Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FANTASY/pbPaaruEMxRRD7wzHBF3eBs54ig.roa
File:                     pbPaaruEMxRRD7wzHBF3eBs54ig.roa (raw, json)
Hash identifier:          lyZiZ7d3/OPQeDsvlrrhXS6rPy6P5FP15yIotq2XfTw=
Subject key identifier:   A5:B3:DA:6A:BB:84:33:14:51:0F:BC:33:1C:11:77:78:1B:39:E2:28
Certificate issuer:       /CN=59DEF2CF828F0D9AB6AD94F426131764D254CC5C
Certificate serial:       074F
Authority key identifier: 59:DE:F2:CF:82:8F:0D:9A:B6:AD:94:F4:26:13:17:64:D2:54:CC:5C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/pbPaaruEMxRRD7wzHBF3eBs54ig.roa
Signing time:             Mon 21 Mar 2022 08:49:55 +0000
ROA not before:           Mon 21 Mar 2022 08:49:55 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     131671
IP address blocks:        103.146.212.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1871 (0x74f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59DEF2CF828F0D9AB6AD94F426131764D254CC5C
        Validity
            Not Before: Mar 21 08:49:55 2022 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=A5B3DA6ABB843314510FBC331C1177781B39E228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5b:6b:8b:21:e6:3d:e9:86:5f:d1:ed:4c:56:
                    2d:a1:ec:61:ce:13:26:58:40:60:b5:1f:80:92:ac:
                    0e:05:3b:b4:77:9f:67:11:fe:ad:34:95:20:b8:36:
                    10:71:80:a2:6b:77:ee:1e:8a:cc:13:85:a0:d6:60:
                    3b:b2:c5:93:ab:bb:ca:58:b8:b6:c6:fa:b9:2a:96:
                    3a:82:30:a7:32:61:c4:0d:78:cc:f3:58:94:4a:53:
                    c2:1c:0d:00:bd:0c:4f:4a:42:a0:2b:72:0a:2c:33:
                    a4:9d:ad:9a:e2:e2:49:55:68:4b:a7:62:49:b9:f9:
                    81:45:90:18:73:51:49:e8:34:3e:b6:14:8c:e8:fc:
                    56:ab:c1:1d:bc:fe:03:b1:d5:81:2d:3c:ff:03:59:
                    f5:5d:26:c1:c7:69:7c:f1:1f:35:08:38:a8:10:6c:
                    6c:67:54:52:cd:f9:80:b8:75:7c:d6:f5:7f:14:92:
                    af:d6:2e:4f:a6:d0:53:fb:c1:ad:0a:49:91:bf:92:
                    cf:03:6d:90:26:98:38:c3:c5:6a:84:78:3e:9e:bb:
                    c0:3e:5b:eb:53:bb:74:1c:c9:3e:ed:04:79:0e:73:
                    32:ec:42:52:3c:39:e2:e5:78:6e:66:55:8d:20:67:
                    57:61:d1:56:e2:1c:50:3f:ea:4a:44:59:f8:b1:3a:
                    55:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:B3:DA:6A:BB:84:33:14:51:0F:BC:33:1C:11:77:78:1B:39:E2:28
            X509v3 Authority Key Identifier:
                keyid:59:DE:F2:CF:82:8F:0D:9A:B6:AD:94:F4:26:13:17:64:D2:54:CC:5C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/pbPaaruEMxRRD7wzHBF3eBs54ig.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         62:d1:5f:ff:a6:b2:d9:95:4d:93:a7:08:2c:6e:d7:12:fb:e4:
         80:5b:ff:b8:f0:dd:fe:0f:eb:28:a9:2f:c0:52:e4:15:27:e1:
         6d:c2:0e:84:78:a4:9d:49:dc:64:02:39:38:d8:d0:88:a3:cb:
         f9:5f:36:d5:8c:46:cf:75:cb:14:c8:35:e7:a3:81:5d:69:e4:
         d9:90:87:30:c4:04:87:8b:b8:09:7f:5c:99:7a:3b:0a:66:2a:
         02:a2:19:85:2c:d7:f4:3e:e4:96:75:e3:68:ff:ee:2d:fd:bb:
         70:fb:01:e3:c7:7d:44:22:fb:15:1d:42:8c:7c:3a:61:9f:36:
         c2:35:d2:12:57:a4:70:e0:29:fb:b0:19:d2:ee:36:24:c5:94:
         a8:cb:2b:c0:d9:36:9e:cf:94:66:0b:92:f5:51:c2:26:c9:04:
         ed:81:9e:b3:4f:af:90:c5:4a:5c:c3:c9:71:3f:1f:15:57:72:
         46:a7:3f:e9:79:8d:40:ef:cb:50:67:cd:bc:77:9c:93:82:05:
         d0:4b:ed:90:9f:3d:f8:3c:88:b1:08:e3:2d:f5:d4:67:0e:f9:
         6f:e8:80:75:3a:4c:c6:0f:a7:fd:74:d2:fb:8a:e8:84:86:33:
         e3:98:01:39:ce:47:32:e2:d2:1e:5c:a4:06:53:8c:1f:4d:c7:
         85:80:d5:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----