Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/MqgB833-1itENVgMtDUIxqAjswY.roa
File:                     MqgB833-1itENVgMtDUIxqAjswY.roa (raw, json)
Hash identifier:          ddJBjFNuC9t6jY4GJLp8mybsVpsHK6z2Gn/eMKPwICM=
Subject key identifier:   32:A8:01:F3:7D:FE:D6:2B:44:35:58:0C:B4:35:08:C6:A0:23:B3:06
Certificate issuer:       /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial:       0ADA
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/MqgB833-1itENVgMtDUIxqAjswY.roa
Signing time:             Thu 16 Dec 2021 06:30:20 +0000
ROA not before:           Thu 16 Dec 2021 06:30:20 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     17809
IP address blocks:        27.96.244.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2778 (0xada)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
        Validity
            Not Before: Dec 16 06:30:20 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=32A801F37DFED62B4435580CB43508C6A023B306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:db:73:f7:00:2a:0e:30:f2:b7:92:76:4a:0e:
                    f3:10:92:35:3f:37:28:12:ab:f9:10:ed:4c:b5:7e:
                    64:1a:dd:3e:e3:e2:4a:0d:4f:70:e5:e2:92:8f:c9:
                    90:b0:3f:bc:58:6d:ea:fd:90:21:fd:55:6a:e2:a6:
                    2b:bf:4d:c6:cd:1a:f6:19:18:b0:13:6b:a4:50:a2:
                    d6:f4:08:51:f2:6d:2c:44:7a:fb:70:3a:1c:b3:e5:
                    28:97:e3:e5:4c:8d:9e:14:90:1e:0f:4f:6c:a3:71:
                    eb:81:37:3d:2e:63:1c:6c:a5:e6:3b:a8:86:0b:c5:
                    17:6c:c7:e4:29:6e:3b:67:ff:9d:08:1d:99:91:ec:
                    95:13:83:ca:ab:41:4c:52:f0:e1:51:36:7f:2d:87:
                    97:68:e4:52:f6:80:be:c7:29:aa:15:7d:d2:85:aa:
                    c8:b8:71:67:f9:58:90:b7:2a:53:9f:61:1b:50:49:
                    17:1f:5e:3a:45:48:b7:f3:03:45:8c:67:80:41:2b:
                    75:e5:cb:1b:f7:b0:03:fd:23:e2:9e:76:ee:f6:3a:
                    7b:6b:13:66:2c:f0:94:99:33:3a:6d:35:e1:1e:c2:
                    bf:5d:ae:1c:d1:63:b0:15:4d:a7:17:71:93:f0:fa:
                    66:a2:6f:7f:40:55:c0:66:09:e0:b5:6c:56:42:f8:
                    2a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:A8:01:F3:7D:FE:D6:2B:44:35:58:0C:B4:35:08:C6:A0:23:B3:06
            X509v3 Authority Key Identifier:
                keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/MqgB833-1itENVgMtDUIxqAjswY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.96.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:e7:99:25:26:9a:13:da:02:26:6c:81:3f:df:76:23:4d:6a:
         26:17:93:36:b1:bf:fa:0d:54:cb:61:00:bf:92:ef:7d:c7:7f:
         48:3d:7a:41:16:18:ed:3b:c0:c0:25:c9:1c:ee:bb:8d:6b:08:
         11:61:9b:a4:9c:14:c3:b5:50:50:6a:89:4a:7a:2b:e5:46:68:
         d1:36:29:07:2b:48:64:f9:25:08:aa:cd:7f:73:95:94:ab:9e:
         e1:40:33:c5:8b:2c:41:8b:04:b8:bd:01:01:fa:7a:81:48:96:
         37:ae:05:16:3a:50:e6:46:ab:1f:65:cf:fc:91:9d:02:ad:c0:
         e3:d8:90:06:8a:87:de:c2:75:d4:a1:8c:da:36:60:ef:69:1e:
         c7:ad:4f:80:54:fb:9e:f4:ea:ee:80:88:bc:8e:2f:01:81:25:
         a4:11:5d:32:28:ff:c1:32:8d:00:22:5e:64:35:87:a7:05:a7:
         4c:d5:6b:0f:21:dd:36:ad:64:0c:da:08:9e:5d:8c:29:fe:24:
         fc:14:91:7c:69:c9:ad:9c:4a:fb:20:94:16:24:e5:a4:0a:1d:
         62:b1:67:7c:d5:50:cf:2d:0b:72:32:b6:94:23:0d:1e:3d:8c:
         ed:a8:8c:49:49:6d:35:cd:cd:33:c9:9a:03:26:8f:4f:f8:81:
         1a:b8:42:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----