Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/6NXCeTRGrB840Pif5IFzY_amoWE.roa
File:                     6NXCeTRGrB840Pif5IFzY_amoWE.roa (raw, json)
Hash identifier:          UQZO5ulWqWIdbMxCMrzFb8VsLCuJHK8vfGxGgbRM80M=
Subject key identifier:   E8:D5:C2:79:34:46:AC:1F:38:D0:F8:9F:E4:81:73:63:F6:A6:A1:61
Certificate issuer:       /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial:       0DCB
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/6NXCeTRGrB840Pif5IFzY_amoWE.roa
Signing time:             Thu 29 Dec 2022 09:31:52 +0000
ROA not before:           Thu 29 Dec 2022 09:31:52 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     131627
IP address blocks:        150.116.96.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3531 (0xdcb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
        Validity
            Not Before: Dec 29 09:31:52 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=E8D5C2793446AC1F38D0F89FE4817363F6A6A161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ed:ee:75:ac:43:77:f6:56:bd:98:b7:8e:77:
                    1f:78:6a:b9:8b:9a:9a:f9:06:82:e4:99:48:69:33:
                    eb:4b:36:ca:5a:64:a4:ae:a0:e8:02:5b:9a:bf:11:
                    7f:42:43:9c:e1:08:9d:79:fb:cf:ac:18:29:05:71:
                    78:4a:da:7b:8f:87:2f:71:97:87:ba:6f:73:a4:d4:
                    6f:b5:4b:53:34:a2:d2:06:b4:5b:f1:b9:b7:13:27:
                    02:bc:fd:60:51:12:35:13:56:c4:a5:f0:e2:0e:b1:
                    1c:e7:2c:b0:77:2d:d5:5e:91:92:b3:9d:3a:c7:c7:
                    0b:81:f3:90:cb:20:9b:2d:2b:9e:f0:72:4a:d0:d7:
                    ea:4c:6e:3f:a3:19:16:45:a9:81:6c:cb:f1:58:a1:
                    02:69:fc:d4:69:b1:99:ce:fc:e4:3f:a5:f0:63:09:
                    e4:d9:ed:14:b8:e7:dc:e9:d8:b3:54:75:11:2a:4d:
                    1e:31:ed:56:6e:e9:eb:a2:35:f4:77:24:8c:7c:f4:
                    27:1b:18:15:ba:44:bf:b4:38:1e:b7:63:70:9c:f1:
                    3f:e6:9e:5b:44:65:a6:c7:62:bf:b2:db:01:1a:ad:
                    e5:9b:08:68:04:81:dc:85:fd:ae:39:e3:a4:43:7c:
                    b6:ed:ac:40:03:84:e3:16:95:2f:b6:fd:62:a5:89:
                    ec:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:D5:C2:79:34:46:AC:1F:38:D0:F8:9F:E4:81:73:63:F6:A6:A1:61
            X509v3 Authority Key Identifier:
                keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/6NXCeTRGrB840Pif5IFzY_amoWE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.116.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a7:c1:1b:77:98:b8:d4:07:1a:f9:c7:eb:3d:79:7a:00:a5:44:
         84:7a:e0:5a:34:c8:f0:79:f0:ed:70:5d:3b:e0:ef:e4:1b:ce:
         7f:28:63:09:de:1b:0e:ee:2a:af:5f:c7:7c:d3:2d:17:14:ac:
         c7:58:14:37:2b:ba:e6:f4:92:1d:7f:ae:c5:e1:c9:15:51:85:
         da:05:ee:0c:1f:d1:ad:e6:4a:d6:1c:38:8b:d8:c4:08:f6:98:
         9b:9b:40:4b:af:5e:a1:20:8f:c5:46:c7:e2:1b:04:81:52:44:
         ca:2d:f4:03:c8:91:81:72:e9:bc:ce:57:5f:8b:b5:40:f1:dc:
         53:0c:fc:2a:15:62:d3:ee:a8:44:95:17:fd:cb:21:52:bd:e3:
         6a:0b:dc:e7:32:4b:e5:79:b9:0d:65:2d:0b:2d:37:73:55:12:
         4e:d5:76:16:93:da:6f:21:9e:bd:0a:9c:53:21:36:c3:5a:3b:
         19:ad:8a:49:6d:2c:ed:02:66:90:d7:d0:37:32:72:72:34:ae:
         fd:ba:31:c8:ca:75:e5:cc:17:82:ce:8e:bf:3f:7a:fd:e9:8f:
         f3:61:59:65:e0:b2:19:e9:d7:89:9e:4f:4a:3b:5d:7d:5d:46:
         9a:25:6b:94:ac:d4:7a:66:89:d6:63:fb:ab:46:14:4d:a6:d9:
         7b:cf:7e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----