Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/NmPqDrLrW2SBaSeuOrIHeQBYOs8.roa
File:                     NmPqDrLrW2SBaSeuOrIHeQBYOs8.roa (raw, json)
Hash identifier:          5yZnJgHCnqRU3ffgDDYpJHetzEku2R/X4q4qve4YZeA=
Subject key identifier:   36:63:EA:0E:B2:EB:5B:64:81:69:27:AE:3A:B2:07:79:00:58:3A:CF
Certificate issuer:       /CN=165495E8D327E4F62D5A16438F080E608A34D0D3
Certificate serial:       09F4
Authority key identifier: 16:54:95:E8:D3:27:E4:F6:2D:5A:16:43:8F:08:0E:60:8A:34:D0:D3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/FlSV6NMn5PYtWhZDjwgOYIo00NM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/NmPqDrLrW2SBaSeuOrIHeQBYOs8.roa
Signing time:             Tue 20 Oct 2020 04:14:40 +0000
ROA not before:           Tue 20 Oct 2020 04:14:40 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     64271
IP address blocks:        103.137.246.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2548 (0x9f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=165495E8D327E4F62D5A16438F080E608A34D0D3
        Validity
            Not Before: Oct 20 04:14:40 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=3663EA0EB2EB5B64816927AE3AB2077900583ACF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:07:21:85:9b:b4:46:d5:2b:0b:7d:98:fb:a9:
                    95:12:68:76:24:50:cf:e9:14:de:c6:6d:b1:48:36:
                    a4:e9:3b:bc:b9:26:4c:b0:f7:ef:19:87:b8:15:6f:
                    be:81:1f:be:d2:a1:79:ee:cf:01:72:2a:e1:86:eb:
                    a4:cc:22:b4:27:fa:21:ec:03:f6:57:05:4d:a3:11:
                    5e:24:41:8d:15:54:b2:cd:bc:e2:2b:e3:18:55:02:
                    dd:9e:ff:61:6b:67:55:77:86:64:9d:c8:2e:0e:c9:
                    cc:36:c2:87:3a:63:14:d9:3b:d6:2e:ff:4a:42:8a:
                    7a:f2:52:fd:e2:d9:77:ba:c6:08:c7:32:58:b0:9c:
                    29:3c:b9:2d:99:11:90:d2:0f:41:8b:23:f7:de:0f:
                    19:b2:cf:9d:6b:1b:e7:15:34:8f:f0:51:36:61:7e:
                    3d:b2:95:1c:a5:cd:13:80:64:e8:d3:d7:a0:25:aa:
                    b4:75:8f:e0:ef:41:ea:48:43:2e:6a:ce:18:07:df:
                    be:0c:29:b2:31:3a:92:23:82:10:91:fb:76:63:7b:
                    f0:67:e9:06:17:52:26:df:fd:98:9f:a7:17:68:16:
                    71:1f:ce:c0:3f:80:a8:04:b1:56:b6:d6:bb:a9:28:
                    83:c3:1b:b9:a9:41:b2:78:00:02:11:a6:c9:7d:33:
                    59:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:63:EA:0E:B2:EB:5B:64:81:69:27:AE:3A:B2:07:79:00:58:3A:CF
            X509v3 Authority Key Identifier:
                keyid:16:54:95:E8:D3:27:E4:F6:2D:5A:16:43:8F:08:0E:60:8A:34:D0:D3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/FlSV6NMn5PYtWhZDjwgOYIo00NM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FlSV6NMn5PYtWhZDjwgOYIo00NM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/NmPqDrLrW2SBaSeuOrIHeQBYOs8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9f:ef:9d:a9:7e:c4:46:85:31:9c:b0:38:03:73:b8:78:7f:de:
         09:db:2b:8a:5f:4e:8a:08:1b:72:2b:ea:96:ee:05:e0:47:52:
         3f:f2:a3:f2:e4:16:c5:04:b7:21:45:b6:56:7c:b7:dc:2b:30:
         4d:89:b1:98:89:d4:b1:25:7e:bf:16:64:30:d6:ab:d8:a2:16:
         d9:63:2a:5b:0c:22:e1:aa:02:c6:fc:e7:e9:bb:18:74:a8:01:
         62:52:0a:d3:b3:13:e8:76:65:7a:36:c6:14:1f:be:1e:f7:e9:
         a7:f3:8e:b3:cc:59:2a:df:32:08:fe:f7:66:c7:06:72:bf:1f:
         51:fd:5b:24:ee:3c:a1:16:8f:61:ff:4f:2d:1a:42:02:dc:8c:
         62:09:75:16:b9:26:f9:26:5e:78:a5:a1:fb:f6:fe:21:52:fe:
         15:35:3d:7b:5a:09:a7:e2:eb:99:a8:8f:eb:9e:8f:7d:dc:4b:
         e5:75:75:ce:d7:14:db:11:b7:fb:36:ac:44:3f:e0:5e:6f:eb:
         f6:c5:1e:9b:66:5d:4a:5e:66:e5:90:75:59:4d:bd:a6:58:fc:
         82:26:c6:bb:01:a6:5a:25:56:34:66:4e:e0:3e:90:ef:23:62:
         01:76:10:f5:0b:23:71:ce:20:90:2d:06:58:4b:1f:63:68:bf:
         b7:b4:c7:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----