Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/S_xSrm0FWnw0dI4u-XGJsOdU7Pg.roa
File:                     S_xSrm0FWnw0dI4u-XGJsOdU7Pg.roa (raw, json)
Hash identifier:          fg8rCnCSYxOnkrrdVq69zkVR0lp1RpBIny2KSFsaDsI=
Subject key identifier:   4B:FC:52:AE:6D:05:5A:7C:34:74:8E:2E:F9:71:89:B0:E7:54:EC:F8
Certificate issuer:       /CN=8A3FD89CE70A14F13ED0A86459224D007DD0A148
Certificate serial:       0554
Authority key identifier: 8A:3F:D8:9C:E7:0A:14:F1:3E:D0:A8:64:59:22:4D:00:7D:D0:A1:48
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/ij_YnOcKFPE-0KhkWSJNAH3QoUg.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/S_xSrm0FWnw0dI4u-XGJsOdU7Pg.roa
Signing time:             Wed 29 Sep 2021 02:36:40 +0000
ROA not before:           Wed 29 Sep 2021 02:36:40 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     131618
IP address blocks:        103.148.146.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1364 (0x554)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A3FD89CE70A14F13ED0A86459224D007DD0A148
        Validity
            Not Before: Sep 29 02:36:40 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=4BFC52AE6D055A7C34748E2EF97189B0E754ECF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0a:91:21:63:57:da:19:a5:e8:33:c1:0b:28:
                    4d:28:ba:cc:fb:55:94:f1:24:2d:40:1c:eb:77:0c:
                    5b:1e:7d:4c:08:6f:d5:53:94:95:b6:34:fa:06:93:
                    b9:e5:1b:c4:59:fc:fc:81:a1:a0:51:fe:67:93:2f:
                    2a:52:00:b6:69:da:2c:33:91:ae:79:84:c5:3e:b1:
                    50:6e:bf:f6:5a:68:f2:17:fe:9a:b5:25:6f:36:22:
                    fe:02:eb:51:f5:d2:0c:76:83:11:dd:41:34:14:dd:
                    25:48:b3:7c:07:a6:90:41:18:45:1c:74:ca:3f:5f:
                    a8:c3:ea:ae:f2:44:b2:51:dc:58:f7:9e:18:63:6a:
                    6f:18:72:17:80:bd:89:1d:3c:4a:67:99:4f:c9:b4:
                    99:46:e7:d6:9c:ee:40:0a:cd:d3:36:3c:b8:49:b9:
                    01:78:8a:1c:ab:d9:4a:30:99:f5:06:e6:b5:04:12:
                    7a:96:37:7e:7d:4a:a9:0a:9f:49:f7:2f:84:00:14:
                    8a:4f:80:1f:c0:70:2b:9b:18:77:83:31:27:ab:ab:
                    e0:db:42:33:11:05:4e:52:2a:e5:d4:ca:55:47:e1:
                    e8:e7:b3:bf:22:ec:cd:6c:d4:f7:e5:98:e3:56:3e:
                    54:df:be:88:ab:d0:c7:d6:f0:52:0a:58:a3:ad:c5:
                    e2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:FC:52:AE:6D:05:5A:7C:34:74:8E:2E:F9:71:89:B0:E7:54:EC:F8
            X509v3 Authority Key Identifier:
                keyid:8A:3F:D8:9C:E7:0A:14:F1:3E:D0:A8:64:59:22:4D:00:7D:D0:A1:48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/ij_YnOcKFPE-0KhkWSJNAH3QoUg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ij_YnOcKFPE-0KhkWSJNAH3QoUg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCHIAO/S_xSrm0FWnw0dI4u-XGJsOdU7Pg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a3:c7:4b:9e:e4:0b:09:47:7f:5d:8e:97:86:3a:c4:a5:87:6c:
         2f:2a:4f:9f:be:f8:47:53:c7:cd:f7:0c:5d:cd:d7:08:19:0c:
         17:12:13:19:c5:58:26:e6:8d:2b:1e:e5:ca:84:5b:93:7e:ae:
         18:a0:16:5f:ff:b3:04:55:dc:ba:90:f8:7c:7f:57:04:b9:60:
         d3:1a:3e:50:85:c7:39:fe:d9:23:cb:b6:bd:e2:c2:3c:80:14:
         77:e4:eb:85:5e:12:03:be:35:b7:64:6c:f3:19:b2:42:72:ba:
         e3:91:3c:ea:ca:09:d0:a6:83:67:af:92:bb:e2:a1:58:19:cb:
         35:de:b2:fd:84:b4:d5:20:b4:69:32:09:e0:80:4d:7d:c3:32:
         90:13:e5:76:ae:ec:37:32:32:3f:02:d3:83:3d:b8:9a:1f:ff:
         c6:1e:d3:19:ec:4f:03:e6:6c:dc:15:85:4d:53:94:51:76:9a:
         be:1f:02:20:95:10:2d:0c:78:47:f4:fe:8e:d0:bc:99:ac:82:
         07:92:a3:c6:60:2c:1b:25:55:37:2c:27:70:93:15:ae:22:9b:
         a4:78:28:7f:c1:d3:9a:83:2b:52:17:66:37:21:8a:e2:94:f7:
         b3:f5:11:16:af:2e:49:b7:37:44:a1:da:37:58:e5:c9:f5:41:
         ad:8c:04:f9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----