Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CENTROID/vzK2Yf51syNi3OhF-8LZGu703z4.roa
File:                     vzK2Yf51syNi3OhF-8LZGu703z4.roa (raw, json)
Hash identifier:          v6iYrktSGhowNey0PHrh6MBnCmywPAp45tH6saUhj6s=
Subject key identifier:   BF:32:B6:61:FE:75:B3:23:62:DC:E8:45:FB:C2:D9:1A:EE:F4:DF:3E
Certificate issuer:       /CN=795A91ED40AAA15B9ABCA21C205B36EC74949FC8
Certificate serial:       0732
Authority key identifier: 79:5A:91:ED:40:AA:A1:5B:9A:BC:A2:1C:20:5B:36:EC:74:94:9F:C8
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/eVqR7UCqoVuavKIcIFs27HSUn8g.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/vzK2Yf51syNi3OhF-8LZGu703z4.roa
Signing time:             Tue 29 Sep 2020 09:59:17 +0000
ROA not before:           Tue 29 Sep 2020 09:59:17 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     135293
IP address blocks:        103.104.150.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1842 (0x732)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=795A91ED40AAA15B9ABCA21C205B36EC74949FC8
        Validity
            Not Before: Sep 29 09:59:17 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=BF32B661FE75B32362DCE845FBC2D91AEEF4DF3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a2:5e:f3:55:a6:94:f5:e7:37:64:39:ca:1a:
                    46:70:db:9d:7c:52:f9:f0:e9:e6:bf:99:de:36:0c:
                    23:9e:ea:01:94:20:85:d1:27:d0:1e:fd:83:9c:0e:
                    c1:d6:5d:1f:2e:6c:47:d9:af:82:73:ad:66:84:68:
                    a0:70:e4:d1:ab:ce:ea:18:ef:06:19:7f:5a:4b:d5:
                    68:22:e5:18:b8:c0:2a:53:b3:e6:79:d4:51:c6:98:
                    31:39:1d:41:f9:d6:2f:61:ff:4e:7c:25:48:ad:a4:
                    87:b4:0b:ff:22:f8:61:dd:7f:ea:0f:f5:03:11:57:
                    b2:4f:29:c1:a8:d5:11:40:6e:18:de:f7:89:9a:87:
                    86:72:7c:1d:9c:90:ca:d0:eb:e6:55:b6:9f:90:4b:
                    5d:5d:31:45:b6:d2:90:74:9a:fb:f5:f9:e7:9b:e6:
                    77:0d:81:ad:e8:87:71:7f:ce:82:2c:a1:e9:ad:65:
                    c6:da:04:0a:05:47:ea:5a:0d:00:a1:e1:ca:b1:68:
                    89:da:99:7b:75:4a:0f:4a:fe:33:bc:c8:85:2b:78:
                    d6:71:81:33:48:d6:c0:b9:02:0f:31:a0:4a:d2:e1:
                    32:f3:08:a0:6d:6a:f2:91:43:5d:6f:1b:0b:6f:b5:
                    0a:8d:c8:f5:d4:ba:c2:a0:fa:c9:f1:7a:3a:9f:c2:
                    6e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:32:B6:61:FE:75:B3:23:62:DC:E8:45:FB:C2:D9:1A:EE:F4:DF:3E
            X509v3 Authority Key Identifier:
                keyid:79:5A:91:ED:40:AA:A1:5B:9A:BC:A2:1C:20:5B:36:EC:74:94:9F:C8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/eVqR7UCqoVuavKIcIFs27HSUn8g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/eVqR7UCqoVuavKIcIFs27HSUn8g.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/vzK2Yf51syNi3OhF-8LZGu703z4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.104.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:b4:e2:fb:33:23:40:55:a1:3d:b2:2e:50:66:97:de:23:0a:
         d8:aa:b7:d8:b5:8c:83:56:6d:08:60:90:cb:51:11:35:2b:e3:
         cb:06:01:55:f0:a0:25:d5:20:df:26:7f:9e:c5:37:77:c8:f3:
         40:fd:ff:59:5f:93:c2:db:c0:b9:94:ee:07:1a:e9:f8:c3:8a:
         58:c8:a0:c4:50:2e:cb:5b:24:28:2d:86:ea:2f:b2:e1:fe:2a:
         fc:98:fd:00:a9:02:a4:d0:32:d2:b5:9b:69:39:94:32:a9:64:
         53:e2:be:1e:dc:07:b2:dd:fc:eb:e6:8c:cc:44:b4:6c:e2:00:
         17:65:b8:02:7f:66:e3:d9:e2:9f:1b:1a:39:bb:8e:dd:de:93:
         ae:9f:4f:83:6c:75:c8:b9:4a:12:39:f3:a4:68:7f:22:06:36:
         69:e3:28:e0:e8:42:e7:e3:36:ff:c2:2e:c0:4a:f7:bb:a8:c6:
         50:5b:6a:5c:30:61:95:d0:87:1d:a4:d0:4d:d6:14:d7:26:86:
         1f:50:0d:31:fe:ac:2b:6a:b2:d3:b8:09:e1:ed:70:b9:5e:6d:
         2c:99:50:d3:af:d1:01:6e:67:ec:c2:b3:9d:4f:ae:6b:ad:58:
         97:66:10:6a:31:f1:cb:30:6c:13:0e:76:1b:92:a6:f1:87:e9:
         5f:25:f8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----