Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/LNyE4_VpXNWRKFolJ1KkjrgSk8U.roa
File:                     LNyE4_VpXNWRKFolJ1KkjrgSk8U.roa (raw, json)
Hash identifier:          OScToOsnPGtIgFJQfqfc0hX8+W5GyJ5ichvw+Y1ll28=
Subject key identifier:   2C:DC:84:E3:F5:69:5C:D5:91:28:5A:25:27:52:A4:8E:B8:12:93:C5
Certificate issuer:       /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial:       09A1
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/LNyE4_VpXNWRKFolJ1KkjrgSk8U.roa
Signing time:             Wed 29 Sep 2021 02:42:35 +0000
ROA not before:           Wed 29 Sep 2021 02:42:35 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9674
IP address blocks:        103.122.148.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2465 (0x9a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
        Validity
            Not Before: Sep 29 02:42:35 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=2CDC84E3F5695CD591285A252752A48EB81293C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7e:4b:a7:c0:d0:de:51:fd:43:a6:77:1e:25:
                    76:31:0c:73:4e:0b:83:b2:19:bb:c7:fe:aa:2e:cd:
                    2d:0e:7f:31:bf:1f:df:ab:53:af:b7:ee:6f:3f:60:
                    4f:ee:0f:81:25:3c:88:45:5d:79:3b:91:74:96:5e:
                    06:b6:f3:96:38:cc:21:5d:c6:86:78:52:0a:cc:a4:
                    d9:9d:7c:cf:03:07:a3:94:7e:29:38:df:75:5e:12:
                    41:16:56:fe:37:c9:3f:03:a6:59:f3:a4:48:f9:ed:
                    2a:54:75:99:90:11:07:3f:49:3f:97:8f:3e:a6:96:
                    dc:d9:7c:f0:c1:85:4c:b6:81:a8:62:7a:f9:61:d0:
                    b3:0c:40:12:3c:bb:3c:42:e7:0c:1f:02:0e:9a:7b:
                    7f:4a:5c:bd:1e:ed:59:62:45:3e:ed:e7:12:d0:8a:
                    6e:21:b0:e4:0e:5f:b1:c5:36:c4:de:98:1e:06:f9:
                    ca:36:60:5f:49:20:4e:12:b6:61:c2:b3:5e:73:73:
                    97:50:f8:8c:03:3a:9c:7d:da:d7:6e:56:78:e2:9a:
                    a3:0f:0b:d3:46:ba:8a:4a:d7:6a:b6:b4:7b:28:f8:
                    1f:15:f4:28:ba:4f:fa:ef:8e:e1:fa:0c:b1:a4:e6:
                    8e:df:33:5b:c2:5c:06:68:90:37:ab:36:1c:76:f9:
                    79:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:DC:84:E3:F5:69:5C:D5:91:28:5A:25:27:52:A4:8E:B8:12:93:C5
            X509v3 Authority Key Identifier:
                keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/LNyE4_VpXNWRKFolJ1KkjrgSk8U.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:c4:76:05:e5:f8:90:36:9d:98:06:28:70:ce:27:8c:7f:35:
         71:66:e5:49:0b:5d:65:19:f9:b2:70:a8:04:7f:70:17:ce:75:
         7a:92:1d:e5:f2:76:78:0b:ad:40:f1:6b:dd:fb:b3:80:a5:f7:
         fd:50:b9:d8:86:0c:21:dd:4e:33:92:f3:97:6d:60:13:a7:22:
         6a:91:0b:bd:55:11:a6:59:53:54:11:36:b0:cd:71:c7:7c:59:
         5d:af:89:43:db:a0:26:cf:3b:ad:52:62:fa:4b:9d:4f:62:2b:
         30:15:0a:77:25:9f:76:39:64:b1:eb:74:52:aa:27:3d:7e:08:
         47:d6:57:9b:c3:3b:13:90:3e:75:62:90:0d:b8:99:df:0c:12:
         2f:bc:0e:70:e1:a3:12:60:db:20:f5:a6:74:24:32:7a:67:8e:
         95:c8:2c:33:71:bf:07:38:91:a4:a3:54:de:d9:7d:74:ae:6a:
         04:13:48:1e:e1:8b:90:42:d0:a6:dc:dd:90:db:66:c9:1f:b3:
         39:54:dd:35:fa:fa:f2:3a:24:9b:30:ab:48:0e:f4:f8:a8:db:
         f8:df:c6:61:27:8e:7e:46:0f:43:65:db:a3:aa:11:9c:f3:d4:
         1d:f2:5e:9d:ab:5c:f9:89:42:88:dd:02:67:60:10:1c:3d:27:
         84:a1:0a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----