Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/QDO1DCtVmLJ4Qd-HOfQq_JWj2SY.roa
File:                     QDO1DCtVmLJ4Qd-HOfQq_JWj2SY.roa (raw, json)
Hash identifier:          Gh5/eF/YNIz3YUfOIwAB6ttRw2M/qP1UhYpZOv/5oIg=
Subject key identifier:   40:33:B5:0C:2B:55:98:B2:78:41:DF:87:39:F4:2A:FC:95:A3:D9:26
Certificate issuer:       /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial:       0ACA
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/QDO1DCtVmLJ4Qd-HOfQq_JWj2SY.roa
Signing time:             Sun 07 Feb 2021 12:38:09 +0000
ROA not before:           Sun 07 Feb 2021 12:38:09 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131627
IP address blocks:        150.117.160.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2762 (0xaca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
        Validity
            Not Before: Feb  7 12:38:09 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=4033B50C2B5598B27841DF8739F42AFC95A3D926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3e:95:78:9f:46:17:b7:32:8f:ab:28:bd:d6:
                    81:08:7f:0d:f3:aa:9e:25:5a:56:8c:07:ad:4b:4f:
                    ae:a4:3c:4f:25:b8:98:46:7a:0a:36:20:0d:a1:7f:
                    57:92:11:9a:05:71:86:aa:0c:64:69:d9:be:df:44:
                    89:a0:f8:98:96:21:a2:9c:30:2c:4c:38:83:53:d9:
                    d3:ce:39:e2:22:9e:3d:12:38:ef:dd:bb:b7:fa:1f:
                    43:a5:78:f6:41:39:51:38:23:0e:aa:5b:17:2a:d2:
                    84:f7:b5:41:4f:78:78:88:f0:d4:1c:83:d5:3d:39:
                    05:57:ee:91:c2:30:bd:7d:d6:0a:f6:49:31:59:b5:
                    79:d0:60:5b:d7:3d:01:6b:6a:4c:10:fa:8f:a3:ce:
                    df:02:60:b0:58:68:ce:1c:cb:c6:54:eb:03:d1:37:
                    e6:3b:91:3c:11:3e:78:6b:e0:35:c7:f5:29:d1:00:
                    30:ae:42:09:74:7a:57:eb:2e:ed:e2:35:8b:97:af:
                    a3:72:0d:fb:85:d3:20:a1:89:23:16:3a:56:2a:76:
                    fd:01:f9:15:63:7f:ef:31:3b:f5:4a:54:0b:0a:e7:
                    68:9a:9c:62:79:54:11:12:5c:de:24:9a:8e:fd:c5:
                    30:9d:24:2f:82:99:d9:2a:0b:88:36:f4:cb:6c:0e:
                    76:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:33:B5:0C:2B:55:98:B2:78:41:DF:87:39:F4:2A:FC:95:A3:D9:26
            X509v3 Authority Key Identifier:
                keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/QDO1DCtVmLJ4Qd-HOfQq_JWj2SY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.117.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         46:54:99:92:1e:1a:9f:50:49:ca:72:77:6e:33:d8:22:fd:44:
         8f:a5:73:c1:17:15:6e:e3:e7:bc:89:b3:df:14:2b:df:39:8b:
         2a:3a:ff:fb:b4:1d:90:96:fa:1b:55:a9:87:71:c9:1c:d4:af:
         20:3a:20:a0:3a:48:33:1a:e1:10:d7:fe:4a:a4:7c:2a:67:ab:
         35:74:97:01:63:2d:7a:9b:d0:ec:bd:2e:33:20:5a:3c:1a:dc:
         40:17:a3:89:3c:25:91:7b:7a:13:dc:f2:ee:af:52:37:73:49:
         52:f7:60:8f:b0:67:3b:1e:bd:4e:36:3a:cf:45:4a:dc:ff:98:
         93:f6:71:29:2e:a5:c7:b1:dd:a0:65:4a:4c:ff:d1:21:4c:7e:
         83:9b:29:4d:27:3a:79:1f:29:5d:5e:6d:f2:95:43:df:4d:b6:
         04:82:a1:04:74:ef:f5:7c:2f:b6:1a:7a:ed:a1:3d:23:61:c4:
         2c:3b:d0:4f:de:23:b6:c4:0a:13:85:f0:34:c3:bc:18:48:22:
         be:1f:07:4f:3b:1a:8b:cc:e2:7d:61:d1:80:c0:7c:c8:2c:a8:
         f9:32:3c:8b:ad:ae:e5:ee:07:5b:84:8e:1c:fd:67:27:47:94:
         d5:7f:5f:b0:72:66:8d:ee:f9:17:d5:8e:3b:b7:ae:e3:26:cc:
         96:91:4b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----