Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FANTASY/YwN5LHWo55QMFV_rEVUvp-gJfCk.roa
File:                     YwN5LHWo55QMFV_rEVUvp-gJfCk.roa (raw, json)
Hash identifier:          +fshOJPe2Qngi61Y2/64unVoJyNJPTQQBWFEi78Z8uI=
Subject key identifier:   63:03:79:2C:75:A8:E7:94:0C:15:5F:EB:11:55:2F:A7:E8:09:7C:29
Certificate issuer:       /CN=59DEF2CF828F0D9AB6AD94F426131764D254CC5C
Certificate serial:       0753
Authority key identifier: 59:DE:F2:CF:82:8F:0D:9A:B6:AD:94:F4:26:13:17:64:D2:54:CC:5C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/YwN5LHWo55QMFV_rEVUvp-gJfCk.roa
Signing time:             Thu 24 Mar 2022 06:02:55 +0000
ROA not before:           Thu 24 Mar 2022 06:02:55 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     131671
IP address blocks:        103.146.212.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1875 (0x753)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59DEF2CF828F0D9AB6AD94F426131764D254CC5C
        Validity
            Not Before: Mar 24 06:02:55 2022 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=6303792C75A8E7940C155FEB11552FA7E8097C29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c4:0e:e6:c9:ad:0f:ef:06:e6:92:c7:1f:25:
                    97:db:c5:38:34:98:db:e1:6c:27:85:51:3b:dd:ea:
                    6c:0e:0c:81:88:43:17:9c:ed:ed:d9:a8:af:ab:09:
                    ad:21:3c:26:09:ed:6f:9a:53:d4:75:4d:b8:c4:55:
                    7b:cb:33:53:42:4a:d4:bc:a3:d5:3a:6d:b5:02:e9:
                    4b:92:64:9c:e4:e3:ed:2e:41:d7:18:78:a8:33:61:
                    7f:4b:85:a5:0c:63:1e:66:c1:0f:d4:89:b1:b1:a7:
                    0b:b2:a1:6d:8e:11:be:73:8a:dc:b4:16:69:8d:7e:
                    b1:91:96:ad:da:d8:00:40:25:81:b7:58:a3:7d:06:
                    8a:6e:bf:a0:95:bf:62:36:2e:62:8c:3a:ec:76:8f:
                    e1:4e:b5:34:d0:a9:32:90:5e:ac:15:b6:d7:91:7a:
                    00:b6:33:cb:10:6c:68:43:72:53:6b:96:f3:35:94:
                    36:15:22:aa:89:a1:8e:84:c4:35:10:3c:2b:42:15:
                    eb:d4:ba:b7:6d:41:d7:72:14:37:40:4e:c6:3e:78:
                    46:66:6a:62:49:dd:ea:2e:eb:21:a8:e4:4f:fb:9a:
                    69:3a:6b:d4:59:fd:af:0c:03:bc:04:ff:eb:7e:0c:
                    bf:70:b8:6c:dd:19:8f:11:a2:2a:c4:8a:52:db:05:
                    e7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:03:79:2C:75:A8:E7:94:0C:15:5F:EB:11:55:2F:A7:E8:09:7C:29
            X509v3 Authority Key Identifier:
                keyid:59:DE:F2:CF:82:8F:0D:9A:B6:AD:94:F4:26:13:17:64:D2:54:CC:5C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/YwN5LHWo55QMFV_rEVUvp-gJfCk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:f6:a6:34:1b:ef:2d:3b:61:da:02:b8:07:21:1d:f4:4b:8a:
         f9:55:75:bf:d4:33:07:1a:e1:92:2f:a3:80:db:da:31:c4:00:
         72:fa:83:68:a8:25:9c:7a:7d:9b:b4:1f:fb:2d:a9:51:93:5b:
         69:1c:49:85:06:25:81:c5:57:9d:8f:c7:1e:bc:0c:45:c0:68:
         62:ba:43:9c:37:22:3b:2a:10:98:f7:3b:33:2f:29:31:1c:3e:
         b3:d5:ae:3b:1d:6b:fb:c0:42:59:9c:48:49:f4:fc:b0:a2:2a:
         1a:2a:6d:45:8d:90:de:39:fd:58:b6:28:fd:cd:32:b1:2a:5b:
         d0:46:86:0b:7b:65:7b:35:53:ab:07:e9:60:c5:27:f4:8d:6b:
         76:fe:25:87:e2:dd:b3:a4:d7:6c:a2:7d:d4:ad:01:ff:a0:20:
         84:21:13:13:82:f4:0f:ea:7f:cf:06:db:12:e1:5b:e2:e5:c6:
         48:3c:2b:3d:20:2f:d8:a0:4b:2e:6b:06:79:41:4c:9a:e7:7f:
         f5:74:5d:48:6e:fb:6d:b9:fd:f7:0b:6e:0e:38:22:92:44:98:
         8e:27:2e:b9:7e:ed:cc:31:71:14:da:ba:06:44:47:4f:d8:96:
         3f:f5:bb:a3:b6:0c:4c:7f:2d:a0:31:f1:26:43:0d:79:38:f7:
         8e:50:bd:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----