Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/sWV6fquIKgD6a4QiW0doPFDhTxA.roa
File:                     sWV6fquIKgD6a4QiW0doPFDhTxA.roa (raw, json)
Hash identifier:          EDcCdP3+A1BRScSHnI22lpqHeZXRjbkI3GLl2HxMPGQ=
Subject key identifier:   B1:65:7A:7E:AB:88:2A:00:FA:6B:84:22:5B:47:68:3C:50:E1:4F:10
Certificate issuer:       /CN=165495E8D327E4F62D5A16438F080E608A34D0D3
Certificate serial:       0B77
Authority key identifier: 16:54:95:E8:D3:27:E4:F6:2D:5A:16:43:8F:08:0E:60:8A:34:D0:D3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/FlSV6NMn5PYtWhZDjwgOYIo00NM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/sWV6fquIKgD6a4QiW0doPFDhTxA.roa
Signing time:             Wed 29 Sep 2021 02:37:50 +0000
ROA not before:           Wed 29 Sep 2021 02:37:50 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     64271
IP address blocks:        103.137.246.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2935 (0xb77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=165495E8D327E4F62D5A16438F080E608A34D0D3
        Validity
            Not Before: Sep 29 02:37:50 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=B1657A7EAB882A00FA6B84225B47683C50E14F10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9e:88:06:0e:80:63:0a:d0:3d:ec:d2:9f:b5:
                    ba:7c:be:c0:11:91:7f:34:60:f7:2d:13:1a:c9:e2:
                    1d:93:f9:1b:6c:9c:45:81:fc:73:b0:83:03:08:bf:
                    96:74:5d:45:eb:c0:b6:1a:12:18:4b:ed:6c:b4:93:
                    89:76:af:ce:67:ae:08:69:83:a0:ed:ea:f6:88:42:
                    d4:df:c3:49:cd:aa:53:31:49:9e:19:7a:00:9d:16:
                    ab:51:42:ea:89:53:ab:af:5d:c0:b8:56:19:c9:0f:
                    6d:43:6e:6c:0e:78:c9:20:82:f9:c3:bd:b3:67:07:
                    07:69:5b:3e:4c:c8:c8:30:0f:db:f7:81:0e:f3:c7:
                    4b:74:2d:bd:90:c9:83:43:3e:da:7a:ce:43:93:71:
                    49:02:7e:d2:a7:60:b3:12:cc:43:f3:b4:1d:8b:5a:
                    4a:f9:0a:a5:7c:f2:e6:f7:77:d8:eb:e2:96:fe:a8:
                    33:80:ff:8f:56:2c:44:a2:7e:d8:97:5c:4a:b1:36:
                    32:94:23:02:0e:bd:fe:b9:76:ed:2a:3f:28:32:41:
                    40:1f:b5:da:a5:e5:f1:ce:19:74:5c:54:98:7e:57:
                    6c:25:9f:3a:bd:76:d6:85:78:95:75:10:65:83:94:
                    30:c6:42:c6:d7:bf:05:9d:e9:40:2c:54:1d:f1:df:
                    59:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:65:7A:7E:AB:88:2A:00:FA:6B:84:22:5B:47:68:3C:50:E1:4F:10
            X509v3 Authority Key Identifier:
                keyid:16:54:95:E8:D3:27:E4:F6:2D:5A:16:43:8F:08:0E:60:8A:34:D0:D3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/FlSV6NMn5PYtWhZDjwgOYIo00NM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FlSV6NMn5PYtWhZDjwgOYIo00NM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/sWV6fquIKgD6a4QiW0doPFDhTxA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a0:44:11:dd:c0:dc:bd:45:3d:96:e4:81:fc:0c:fb:9d:46:dd:
         cd:2a:26:c2:05:bd:84:b3:6a:f3:b3:d2:e0:bc:00:99:36:fd:
         dc:35:d4:a8:98:b0:2d:4f:79:97:4a:69:2d:63:ca:f3:15:fa:
         ea:2a:7a:ce:3d:dd:fc:f5:fd:7a:4d:42:87:d9:9d:a9:4e:91:
         7b:08:92:11:ce:67:25:d4:8a:bf:92:70:66:00:72:62:1b:f0:
         90:7d:88:db:b2:31:87:54:5b:80:68:da:eb:14:a8:09:13:33:
         71:29:3c:26:b7:61:59:b7:e4:0a:83:9b:5c:e0:b2:ce:cc:8e:
         6b:7a:bb:2b:d8:6f:00:57:a2:42:f5:b8:98:a1:6e:ef:43:cc:
         2c:73:c8:93:21:40:ee:1a:4a:7b:bc:c5:0d:91:87:01:83:08:
         77:32:ba:91:b0:78:09:73:7c:a8:45:1d:ca:38:0d:45:23:06:
         95:d7:76:97:3a:31:5e:9d:66:0b:31:34:97:e0:e9:4d:7b:80:
         2d:17:e6:5a:99:a3:38:a8:3d:f7:c3:33:d9:c5:36:b3:64:dd:
         a8:bc:4a:ea:aa:bf:31:45:ed:f3:ab:b4:65:ce:cf:42:40:ad:
         17:23:56:1d:77:33:64:ce:24:8f:52:be:dd:ad:c8:63:28:04:
         63:76:b3:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----