Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/2l98thr_29MIChfQ5LH5NJdyVDE.roa
File:                     2l98thr_29MIChfQ5LH5NJdyVDE.roa (raw, json)
Hash identifier:          YCV0gW59y2HsWR/fUeyUuBfxIi03gegbpJjZ7MGjtBE=
Subject key identifier:   DA:5F:7C:B6:1A:FF:DB:D3:08:0A:17:D0:E4:B1:F9:34:97:72:54:31
Certificate issuer:       /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial:       0D61
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/2l98thr_29MIChfQ5LH5NJdyVDE.roa
Signing time:             Thu 15 Sep 2022 02:39:11 +0000
ROA not before:           Thu 15 Sep 2022 02:39:11 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     131627
IP address blocks:        150.116.128.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3425 (0xd61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
        Validity
            Not Before: Sep 15 02:39:11 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=DA5F7CB61AFFDBD3080A17D0E4B1F93497725431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ef:da:04:fd:53:34:5a:92:64:50:8f:9f:a1:
                    21:34:dc:b4:6c:4a:a5:fb:15:50:f4:68:1a:9b:f4:
                    d8:2d:10:2b:90:f1:16:4d:f4:39:ec:b7:59:b7:48:
                    b2:64:aa:2a:1f:90:16:9e:49:ee:cf:d2:ff:92:e8:
                    af:7d:1d:0f:a6:36:41:db:db:68:1a:7f:f6:2e:ae:
                    f2:74:54:b2:75:fe:62:be:76:5e:1e:7c:c2:cc:c1:
                    d7:2a:f7:93:6e:6a:92:1d:68:81:32:42:6d:c7:78:
                    18:65:d1:93:d7:c8:3d:89:90:19:d0:c6:68:a7:4d:
                    8a:9e:e0:3f:da:32:91:f4:97:ec:d2:6a:f3:eb:67:
                    fa:67:f8:a4:96:0c:7c:ea:4f:f5:3a:b7:9a:0b:b3:
                    36:01:81:f0:b1:4a:f1:8c:31:ed:6e:c2:f7:2b:3f:
                    88:9e:de:bd:b9:ae:d5:15:32:29:ae:fa:01:61:b8:
                    54:ff:77:30:4c:7c:f6:77:3f:1b:50:2f:3c:3e:eb:
                    92:50:b7:82:f2:68:0b:19:3b:df:3d:7f:30:af:b7:
                    7d:38:91:2d:30:5c:ca:b9:b7:bc:8b:92:de:86:7a:
                    cd:4c:12:51:75:84:ee:08:cf:c7:3c:33:5c:d9:e8:
                    b7:c2:fc:77:84:2b:91:38:d8:62:8c:08:c3:ae:9a:
                    f9:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:5F:7C:B6:1A:FF:DB:D3:08:0A:17:D0:E4:B1:F9:34:97:72:54:31
            X509v3 Authority Key Identifier:
                keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/2l98thr_29MIChfQ5LH5NJdyVDE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.116.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         9d:23:7d:21:8b:f7:b8:7f:5b:a9:91:82:1e:67:69:37:e9:00:
         3f:ef:f2:4f:86:f7:5e:60:57:e5:cf:01:64:05:9f:d0:e1:02:
         33:f9:d9:80:94:92:80:e6:77:90:71:39:cd:25:1d:0d:8c:66:
         e4:fd:ea:70:23:94:bb:4e:8a:9f:5e:41:e1:e1:39:ad:35:0b:
         56:80:1b:05:56:ff:f2:b7:eb:1d:a5:c4:14:31:07:3d:94:a1:
         2e:ff:05:fa:43:e4:b2:ec:79:8a:72:86:71:1c:17:39:13:a9:
         68:ae:b8:e0:e5:74:32:62:aa:91:2f:60:35:56:8e:d3:ba:1c:
         44:5a:ea:af:22:b9:6a:12:91:23:82:3d:09:ba:00:06:a4:97:
         ff:4d:3f:54:ac:32:64:41:e0:1c:b1:4f:60:92:ab:d4:05:76:
         e7:6c:df:54:a4:3b:f5:01:5f:0b:7f:e8:9f:56:eb:b0:96:62:
         a8:fe:25:63:3c:3c:1b:49:fa:d0:61:e8:09:8b:ee:63:52:05:
         cd:35:d3:c6:12:70:ee:cc:84:f3:cd:fc:84:d8:3a:7d:45:0b:
         f6:39:2c:57:12:c8:d9:70:f2:c6:b8:64:28:77:56:b8:c9:91:
         6d:9f:c8:6f:f2:2f:6a:cb:99:3e:f8:6f:a4:1b:e8:09:e2:5f:
         98:9b:3c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----