Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DWINS/fN5VBHx7TQ12BskbYOLOUw5Rp3o.roa
File:                     fN5VBHx7TQ12BskbYOLOUw5Rp3o.roa (raw, json)
Hash identifier:          UtTs9kb9c+05lqTrE47qsg2FRb3vGKto7v+sqcTB4hU=
Subject key identifier:   7C:DE:55:04:7C:7B:4D:0D:76:06:C9:1B:60:E2:CE:53:0E:51:A7:7A
Certificate issuer:       /CN=615F9BD98CC70E8836D01A9481C19C5C2D45D791
Certificate serial:       0962
Authority key identifier: 61:5F:9B:D9:8C:C7:0E:88:36:D0:1A:94:81:C1:9C:5C:2D:45:D7:91
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/YV-b2YzHDog20BqUgcGcXC1F15E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/fN5VBHx7TQ12BskbYOLOUw5Rp3o.roa
Signing time:             Wed 29 Sep 2021 02:40:52 +0000
ROA not before:           Wed 29 Sep 2021 02:40:52 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     137263
IP address blocks:        43.224.22.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2402 (0x962)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615F9BD98CC70E8836D01A9481C19C5C2D45D791
        Validity
            Not Before: Sep 29 02:40:52 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=7CDE55047C7B4D0D7606C91B60E2CE530E51A77A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:54:f5:89:06:0c:5b:fd:41:85:ae:d3:c5:1d:
                    59:4d:ed:c6:11:5f:b1:8d:b3:e1:62:c3:3e:19:9a:
                    da:cb:bb:aa:65:bb:fb:e1:1a:e9:9c:1b:10:37:7a:
                    80:a2:7d:2a:26:e3:95:2c:fb:ee:16:a4:1a:26:86:
                    1a:60:29:9e:54:f3:d4:08:75:0a:57:7f:52:8b:a4:
                    56:01:00:c8:87:43:2c:bc:15:12:ca:22:ec:ec:dc:
                    2c:23:ed:12:45:51:86:44:e1:64:75:27:9a:e5:e1:
                    1c:d5:b1:4f:b0:a3:6d:70:b5:ba:5c:4a:e2:5d:09:
                    55:09:1a:ed:8a:c8:e1:86:af:86:1a:a3:ca:36:e3:
                    52:eb:87:2c:7a:70:2f:f3:c2:fb:f1:a9:ff:4d:6a:
                    6e:76:ba:8a:97:cc:b2:52:6b:ef:c9:bd:fc:ae:9c:
                    56:4a:28:66:f2:70:ca:4c:30:4c:6c:02:78:13:28:
                    5f:5f:cf:34:04:59:cc:93:96:46:8f:c2:83:33:6b:
                    58:ee:28:54:da:a6:34:51:2b:7e:87:c5:8e:b5:3e:
                    6b:21:e3:a3:76:b5:14:47:47:54:8a:21:db:2e:57:
                    e4:1d:11:00:e9:4e:ba:cd:5f:51:63:40:67:f8:78:
                    d5:83:97:8d:c9:00:32:e8:bf:ea:41:39:fe:e6:82:
                    74:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:DE:55:04:7C:7B:4D:0D:76:06:C9:1B:60:E2:CE:53:0E:51:A7:7A
            X509v3 Authority Key Identifier:
                keyid:61:5F:9B:D9:8C:C7:0E:88:36:D0:1A:94:81:C1:9C:5C:2D:45:D7:91

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/YV-b2YzHDog20BqUgcGcXC1F15E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YV-b2YzHDog20BqUgcGcXC1F15E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/fN5VBHx7TQ12BskbYOLOUw5Rp3o.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.224.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:31:22:df:60:4c:f1:ea:15:9d:87:ea:0d:3d:7b:3e:85:26:
         94:72:2f:b8:91:37:13:0b:01:79:43:48:c4:44:f2:01:58:89:
         26:c3:34:9d:85:28:c9:af:54:ec:36:d5:9f:58:38:7f:89:89:
         8f:b6:9c:54:8e:66:ac:b2:43:c7:d5:11:a8:93:20:69:e7:02:
         f3:5a:11:8f:a2:73:b0:fe:c7:df:39:f7:1a:44:c8:ad:f8:2a:
         62:3e:1f:63:e6:a7:c5:34:33:39:ff:19:09:b2:c2:4e:e6:1b:
         8b:b0:c0:ff:fe:2f:b2:8d:b3:24:f0:38:b4:c3:cf:10:5c:18:
         93:f3:36:8d:ea:14:6c:31:6f:84:20:eb:2e:5e:66:83:5c:12:
         8e:eb:0c:9a:e6:49:5f:02:80:19:97:70:95:b8:e9:5d:4c:b8:
         35:69:55:ad:21:e1:b7:05:b3:07:5b:a6:27:26:b1:09:2b:0e:
         ad:d2:9b:af:c0:bb:3d:96:6b:60:44:29:df:ee:50:8b:32:9e:
         6c:3e:3b:c9:81:00:c7:83:61:d0:d3:8c:00:d8:62:e9:5c:20:
         de:43:ab:36:89:b9:9b:62:08:8b:5b:1c:fe:8a:b1:e6:f9:51:
         87:45:0f:48:0f:aa:a0:fe:32:f1:31:3d:56:8f:3a:2d:ba:4b:
         3c:2e:28:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----