Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FANTASY/sB0Y8aRtVo6mEiTFHLmg6IjjdNQ.roa
File:                     sB0Y8aRtVo6mEiTFHLmg6IjjdNQ.roa (raw, json)
Hash identifier:          vlArNZs/OChaINPoEjPcmX35kzzCUWvJzgNxCePfLuc=
Subject key identifier:   B0:1D:18:F1:A4:6D:56:8E:A6:12:24:C5:1C:B9:A0:E8:88:E3:74:D4
Certificate issuer:       /CN=59DEF2CF828F0D9AB6AD94F426131764D254CC5C
Certificate serial:       061B
Authority key identifier: 59:DE:F2:CF:82:8F:0D:9A:B6:AD:94:F4:26:13:17:64:D2:54:CC:5C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/sB0Y8aRtVo6mEiTFHLmg6IjjdNQ.roa
Signing time:             Tue 19 Jan 2021 02:30:59 +0000
ROA not before:           Tue 19 Jan 2021 02:30:59 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131671
IP address blocks:        103.146.213.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1563 (0x61b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59DEF2CF828F0D9AB6AD94F426131764D254CC5C
        Validity
            Not Before: Jan 19 02:30:59 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=B01D18F1A46D568EA61224C51CB9A0E888E374D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:42:0e:46:42:bc:69:0a:ea:6d:af:68:21:5e:
                    ac:a6:15:6e:57:84:e9:ed:db:db:d3:20:34:fc:1f:
                    ca:db:bd:3b:f7:5c:09:ce:b5:11:4e:49:aa:91:e3:
                    c3:a7:ad:ab:aa:3c:ef:8b:be:03:4e:42:28:d9:d0:
                    4d:8d:38:e3:28:a6:99:76:bd:87:8c:5b:09:26:7c:
                    ca:57:0a:90:c6:da:5d:d1:5f:44:49:75:fc:6e:6b:
                    a0:80:51:dc:c7:63:d0:3c:a2:1d:c7:e9:4e:f5:d1:
                    ff:69:f0:6f:63:99:9d:0a:bc:b5:c8:42:72:e0:2a:
                    d6:0b:98:9e:56:84:94:bf:9a:41:dc:ae:b6:42:9a:
                    29:bf:aa:99:df:24:af:99:a3:2e:da:50:f5:4c:79:
                    7f:f3:4c:fa:37:75:77:70:4c:f8:f9:da:80:4f:92:
                    4d:5e:41:6d:da:69:29:69:f9:bd:6b:65:c7:01:9a:
                    79:45:93:19:67:66:2d:88:eb:98:d4:9d:d7:71:e2:
                    d5:76:50:27:4e:0c:1e:9a:d0:6d:09:78:69:2f:9c:
                    7a:a5:00:6c:2c:6b:60:53:77:de:58:22:dd:cb:3e:
                    f1:24:8c:11:83:9e:d7:04:31:09:6a:45:1c:a8:6c:
                    92:32:c8:2d:01:a1:b0:39:e7:50:a3:e2:a0:70:43:
                    b7:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:1D:18:F1:A4:6D:56:8E:A6:12:24:C5:1C:B9:A0:E8:88:E3:74:D4
            X509v3 Authority Key Identifier:
                keyid:59:DE:F2:CF:82:8F:0D:9A:B6:AD:94:F4:26:13:17:64:D2:54:CC:5C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/sB0Y8aRtVo6mEiTFHLmg6IjjdNQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:4e:7a:6a:5c:83:f3:fd:20:c0:1c:46:19:9b:55:a3:a8:8e:
         1b:ae:ee:e0:27:fa:14:04:98:13:b2:a6:80:d1:bb:3d:81:e2:
         f9:bb:c9:9e:12:d6:f6:ad:7b:ec:13:69:9f:49:ca:14:3d:9f:
         51:b4:60:86:6d:f1:a0:9e:da:fa:72:7d:9b:5f:8b:c9:ce:1c:
         55:2b:3d:0b:04:87:82:06:53:c6:2d:2d:8d:0b:a1:39:c4:74:
         53:1e:88:05:d3:7e:b3:f7:b7:5a:d3:f5:9e:e7:a8:df:bb:f6:
         7c:78:83:b2:98:5a:62:6c:81:e4:1d:d7:0e:91:61:41:f2:0e:
         04:20:40:ee:57:30:1c:fc:f9:01:9b:d1:ca:89:11:d0:88:73:
         2c:37:4c:4f:94:0b:ea:98:54:37:e3:12:5e:66:fd:7d:5a:82:
         70:c1:66:4a:cc:a1:85:6e:f4:14:81:ec:ac:4d:24:e3:9a:80:
         fc:3f:56:16:92:7c:65:ea:56:75:5d:33:4c:0f:17:73:38:24:
         c3:eb:f5:69:43:98:f5:a4:15:1b:9e:4d:6a:62:cb:25:30:d7:
         c2:39:c4:9e:74:49:a7:83:0f:7b:f5:ad:fa:30:a4:98:55:d9:
         15:fd:91:6b:53:46:64:b3:be:33:5e:94:c4:2e:a1:e1:0a:20:
         c2:1d:e5:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----