Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CSPTEK/lcKmCtat2_nRKyIx_3ooaVyEH7c.roa
File:                     lcKmCtat2_nRKyIx_3ooaVyEH7c.roa (raw, json)
Hash identifier:          LZYtBp+NXV9Brhj7miv7euy9ikXq+UNVpn/g5tvsfvU=
Subject key identifier:   95:C2:A6:0A:D6:AD:DB:F9:D1:2B:22:31:FF:7A:28:69:5C:84:1F:B7
Certificate issuer:       /CN=A082F5D992E6BC25E08997538616180702E857C3
Certificate serial:       01AB
Authority key identifier: A0:82:F5:D9:92:E6:BC:25:E0:89:97:53:86:16:18:07:02:E8:57:C3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/oIL12ZLmvCXgiZdThhYYBwLoV8M.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CSPTEK/lcKmCtat2_nRKyIx_3ooaVyEH7c.roa
Signing time:             Sat 20 Aug 2022 12:56:59 +0000
ROA not before:           Sat 20 Aug 2022 12:56:59 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38008
IP address blocks:        2406:d7c0::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 427 (0x1ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A082F5D992E6BC25E08997538616180702E857C3
        Validity
            Not Before: Aug 20 12:56:59 2022 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=95C2A60AD6ADDBF9D12B2231FF7A28695C841FB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:81:f9:3b:c6:42:1e:b6:3f:0b:15:9d:3c:1e:
                    ef:41:71:b9:0e:b3:cd:3d:65:53:d7:db:11:0b:e8:
                    23:25:f9:3d:24:ab:94:57:ce:41:71:61:f3:a9:29:
                    7b:07:5e:a8:5a:2f:0c:bd:8d:a6:e7:4f:1d:92:c5:
                    62:b8:9f:ee:b0:60:e0:57:6e:eb:f6:35:d6:82:1d:
                    09:04:e9:01:7c:e1:25:12:60:a4:5c:1b:3d:6d:f9:
                    31:d5:9e:31:95:4f:2f:a9:99:6e:6b:3d:4d:bc:fc:
                    b8:3e:d8:53:06:29:55:81:9d:aa:4c:d3:2d:c0:e6:
                    bc:fc:e1:d2:d6:d3:72:a2:46:d2:77:a1:55:8f:8a:
                    e3:15:3c:07:a9:6d:07:9a:7c:b9:16:ee:e0:fc:6a:
                    a2:a8:e4:9b:65:77:32:ea:ba:98:2a:dd:a6:73:e4:
                    05:b0:ad:99:7d:6d:30:fb:9b:9c:70:de:1e:26:be:
                    17:e2:f7:1c:b7:16:70:70:48:59:9b:96:d0:36:3c:
                    7e:3a:5a:0f:75:e9:f4:b9:2f:19:fa:1d:85:11:11:
                    eb:97:9b:f8:fd:9e:14:3d:d1:16:71:8c:dc:75:5b:
                    49:c0:e1:25:ce:98:90:20:02:95:88:27:eb:d4:51:
                    15:65:a8:85:74:fc:98:db:93:cb:dc:22:2a:c9:28:
                    34:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:C2:A6:0A:D6:AD:DB:F9:D1:2B:22:31:FF:7A:28:69:5C:84:1F:B7
            X509v3 Authority Key Identifier:
                keyid:A0:82:F5:D9:92:E6:BC:25:E0:89:97:53:86:16:18:07:02:E8:57:C3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CSPTEK/oIL12ZLmvCXgiZdThhYYBwLoV8M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/oIL12ZLmvCXgiZdThhYYBwLoV8M.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CSPTEK/lcKmCtat2_nRKyIx_3ooaVyEH7c.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:d7c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:74:aa:c3:b2:08:c8:33:d3:ba:c1:a6:9e:d2:49:d7:ba:73:
         71:a5:0b:ab:80:f1:3c:9c:8f:85:6e:96:18:2d:82:4c:11:8e:
         94:e6:97:c5:1b:d9:be:89:63:dd:d2:62:1b:5e:65:9e:c1:13:
         64:a2:b5:55:ff:1c:e3:a8:67:20:e0:75:d6:74:63:ed:46:1a:
         25:90:f3:5f:e0:1b:13:ac:09:ba:bd:69:f3:f1:30:e3:90:8c:
         ad:42:ff:fc:81:da:b2:97:f6:fe:93:f5:42:47:cf:be:e9:3f:
         29:e8:52:be:a6:53:f5:1b:de:3f:ae:07:5b:59:98:43:7e:6b:
         8c:0e:26:86:fa:36:2b:ec:ab:79:1c:8a:95:18:92:55:05:39:
         79:a5:ab:e2:80:b7:bd:a2:ea:f8:f6:2b:7b:7d:c1:10:6c:d7:
         35:98:18:91:51:d8:93:c4:38:a4:fd:7f:ee:e3:ae:ca:ae:0c:
         ac:3b:d3:4a:c2:63:79:e6:ba:45:ea:47:3f:93:d0:27:eb:72:
         41:05:0e:32:c5:20:b0:cc:59:22:af:51:46:b7:d0:35:f0:fe:
         4c:f2:b0:4b:37:05:95:bc:f8:fa:4d:64:e4:88:ff:36:a0:1b:
         48:5c:91:f1:dd:59:a6:01:22:59:fd:68:cf:5d:a3:83:58:1b:
         a1:a3:ee:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----