Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FISC/1wJb1D5V3PA73PCP-sUhWsBrlEs.roa
File:                     1wJb1D5V3PA73PCP-sUhWsBrlEs.roa (raw, json)
Hash identifier:          htQSAeQdR8cyhLv0QojLc5LUwzsOHAwzNXWgOyYZfCo=
Subject key identifier:   D7:02:5B:D4:3E:55:DC:F0:3B:DC:F0:8F:FA:C5:21:5A:C0:6B:94:4B
Certificate issuer:       /CN=F0CE10BD7C2B39A03A70C302BA2B08652C0807D2
Certificate serial:       095C
Authority key identifier: F0:CE:10:BD:7C:2B:39:A0:3A:70:C3:02:BA:2B:08:65:2C:08:07:D2
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/8M4QvXwrOaA6cMMCuisIZSwIB9I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/FISC/1wJb1D5V3PA73PCP-sUhWsBrlEs.roa
Signing time:             Wed 29 Sep 2021 02:38:29 +0000
ROA not before:           Wed 29 Sep 2021 02:38:29 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     131588
IP address blocks:        103.229.132.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2396 (0x95c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0CE10BD7C2B39A03A70C302BA2B08652C0807D2
        Validity
            Not Before: Sep 29 02:38:29 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=D7025BD43E55DCF03BDCF08FFAC5215AC06B944B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:c1:e0:ba:6b:06:25:bd:cb:e1:b3:c4:1a:e0:
                    f3:9f:46:98:fd:1d:e0:49:cc:9b:0c:f6:18:dc:99:
                    6d:c2:38:42:a0:9a:a6:49:df:bb:17:31:90:23:08:
                    9a:7f:6a:5a:df:dc:d6:e8:85:17:7a:80:b8:f3:99:
                    43:75:4b:d6:5a:b1:1f:26:af:a8:71:58:8f:7f:7f:
                    90:6e:62:72:60:d0:d8:be:2d:8b:69:e7:4b:e9:8f:
                    2c:75:09:8f:e1:97:09:78:0f:31:6c:06:2b:38:59:
                    6f:32:6a:bf:8b:e7:74:61:66:95:40:ff:39:76:f5:
                    c5:76:ca:36:27:e6:e7:b9:0b:68:62:29:6d:aa:d0:
                    b7:cf:7f:9c:38:d4:d7:39:80:31:e1:db:97:64:2c:
                    1a:bd:0f:91:7c:9f:e4:40:01:30:37:53:35:9b:4e:
                    11:d3:d6:8a:f1:7b:23:ea:63:d0:64:e0:72:d1:87:
                    48:85:58:80:4c:9b:57:50:78:b8:24:8a:53:0b:32:
                    e6:be:d7:95:28:64:f2:6c:ee:8a:78:47:9d:99:ad:
                    03:4e:71:11:e5:0b:1a:b7:89:77:f0:f8:0b:4a:1b:
                    ad:ce:c0:b7:5f:57:aa:2c:cd:b8:a5:c9:3c:52:4c:
                    d0:90:ed:f7:8b:87:11:d8:8f:f6:69:be:db:04:37:
                    a3:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:02:5B:D4:3E:55:DC:F0:3B:DC:F0:8F:FA:C5:21:5A:C0:6B:94:4B
            X509v3 Authority Key Identifier:
                keyid:F0:CE:10:BD:7C:2B:39:A0:3A:70:C3:02:BA:2B:08:65:2C:08:07:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FISC/8M4QvXwrOaA6cMMCuisIZSwIB9I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/8M4QvXwrOaA6cMMCuisIZSwIB9I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FISC/1wJb1D5V3PA73PCP-sUhWsBrlEs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.229.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:9a:03:19:46:a3:64:36:39:e4:14:5a:ec:5e:c7:21:5e:18:
         cb:85:5d:dd:97:23:8d:8e:01:87:85:b1:93:7e:27:6a:37:f4:
         92:d5:5a:20:b5:f8:cf:0d:c5:cc:51:60:93:70:e0:3a:2b:15:
         7c:27:2c:98:31:eb:58:65:48:f2:a7:ca:95:bc:9c:8c:b5:85:
         52:24:ab:7f:32:49:35:f5:7b:89:8d:30:6d:56:66:73:df:39:
         19:7a:26:62:79:6d:31:b2:a8:19:cc:3d:88:5e:78:57:75:92:
         d0:32:eb:c0:fd:75:3f:60:fd:11:d4:eb:2b:ce:2e:2b:3d:8a:
         6b:d1:e9:13:25:e0:f9:f4:54:93:ca:7a:29:89:67:e7:9d:ff:
         30:49:7f:9a:89:0a:7a:66:9a:44:21:2b:09:24:86:51:f5:74:
         35:cb:c7:0e:2f:a3:68:da:ec:44:0b:ee:40:99:b4:3d:ea:6f:
         db:0d:e5:84:58:72:27:59:d8:65:f8:af:17:7a:19:b7:5e:f4:
         86:f4:00:f8:38:42:5d:fe:2f:a8:28:85:e8:bb:a2:49:ad:50:
         aa:fe:99:a6:7a:94:e0:45:05:3c:51:76:1c:d3:39:bb:8c:7e:
         c6:6a:9d:21:eb:0e:c2:b0:41:45:31:f0:ff:ff:81:70:94:9d:
         53:e7:08:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----