Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/elMovoz2wgRftcUAhu14RlZT8Jg.roa
File:                     elMovoz2wgRftcUAhu14RlZT8Jg.roa (raw, json)
Hash identifier:          dKknnBhy8t4xd5IU8sj+l9t7iOJSJlh3R9ojNPrnVVo=
Subject key identifier:   7A:53:28:BE:8C:F6:C2:04:5F:B5:C5:00:86:ED:78:46:56:53:F0:98
Certificate issuer:       /CN=2855973672B1EED71760C0942C27FD5F7569019C
Certificate serial:       0979
Authority key identifier: 28:55:97:36:72:B1:EE:D7:17:60:C0:94:2C:27:FD:5F:75:69:01:9C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/elMovoz2wgRftcUAhu14RlZT8Jg.roa
Signing time:             Wed 29 Sep 2021 02:52:21 +0000
ROA not before:           Wed 29 Sep 2021 02:52:21 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     18046
IP address blocks:        122.200.152.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2425 (0x979)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2855973672B1EED71760C0942C27FD5F7569019C
        Validity
            Not Before: Sep 29 02:52:21 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=7A5328BE8CF6C2045FB5C50086ED78465653F098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6c:a8:20:ad:89:d5:77:c4:bf:1a:7f:28:2d:
                    b4:6b:37:69:ae:54:fe:15:cb:b8:38:c0:c5:c0:50:
                    d1:2f:0c:ef:e6:88:93:4d:99:44:fd:f4:be:d6:47:
                    b2:63:1d:62:88:36:ab:6d:98:42:2b:89:30:9e:23:
                    40:d7:77:c2:9d:7a:e9:2a:43:c2:70:5f:95:ee:7f:
                    90:6c:18:8e:56:cb:31:0f:21:4b:a8:a0:f4:1b:35:
                    25:3f:6a:93:5f:c6:ec:65:e6:73:5c:5d:00:2b:06:
                    69:2e:6e:7f:05:23:c6:d8:e5:b8:70:31:2a:12:55:
                    c9:0f:1d:64:72:12:fb:87:4f:46:9c:f1:19:bf:05:
                    f1:80:83:94:f8:8e:ae:3b:28:48:94:ef:7d:f3:69:
                    41:87:60:58:91:a4:76:21:d0:d4:2d:1d:ec:34:94:
                    7d:f3:a4:36:7f:d1:a7:62:49:16:c2:ab:ff:97:7b:
                    42:f1:b1:e7:37:33:7e:cb:2c:bb:5d:5d:64:63:8f:
                    ef:bb:ba:9c:63:57:8d:6d:54:97:94:99:9d:45:c8:
                    ae:f7:6c:d0:9a:05:ed:a7:98:e6:83:62:37:bc:ef:
                    9c:ba:ca:cb:5e:b9:4c:49:79:93:ad:db:95:92:24:
                    ca:cc:8f:d4:82:02:01:35:8e:55:8b:3e:eb:50:60:
                    25:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:53:28:BE:8C:F6:C2:04:5F:B5:C5:00:86:ED:78:46:56:53:F0:98
            X509v3 Authority Key Identifier:
                keyid:28:55:97:36:72:B1:EE:D7:17:60:C0:94:2C:27:FD:5F:75:69:01:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/KFWXNnKx7tcXYMCULCf9X3VpAZw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/elMovoz2wgRftcUAhu14RlZT8Jg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.200.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7f:98:77:b8:9c:a8:80:d5:9d:aa:06:12:60:f3:c3:af:e1:92:
         c9:e9:3e:ca:86:83:ea:2c:df:d2:7f:68:46:ce:03:fc:ea:42:
         28:1c:c8:5a:ed:6c:b2:4d:5a:d4:dc:57:4e:7c:ca:35:13:7e:
         7d:88:2b:ee:9c:b4:7e:b9:68:20:60:95:f4:1d:ba:cf:da:f6:
         52:62:5d:0c:a1:b1:e3:b7:d2:fd:a4:8a:83:ee:9e:fc:5c:3e:
         d0:51:66:55:f2:c4:e6:66:f7:b9:c3:8f:eb:1a:b0:60:ee:ba:
         35:98:d0:09:6e:cf:fb:c4:06:46:41:fd:ad:13:17:1b:93:d1:
         72:9c:9d:6e:79:ef:b8:9b:45:d3:ff:f5:0e:cb:8c:d2:21:ce:
         a8:3e:c9:c4:9b:87:a4:f3:0f:d3:8f:98:35:11:b7:18:f2:fc:
         26:40:53:4a:16:30:36:57:94:7b:a7:95:cb:aa:84:db:d8:b4:
         48:8b:4f:42:26:64:87:6d:47:94:12:cf:34:50:02:81:7f:d8:
         ff:ad:ca:8a:0b:d4:63:5c:3c:a2:56:4f:14:13:c2:f1:d6:30:
         4f:e3:3f:f1:a1:43:76:63:27:32:29:ee:10:ff:4f:db:5e:77:
         87:8b:02:ef:dd:6a:8b:8e:bb:84:f2:6a:94:be:c5:bc:4f:d8:
         74:0e:d2:78
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----