Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/44VMYn179f2dRO_oiOPg3Hd-zQc.roa
File:                     44VMYn179f2dRO_oiOPg3Hd-zQc.roa (raw, json)
Hash identifier:          NkeOMYmLUao4/otxcxJPDZd/mMzB663qVqpttC1BBfE=
Subject key identifier:   E3:85:4C:62:7D:7B:F5:FD:9D:44:EF:E8:88:E3:E0:DC:77:7E:CD:07
Certificate issuer:       /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial:       0B04
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/44VMYn179f2dRO_oiOPg3Hd-zQc.roa
Signing time:             Thu 16 Dec 2021 06:40:14 +0000
ROA not before:           Thu 16 Dec 2021 06:40:14 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     17809
IP address blocks:        121.254.112.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2820 (0xb04)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
        Validity
            Not Before: Dec 16 06:40:14 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=E3854C627D7BF5FD9D44EFE888E3E0DC777ECD07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b0:36:03:f9:9c:ae:f6:23:b6:a7:34:d4:f0:
                    5c:7a:9e:d7:b9:37:dd:98:76:74:5c:60:77:79:3b:
                    0e:71:af:a9:21:34:4c:0e:33:49:70:33:64:69:58:
                    85:d4:37:6c:c9:5f:a2:04:3b:6d:1c:a5:92:83:15:
                    58:c9:d9:1e:0d:28:76:67:d5:05:08:f2:db:26:38:
                    df:d7:7f:a1:55:e9:f6:ef:ef:8e:e5:6b:24:ab:56:
                    17:d4:f8:3e:47:93:f7:44:7b:95:ec:16:75:f6:b4:
                    c8:4e:6e:9a:3f:ae:8b:0b:90:4a:0d:ce:42:c3:af:
                    c4:75:f4:22:d1:be:90:76:2a:ae:06:e1:d3:33:8d:
                    05:ea:3d:a0:22:4c:61:71:d2:73:1f:0e:ed:c1:45:
                    a8:bb:58:56:37:cd:7c:ca:72:42:86:72:b4:4e:db:
                    00:bd:17:0c:fb:31:7b:6c:0a:24:90:81:66:de:b4:
                    d6:14:35:e6:a0:af:7d:fb:c4:73:d5:34:1e:07:35:
                    b5:a6:b2:62:21:60:79:e0:dd:20:7c:b5:98:3d:3c:
                    56:b6:e0:17:76:cf:a2:b7:70:be:e1:18:79:7c:f3:
                    9b:ab:b2:ca:b7:32:fa:ce:17:da:fc:03:4b:84:ec:
                    ab:92:2b:4c:4b:a0:4e:cf:da:90:8b:0a:65:6c:b5:
                    be:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:85:4C:62:7D:7B:F5:FD:9D:44:EF:E8:88:E3:E0:DC:77:7E:CD:07
            X509v3 Authority Key Identifier:
                keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/44VMYn179f2dRO_oiOPg3Hd-zQc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.254.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         19:71:c2:85:7b:33:0f:20:65:c9:ae:db:cc:8f:e1:5b:17:3a:
         cb:73:60:1e:dd:1b:5f:55:61:d0:37:0e:30:3f:46:50:cf:ea:
         6c:34:e3:c5:d0:14:62:e4:2c:1b:54:be:f4:ea:ad:b8:e6:76:
         df:2b:3d:ef:31:3e:76:9a:84:d6:a9:b0:90:6b:42:2b:89:0a:
         52:92:80:47:b9:41:34:f1:c3:6d:58:d8:89:3f:10:08:4f:97:
         d4:5c:1b:12:7c:c1:b0:e1:09:f5:57:82:0d:c2:d0:75:5c:8c:
         65:4a:56:73:99:bb:38:e7:c8:8e:65:6d:46:63:f8:b3:ba:1e:
         fb:75:91:02:21:f6:8c:b2:3b:0c:3c:0c:07:b3:be:15:6d:bc:
         32:98:c8:a2:fb:a0:15:7a:0b:c5:ca:e7:60:ec:a7:10:0f:8a:
         38:81:03:58:07:25:d5:0a:e2:5a:ac:9b:c3:61:b2:32:db:bf:
         2a:7c:ca:6b:a6:66:3a:d5:86:a1:e5:64:a3:c7:73:bf:09:b9:
         2b:07:d9:7b:b0:9f:6c:43:39:ae:3a:d0:bf:3d:cb:6c:cb:b1:
         17:ad:e5:4b:bf:57:16:64:53:ef:40:d5:db:f6:a4:da:0b:6c:
         f0:09:28:4f:27:e3:16:77:30:82:2d:54:ef:a8:35:b8:07:48:
         80:56:92:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----