Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/COCHENTEK/mMHjoG-McUKZ1IfbgtCi7DduybY.roa
File:                     mMHjoG-McUKZ1IfbgtCi7DduybY.roa (raw, json)
Hash identifier:          uFyTwdn5QWj2nUPYNLKbTo5wxzzozghUAy92FGOCd6c=
Subject key identifier:   98:C1:E3:A0:6F:8C:71:42:99:D4:87:DB:82:D0:A2:EC:37:6E:C9:B6
Certificate issuer:       /CN=A736CFF1948740614D0321E63B8403EB9AB9748D
Certificate serial:       7F
Authority key identifier: A7:36:CF:F1:94:87:40:61:4D:03:21:E6:3B:84:03:EB:9A:B9:74:8D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/pzbP8ZSHQGFNAyHmO4QD65q5dI0.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/COCHENTEK/mMHjoG-McUKZ1IfbgtCi7DduybY.roa
Signing time:             Thu 25 May 2023 05:52:21 +0000
ROA not before:           Thu 25 May 2023 05:52:21 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     983
IP address blocks:        2400:bea0::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127 (0x7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A736CFF1948740614D0321E63B8403EB9AB9748D
        Validity
            Not Before: May 25 05:52:21 2023 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=98C1E3A06F8C714299D487DB82D0A2EC376EC9B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:19:d7:c9:e7:ae:8e:ae:9d:fc:98:d4:c6:95:
                    5b:bf:40:f6:be:72:0a:8e:e6:13:a9:35:37:98:33:
                    c2:70:9c:4e:c1:f0:99:de:29:cd:02:34:fb:bf:b9:
                    44:a4:28:9f:b8:95:2b:68:ac:16:3c:4e:cc:c0:3f:
                    e3:a5:e2:a7:e4:40:76:2d:1e:e9:f5:d4:34:68:4e:
                    9f:1e:b2:a3:1c:ed:ca:86:36:20:f0:92:71:37:e7:
                    85:8d:f6:6c:2c:37:b0:0f:f4:74:4e:3c:12:c4:f2:
                    6e:11:02:fe:36:a6:b1:ad:58:c3:5c:af:57:8a:a3:
                    24:89:4a:ec:4a:69:82:ee:ea:bc:68:86:33:51:9f:
                    f2:50:21:9e:db:21:2f:4f:19:31:7c:5f:3a:5f:d1:
                    81:a2:07:ca:bd:12:c5:79:29:3f:12:68:0d:b5:68:
                    97:aa:f8:a3:85:ac:0f:1b:bb:68:35:b1:9f:d8:56:
                    5f:0c:c0:2a:e9:90:7c:9f:1b:b2:a9:df:f2:ce:c0:
                    d3:63:f5:2b:7b:e4:3f:a1:f4:a7:3f:41:f2:11:f9:
                    4e:56:25:14:5b:2e:0c:b2:ce:f9:9b:15:3b:89:23:
                    6f:0e:5a:80:0e:9d:f8:00:56:5f:2d:dd:0a:01:d3:
                    89:3d:b9:82:5a:77:23:dc:d0:ea:32:98:01:f7:c9:
                    3a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:C1:E3:A0:6F:8C:71:42:99:D4:87:DB:82:D0:A2:EC:37:6E:C9:B6
            X509v3 Authority Key Identifier:
                keyid:A7:36:CF:F1:94:87:40:61:4D:03:21:E6:3B:84:03:EB:9A:B9:74:8D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/COCHENTEK/pzbP8ZSHQGFNAyHmO4QD65q5dI0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/pzbP8ZSHQGFNAyHmO4QD65q5dI0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/COCHENTEK/mMHjoG-McUKZ1IfbgtCi7DduybY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:bea0::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:0d:a9:bd:38:d7:90:94:c4:f3:93:2d:93:85:62:9c:40:57:
         14:b8:68:ab:47:57:41:8d:e7:c9:1c:53:a4:3e:1e:16:f2:f2:
         09:f9:ab:59:75:f6:1b:13:cd:14:24:b1:d9:10:24:90:cc:6a:
         05:e5:c3:9c:0e:f2:3e:4d:54:c3:c1:49:73:31:a9:85:68:21:
         ee:47:89:9b:d6:06:9e:8b:95:85:09:71:4c:68:47:ba:35:ed:
         59:c5:52:a2:45:cf:4a:44:a7:d4:0b:a1:da:52:7a:ff:7e:07:
         ac:eb:04:93:1d:21:47:3c:f0:9b:c9:cd:43:7c:9d:66:7e:aa:
         73:78:d3:ae:db:99:49:c0:fc:69:e0:bd:58:c8:f2:65:9d:4c:
         fd:8e:c0:3e:d6:69:56:b9:80:e0:7f:38:c9:cb:9e:06:39:72:
         00:24:5b:bb:88:1a:44:1c:4d:33:c3:91:f3:6a:0e:30:86:62:
         59:c8:0e:a6:a2:cb:36:2f:af:d6:e2:95:0d:1e:ab:eb:51:b9:
         7b:db:66:11:fc:d4:c7:ed:1c:cb:f0:98:e4:0b:cb:0d:af:93:
         ef:c1:5e:28:4e:ee:6b:22:44:2c:9f:4c:fb:d7:e5:31:4d:32:
         bc:81:a8:75:dd:24:65:00:4a:03:30:22:71:d6:d8:5a:ee:44:
         ad:fa:05:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----