Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CKMATES/flveeB5OO59gcSUk83mxrqPLOnA.roa
File:                     flveeB5OO59gcSUk83mxrqPLOnA.roa (raw, json)
Hash identifier:          KPDLXsNNFhUZ7tZS0vT2Nw8qrBixu0s2xLUrHYNLXEI=
Subject key identifier:   7E:5B:DE:78:1E:4E:3B:9F:60:71:25:24:F3:79:B1:AE:A3:CB:3A:70
Certificate issuer:       /CN=5CD10AD5B6A4775D3C504D661071F8CE243E2807
Certificate serial:       087A
Authority key identifier: 5C:D1:0A:D5:B6:A4:77:5D:3C:50:4D:66:10:71:F8:CE:24:3E:28:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/XNEK1bakd108UE1mEHH4ziQ-KAc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/flveeB5OO59gcSUk83mxrqPLOnA.roa
Signing time:             Sun 07 Feb 2021 12:57:56 +0000
ROA not before:           Sun 07 Feb 2021 12:57:56 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     133747
IP address blocks:        103.119.212.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2170 (0x87a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CD10AD5B6A4775D3C504D661071F8CE243E2807
        Validity
            Not Before: Feb  7 12:57:56 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=7E5BDE781E4E3B9F60712524F379B1AEA3CB3A70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:73:9f:fe:8b:09:2d:a8:08:c9:2e:fa:a7:85:
                    0b:f7:12:4f:5b:96:fa:50:fc:d0:c1:a7:ac:50:17:
                    e2:4d:06:f2:8e:2b:17:5f:58:6f:41:1a:0b:79:b4:
                    2e:a5:fb:1b:b5:b6:4f:a8:b7:68:28:9c:7f:f3:73:
                    23:64:52:93:e4:25:7d:82:a4:7b:1e:72:a3:d5:31:
                    c9:c3:aa:06:1e:14:5e:0f:56:93:f9:2f:fb:e6:aa:
                    b3:16:51:88:8b:6c:8e:d8:a7:da:50:12:f2:ba:f8:
                    6a:f6:02:53:82:f5:6d:c7:79:49:22:64:ea:1a:f2:
                    5c:a0:b8:f7:84:61:73:ca:5e:ad:50:6b:3a:31:07:
                    bf:4f:b5:8e:be:7a:7c:7c:7f:f7:6f:91:3c:44:a5:
                    a6:8d:13:15:6d:c1:65:b1:ce:4f:c2:90:9c:99:f4:
                    dc:09:bf:24:54:6c:a2:26:be:4d:1b:6e:07:e9:d3:
                    a4:0a:18:78:3e:85:76:2f:db:3f:75:b7:c9:a8:ad:
                    d6:4f:d7:67:bf:c2:56:cf:ef:a9:0b:ec:d8:ab:ac:
                    f8:6e:0e:4b:73:05:a8:cc:05:3e:88:ec:86:a2:60:
                    8e:e0:fd:a3:d4:10:1b:bf:ed:9f:db:e2:13:20:ee:
                    a7:36:79:99:37:ee:f6:2f:11:0c:22:8f:ba:a0:cf:
                    7c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:5B:DE:78:1E:4E:3B:9F:60:71:25:24:F3:79:B1:AE:A3:CB:3A:70
            X509v3 Authority Key Identifier:
                keyid:5C:D1:0A:D5:B6:A4:77:5D:3C:50:4D:66:10:71:F8:CE:24:3E:28:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/XNEK1bakd108UE1mEHH4ziQ-KAc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XNEK1bakd108UE1mEHH4ziQ-KAc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/flveeB5OO59gcSUk83mxrqPLOnA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.119.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:55:8a:45:72:6b:ca:80:86:a7:af:31:8c:26:c4:2d:62:df:
         c6:c9:7b:02:f8:f3:8f:b3:a4:e3:40:19:6c:0c:ae:49:57:8c:
         74:8a:05:c3:6f:d8:f2:8e:e2:45:83:b1:3f:bb:21:cf:b4:63:
         95:90:78:78:59:0e:d9:66:67:72:77:e1:09:b5:2f:f1:f1:ba:
         a8:49:69:fd:6e:8a:6d:12:25:b1:92:56:23:88:70:24:36:85:
         58:a7:ea:cb:1b:7e:6d:a5:05:6b:74:4f:59:5c:dd:a5:92:ce:
         09:f7:b8:62:02:9d:40:de:43:9e:8e:57:4a:41:8f:03:30:0c:
         1e:90:e1:7b:ef:18:3a:f2:c1:0d:de:16:be:82:3a:af:8f:35:
         be:a1:69:50:9e:c1:17:17:b8:c6:5a:18:e4:8b:5e:aa:81:8b:
         cb:3a:75:7c:d8:9d:19:de:f3:c1:bc:5a:c6:3e:a1:ea:53:a7:
         23:d3:2d:16:e5:c6:fc:04:1b:49:dc:17:d4:13:6d:42:49:40:
         25:36:ba:3b:f6:4a:b3:a9:ef:bd:16:29:96:76:f9:2a:a6:6d:
         55:82:22:63:d7:85:2f:fa:77:42:e0:5a:40:0d:50:ff:39:8e:
         ba:85:36:b6:74:5b:75:b5:27:2c:2d:4e:c3:57:2f:c4:fc:3c:
         f8:48:9e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----