Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DWT/CW1d8Tl-5qv7u6T0mRDVg6fnBYY.roa
File:                     CW1d8Tl-5qv7u6T0mRDVg6fnBYY.roa (raw, json)
Hash identifier:          W3ZTxir7UZ2YIVL8Y+3AOst7ZGYZjOz9u1FrWbCeMuM=
Subject key identifier:   09:6D:5D:F1:39:7E:E6:AB:FB:BB:A4:F4:99:10:D5:83:A7:E7:05:86
Certificate issuer:       /CN=D4F0DD0F4FB801025D586EF999C5EEE02D7C2059
Certificate serial:       0C0E
Authority key identifier: D4:F0:DD:0F:4F:B8:01:02:5D:58:6E:F9:99:C5:EE:E0:2D:7C:20:59
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/CW1d8Tl-5qv7u6T0mRDVg6fnBYY.roa
Signing time:             Wed 29 Sep 2021 02:36:27 +0000
ROA not before:           Wed 29 Sep 2021 02:36:27 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     18424
IP address blocks:        103.136.60.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3086 (0xc0e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4F0DD0F4FB801025D586EF999C5EEE02D7C2059
        Validity
            Not Before: Sep 29 02:36:27 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=096D5DF1397EE6ABFBBBA4F49910D583A7E70586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:92:92:d7:4d:ef:7b:01:12:75:88:c3:c3:cb:
                    02:c5:58:9c:94:6f:9c:52:91:74:4d:45:62:ab:45:
                    8f:9e:be:6c:cd:ff:ff:1c:1f:84:7c:69:08:d1:af:
                    b3:3b:a9:0a:a6:ec:0d:4e:da:c5:66:88:80:ed:13:
                    f9:18:3d:cc:f4:16:57:c4:bd:f6:26:70:e9:bf:23:
                    af:f7:ab:00:cf:0c:ba:93:0d:86:50:96:2c:d6:28:
                    59:ef:c5:cd:f9:ea:02:7c:29:9b:2a:0a:68:ec:3d:
                    7a:7b:e8:6d:52:81:9b:17:f5:2d:eb:8c:be:20:79:
                    ab:e5:78:65:62:62:a1:ef:86:b9:2c:a9:32:5c:29:
                    16:f4:cf:28:36:48:61:99:ab:39:a6:48:ec:f0:7b:
                    df:81:2a:bc:7a:19:3a:d8:69:5f:5c:34:29:52:9c:
                    f5:44:5f:10:47:8f:da:36:e6:b2:00:a0:9a:5f:8f:
                    13:91:d5:49:27:a7:88:07:db:cf:f8:38:be:2f:4e:
                    c4:e1:cd:2f:d3:85:92:de:bc:29:d8:f8:57:f3:39:
                    af:80:96:76:fd:c8:0a:2f:8a:2e:c0:b8:59:99:0e:
                    f3:69:2b:e2:1c:d7:00:bd:ef:9e:bd:7b:37:a5:27:
                    fb:ff:62:bd:db:e9:7b:be:fe:73:33:81:36:12:8d:
                    e1:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:6D:5D:F1:39:7E:E6:AB:FB:BB:A4:F4:99:10:D5:83:A7:E7:05:86
            X509v3 Authority Key Identifier:
                keyid:D4:F0:DD:0F:4F:B8:01:02:5D:58:6E:F9:99:C5:EE:E0:2D:7C:20:59

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/1PDdD0-4AQJdWG75mcXu4C18IFk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1PDdD0-4AQJdWG75mcXu4C18IFk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWT/CW1d8Tl-5qv7u6T0mRDVg6fnBYY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.136.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:fc:d8:c1:9c:ef:9d:de:81:68:3e:95:f8:03:89:e1:e2:06:
         16:86:c4:33:de:b7:39:e3:14:9b:7a:25:55:bd:ce:b6:1f:e5:
         d4:09:e3:ff:21:41:5d:f9:4d:89:fa:da:ae:d9:2d:62:66:be:
         19:a1:c3:24:a6:db:74:17:aa:8a:6d:cc:c4:22:6f:4f:92:7c:
         4d:9b:8b:9c:0e:57:62:9a:66:5f:eb:21:ff:68:d3:11:f8:54:
         ad:63:f4:74:33:63:a8:71:d9:9c:04:d4:87:70:4a:f2:88:0d:
         a6:9b:84:6d:b6:05:5f:37:5d:23:15:95:b1:02:22:3d:e9:0c:
         8c:2c:18:cd:33:e4:7e:b8:b6:af:04:13:66:b7:34:6d:b4:40:
         8f:be:34:76:71:1d:97:ae:c3:4a:71:cf:ab:23:c6:b6:c0:1d:
         61:47:9b:bc:c4:b4:a4:63:15:9f:36:dd:37:60:d0:35:36:7c:
         56:66:c3:a7:36:5a:48:2d:2f:10:9a:4a:ea:4f:68:40:2d:31:
         6d:aa:b3:a1:20:93:95:a3:ce:b5:2d:6c:e8:c4:06:fe:3e:50:
         d4:2f:f8:00:46:ee:d9:fe:cb:1b:b8:c0:c7:e6:d6:ec:da:cd:
         da:97:27:ce:7f:5e:68:ba:83:a4:b6:de:f7:9d:db:e8:12:d5:
         63:61:18:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----