Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/e2KRt2O3-8J99bfmXWYCRwtAUA0.roa
File:                     e2KRt2O3-8J99bfmXWYCRwtAUA0.roa (raw, json)
Hash identifier:          TiinbXP25yEqQdSIKGZkcB3poM80xZOjMAM7L6czXMY=
Subject key identifier:   7B:62:91:B7:63:B7:FB:C2:7D:F5:B7:E6:5D:66:02:47:0B:40:50:0D
Certificate issuer:       /CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Certificate serial:       09E4
Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/e2KRt2O3-8J99bfmXWYCRwtAUA0.roa
Signing time:             Wed 29 Sep 2021 02:52:07 +0000
ROA not before:           Wed 29 Sep 2021 02:52:07 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     18429
IP address blocks:        124.155.184.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2532 (0x9e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
        Validity
            Not Before: Sep 29 02:52:07 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=7B6291B763B7FBC27DF5B7E65D6602470B40500D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:a7:d9:ff:db:22:1f:75:75:b9:a9:3d:ae:92:
                    36:e5:25:2b:32:61:c0:6b:e7:17:70:1f:75:86:47:
                    6a:9e:fc:43:f9:c0:90:1b:0f:e7:d0:09:69:a4:82:
                    a2:7b:34:bb:11:82:e5:06:96:4b:49:4a:94:19:9f:
                    83:ab:b0:3a:0b:4c:48:d7:77:9c:34:d9:4e:52:1b:
                    e3:68:9c:83:8c:ab:c1:43:56:6b:41:ac:11:f7:66:
                    2d:02:60:42:5b:ac:17:83:ed:73:d0:51:96:bc:80:
                    7e:db:3b:d4:cf:7b:16:3d:bd:97:11:61:1a:4e:09:
                    05:ec:34:34:88:ac:0d:a9:d5:2b:c6:84:08:6b:82:
                    29:f8:b0:56:82:ab:e1:1d:1a:75:db:e0:d6:e4:1a:
                    c6:f5:53:13:4f:be:ed:62:82:76:fc:cb:cb:2f:b0:
                    50:a3:93:fe:c8:cc:b3:3f:f6:8e:63:a1:cb:6a:cd:
                    52:9c:e2:f4:72:eb:e8:4d:5f:ad:80:8d:ba:1b:c2:
                    1a:a3:12:f0:72:23:b2:7d:14:58:48:f6:f6:c5:5a:
                    5e:32:92:75:ff:8c:1d:2a:6c:b6:05:d7:62:3e:99:
                    8e:89:94:92:99:ca:02:62:54:1c:7a:9a:65:0f:d9:
                    70:fe:3b:d7:b0:33:86:a2:09:26:6a:3d:6f:30:8c:
                    04:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:62:91:B7:63:B7:FB:C2:7D:F5:B7:E6:5D:66:02:47:0B:40:50:0D
            X509v3 Authority Key Identifier:
                keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/e2KRt2O3-8J99bfmXWYCRwtAUA0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.155.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8b:ff:34:f0:29:31:7f:76:28:fb:9a:81:e8:ec:46:53:72:96:
         db:c3:50:11:f1:8f:0d:aa:67:0f:4c:18:0b:10:89:77:7c:e6:
         2f:3f:5a:4a:2a:d1:c4:67:9d:00:0e:38:e8:5d:73:3f:75:c5:
         92:c3:98:3b:af:e9:78:a7:a2:c5:f3:37:a5:42:73:ed:c6:d1:
         57:29:b0:cf:c0:1d:18:f5:32:69:0c:16:8d:2b:37:4a:9c:c6:
         b1:4a:81:1e:f2:0a:d3:61:f2:06:93:4f:39:d2:cd:23:76:a6:
         5d:61:53:b2:0d:5d:3e:d1:ab:5e:1b:3f:a6:05:c1:cb:72:2d:
         0d:66:34:3f:33:f5:01:49:fa:bd:d3:51:1a:71:23:ed:10:35:
         3e:eb:cf:36:62:8f:cf:fd:81:74:20:c4:86:bd:a8:d8:9e:b6:
         28:c9:04:2b:50:a1:6c:16:06:5e:4a:1b:7e:0a:19:a6:97:a9:
         3c:08:e2:6f:cf:ba:56:3a:5a:0e:30:0a:be:60:16:ff:1f:5a:
         36:4c:f7:36:e5:a6:19:1d:22:4a:9a:eb:6e:fa:0e:50:ea:f9:
         c7:ad:2e:0f:86:d8:06:f8:2b:f0:b7:91:23:b5:31:53:71:39:
         4b:71:21:6e:4b:67:17:88:69:9a:6f:1d:3c:33:f2:9f:a6:9f:
         66:00:32:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----