ee:c6:eb:8c:84:eb:4c:b0:1a:4f:a2:e9:97:
                    be:c0:c4:9f:0d:c2:1f:8f:a3:72:2d:77:2b:0f:cd:
                    b9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:7F:B0:C4:0E:D3:87:72:38:29:43:F6:C5:86:ED:DC:E6:3C:A9:5C
            X509v3 Authority Key Identifier:
                keyid:79:5A:91:ED:40:AA:A1:5B:9A:BC:A2:1C:20:5B:36:EC:74:94:9F:C8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/eVqR7UCqoVuavKIcIFs27HSUn8g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/eVqR7UCqoVuavKIcIFs27HSUn8g.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/vX-wxA7Th3I4KUP2xYbt3OY8qVw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.104.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d5:26:41:f7:dd:af:5e:73:bd:f0:94:d4:b6:42:3a:d4:a3:eb:
         c0:70:41:90:20:ad:01:c2:1b:11:23:c8:20:dc:12:a2:08:a0:
         09:08:2b:57:31:ff:9c:07:32:ec:9a:8e:fa:34:51:a7:88:20:
         ff:f4:12:8a:77:e6:37:53:f7:4c:d0:1b:52:30:d8:42:39:68:
         48:ec:0b:94:c6:c3:ca:5d:74:83:0d:a4:cc:2f:bb:b5:89:19:
         0f:a4:2a:f2:dd:3a:00:ad:4d:12:a2:a4:ef:c8:47:a3:52:3a:
         12:e2:9d:eb:ac:ce:b5:b1:d1:7d:4b:be:bb:34:8e:58:fe:fe:
         67:5e:c4:ba:b5:be:92:fc:17:e6:93:d4:91:bb:6e:9d:0d:7f:
         1d:80:1f:81:db:d0:46:4d:6b:34:ff:3e:bb:dd:11:ce:b0:21:
         9d:40:1a:64:bd:2c:86:74:d2:2b:09:44:34:1e:8f:70:54:ce:
         61:b9:6d:df:13:45:4d:09:19:3f:ca:67:7d:d2:82:57:94:7e:
         67:7e:18:1b:1d:32:37:4c:78:97:c6:c9:48:61:6a:2d:63:d7:
         39:36:f3:6d:6c:6e:23:32:43:c6:eb:0a:09:61:7b:47:e5:3c:
         98:28:a9:67:4d:6a:31:e1:5b:bc:63:26:de:2c:b5:5a:a3:01:
         66:87:e5:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----