Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/cdy6DQDaR0Hd9wkxnyDzmYgwOH0.roa
File:                     cdy6DQDaR0Hd9wkxnyDzmYgwOH0.roa (raw, json)
Hash identifier:          4/zP+XvAhDUq88OilhNOSNJcrqpco0IdVEufnQko/9w=
Subject key identifier:   71:DC:BA:0D:00:DA:47:41:DD:F7:09:31:9F:20:F3:99:88:30:38:7D
Certificate issuer:       /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial:       0B1C
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/cdy6DQDaR0Hd9wkxnyDzmYgwOH0.roa
Signing time:             Thu 16 Dec 2021 06:48:51 +0000
ROA not before:           Thu 16 Dec 2021 06:48:51 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     17809
IP address blocks:        203.217.120.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2844 (0xb1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
        Validity
            Not Before: Dec 16 06:48:51 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=71DCBA0D00DA4741DDF709319F20F3998830387D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e9:b2:35:42:8a:7b:04:4b:c9:14:d9:52:a6:
                    d7:f1:f7:ca:cb:2f:33:21:a9:2d:93:66:1b:86:c1:
                    b2:ea:ed:3a:78:92:79:c5:85:16:b8:84:a4:fe:02:
                    f4:77:f8:ec:bb:c3:47:e6:1d:4c:b7:25:35:bf:c0:
                    a9:c9:f6:ec:0f:44:d4:82:6a:b2:db:c3:f9:a2:79:
                    d7:a6:62:b1:2b:72:d6:fa:f4:10:7e:95:f5:81:dd:
                    14:e2:cf:2f:8f:4b:19:c9:51:4f:f8:cc:4c:5d:01:
                    30:d9:03:48:3e:11:ed:b6:1d:a4:5d:0b:c0:84:93:
                    87:f3:af:6f:58:12:b5:62:00:90:20:b5:a5:8f:5f:
                    72:e7:94:56:47:1b:99:10:ec:50:6b:62:8e:63:a2:
                    8d:06:8d:a4:fa:da:62:00:58:c1:0e:88:41:ca:74:
                    2b:dc:a5:69:1c:cb:54:3e:84:e4:34:aa:ba:93:81:
                    ba:3b:2e:6d:ef:cf:1c:6b:89:d8:a8:61:6b:de:8c:
                    57:30:1c:10:2e:53:b7:40:5c:0d:82:cf:4d:6c:68:
                    d1:d5:71:25:27:2e:4a:dd:7f:9b:2c:22:6e:56:10:
                    fd:45:6c:07:a2:1d:65:26:9c:a3:60:96:e1:be:d4:
                    3f:e9:ca:a7:ad:4e:fa:6a:47:a1:49:4d:7f:4e:18:
                    c0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:DC:BA:0D:00:DA:47:41:DD:F7:09:31:9F:20:F3:99:88:30:38:7D
            X509v3 Authority Key Identifier:
                keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/cdy6DQDaR0Hd9wkxnyDzmYgwOH0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.217.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7c:2a:3b:bb:fb:49:ae:ea:b8:43:a4:7c:80:f9:b4:32:4c:c6:
         9d:f6:33:52:5d:2c:52:9b:89:94:b7:84:31:6a:30:af:40:a1:
         2a:40:08:c2:e3:36:7b:fb:4c:6a:11:4e:a6:95:cf:ad:31:8d:
         10:38:54:51:91:e3:c1:55:97:5b:f5:23:e7:0c:9f:ca:92:98:
         4d:bd:6c:94:c4:87:86:36:4a:c0:14:05:79:d0:d5:50:10:23:
         fa:a9:f8:3a:c8:45:3a:51:ff:29:6d:3c:7d:34:a0:fd:32:ae:
         b6:00:bc:66:08:6f:1d:f1:57:42:49:a6:47:68:57:f1:f7:c6:
         cb:fb:35:21:6b:9e:5a:a6:c5:a2:0f:65:83:e0:35:e0:4e:51:
         46:43:61:89:f6:14:92:96:e8:4a:db:1f:31:99:43:a0:2e:fb:
         79:f3:ca:9e:fb:1f:4f:5f:0b:41:5a:37:b9:f6:15:87:2e:2e:
         2d:27:7a:e0:36:e6:a0:e8:8c:05:74:9f:0d:6c:63:39:e0:35:
         df:a6:4e:a0:01:99:5c:f9:fc:25:97:9b:67:be:a2:4d:cc:fa:
         20:5d:3a:7b:58:61:dc:d9:51:05:3b:69:80:bb:6f:d2:f0:04:
         91:00:52:21:05:75:e2:22:87:7f:e4:c9:a3:96:7c:84:38:06:
         ae:10:be:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----