Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FANTASY/FlEHH_ckP6xWdpRsCz-bDxQaOLo.roa
File:                     FlEHH_ckP6xWdpRsCz-bDxQaOLo.roa (raw, json)
Hash identifier:          pyNuUT/koEzPLII0Qe8MB1rJCxi/DBV30/cKyuftQYs=
Subject key identifier:   16:51:07:1F:F7:24:3F:AC:56:76:94:6C:0B:3F:9B:0F:14:1A:38:BA
Certificate issuer:       /CN=59DEF2CF828F0D9AB6AD94F426131764D254CC5C
Certificate serial:       06D4
Authority key identifier: 59:DE:F2:CF:82:8F:0D:9A:B6:AD:94:F4:26:13:17:64:D2:54:CC:5C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/FlEHH_ckP6xWdpRsCz-bDxQaOLo.roa
Signing time:             Wed 29 Sep 2021 02:37:57 +0000
ROA not before:           Wed 29 Sep 2021 02:37:57 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     131671
IP address blocks:        103.146.212.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1748 (0x6d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59DEF2CF828F0D9AB6AD94F426131764D254CC5C
        Validity
            Not Before: Sep 29 02:37:57 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=1651071FF7243FAC5676946C0B3F9B0F141A38BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7a:59:13:19:90:ac:a2:ea:22:6e:0f:94:4e:
                    59:9a:30:f9:1c:2e:f5:56:a5:81:c6:0c:bf:f0:67:
                    ba:76:88:fd:db:f3:e2:1d:e7:45:b1:d2:0c:98:e0:
                    77:ab:82:ff:cc:5a:e4:0a:be:b0:a0:07:b7:a1:c0:
                    c5:0f:46:e2:06:51:31:1a:8e:e9:b7:99:fe:49:ad:
                    41:78:99:ae:84:59:e0:c0:13:f8:4d:b5:69:d6:b8:
                    1b:1b:d8:d3:04:fb:d3:b9:3c:83:e3:2d:b3:87:ea:
                    8f:08:6c:c9:40:49:9f:f8:7c:ef:1c:43:f2:f7:a3:
                    bb:99:48:5d:00:fe:07:88:36:37:b2:ca:b7:80:ef:
                    48:72:6a:d6:f1:1f:6d:4c:c8:e3:e6:ee:a1:a4:37:
                    da:2e:bd:14:ab:42:d6:ad:2d:64:ed:5b:c3:6b:a1:
                    09:97:6e:e8:6b:ac:03:5d:ae:fd:a8:1a:33:7d:36:
                    3a:43:25:c6:02:20:ab:1d:25:b1:88:00:da:a1:f3:
                    44:01:84:02:48:54:e7:40:b4:17:12:5a:a5:3d:44:
                    b4:98:47:38:6a:4d:1c:da:c0:2a:f4:a9:62:f2:a2:
                    1f:0a:b7:4b:83:04:c1:d3:dc:49:5d:d9:ae:b9:53:
                    26:f9:a6:ee:8b:d2:6f:67:a5:c8:22:a7:56:18:e8:
                    70:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:51:07:1F:F7:24:3F:AC:56:76:94:6C:0B:3F:9B:0F:14:1A:38:BA
            X509v3 Authority Key Identifier:
                keyid:59:DE:F2:CF:82:8F:0D:9A:B6:AD:94:F4:26:13:17:64:D2:54:CC:5C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/FlEHH_ckP6xWdpRsCz-bDxQaOLo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b0:5e:6b:9b:73:fe:f9:80:3f:9c:a1:ad:53:5b:84:01:86:d1:
         47:13:df:1a:2b:1e:b0:e1:35:53:31:1d:f0:5d:c1:9a:85:fe:
         bc:80:73:f6:a0:cd:87:88:bc:7e:8d:70:33:85:9f:de:f7:17:
         75:ba:04:21:ed:1f:31:5c:8a:85:22:ae:83:d8:6f:38:f0:0f:
         07:cc:de:a8:2d:0a:54:61:4f:c1:7e:42:20:2c:24:72:a1:2c:
         a4:a5:15:3e:56:59:cc:1a:77:f4:7f:9b:37:48:60:9f:bb:82:
         b2:62:ab:7a:a7:0f:ce:d3:ae:25:50:f3:06:1a:73:f2:be:38:
         73:08:53:ad:65:0c:8a:3a:65:cb:77:04:a0:e5:0c:80:16:2a:
         c6:d2:b6:d4:da:69:9d:99:e2:a8:13:ca:7d:14:77:13:2e:c8:
         76:f4:52:c6:96:04:48:81:22:5b:c6:d3:39:55:5f:ec:1c:98:
         3c:00:66:03:56:ba:18:d4:d6:c5:bf:bb:b4:61:52:10:ca:48:
         09:ba:43:24:21:d7:d6:8b:9a:65:0e:7a:a5:a8:75:f6:c1:af:
         fa:d6:35:12:fb:7b:4f:a5:84:b1:8c:cf:b8:18:39:34:45:3a:
         f6:ba:55:89:e0:6e:74:0a:ff:c8:13:7a:6b:4c:8b:7a:0b:46:
         fe:48:fc:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----