Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GOEASY/WwLctagFNwsRiGQZFAj-O__bHr8.roa
File:                     WwLctagFNwsRiGQZFAj-O__bHr8.roa (raw, json)
Hash identifier:          cX6o5iPfXFAPqbfObD6Ttvo9aBuCvP6KdAsFdlyhOf8=
Subject key identifier:   5B:02:DC:B5:A8:05:37:0B:11:88:64:19:14:08:FE:3B:FF:DB:1E:BF
Certificate issuer:       /CN=66B69E5B178B8C9444C4D64A6963B0BC9FA35762
Certificate serial:       7C
Authority key identifier: 66:B6:9E:5B:17:8B:8C:94:44:C4:D6:4A:69:63:B0:BC:9F:A3:57:62
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/ZraeWxeLjJRExNZKaWOwvJ-jV2I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/GOEASY/WwLctagFNwsRiGQZFAj-O__bHr8.roa
Signing time:             Thu 13 Jan 2022 04:01:44 +0000
ROA not before:           Thu 13 Jan 2022 04:01:44 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     131618
IP address blocks:        103.170.14.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124 (0x7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66B69E5B178B8C9444C4D64A6963B0BC9FA35762
        Validity
            Not Before: Jan 13 04:01:44 2022 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=5B02DCB5A805370B118864191408FE3BFFDB1EBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9b:bf:48:6c:b9:95:bd:44:d9:0b:67:6a:a5:
                    73:72:f9:9a:f0:62:f0:77:d0:8d:e5:05:22:7e:e5:
                    da:65:c2:89:d9:c3:4c:7a:69:59:e6:2c:9c:e1:00:
                    17:d5:c3:4a:3a:62:f4:6c:db:00:c7:91:a4:7d:8d:
                    12:af:df:05:f7:07:fd:a8:f1:aa:2c:37:13:15:6d:
                    35:8d:71:07:63:b2:ef:c2:96:eb:73:fc:b5:ec:23:
                    15:02:14:7e:ed:6b:41:b7:0e:e3:f9:41:76:5f:4d:
                    f4:b4:ce:d0:61:2e:43:d6:71:e8:23:7d:bf:74:1f:
                    f8:05:08:f7:70:c1:3e:f6:b5:fa:75:53:c6:9c:d9:
                    f9:b0:7a:0f:64:c5:93:32:a3:b9:3a:74:21:8d:3a:
                    f9:58:56:33:0f:0d:59:8a:f0:a8:ca:ae:b4:d3:57:
                    8f:df:af:84:00:c7:1e:a2:e3:8f:ae:e3:75:9d:7b:
                    02:36:40:8c:7d:a9:21:f2:73:9c:80:7d:44:8d:9a:
                    8c:d2:26:f5:87:d6:bf:b4:91:ae:2c:32:b9:f1:69:
                    b8:85:66:54:d6:c5:40:ad:84:a6:49:ca:bc:fd:29:
                    f8:71:08:07:64:45:fb:0e:ca:6f:f6:7d:47:c0:19:
                    d5:4c:06:e2:7e:c2:6f:6d:f2:72:e7:62:1e:2c:46:
                    19:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:02:DC:B5:A8:05:37:0B:11:88:64:19:14:08:FE:3B:FF:DB:1E:BF
            X509v3 Authority Key Identifier:
                keyid:66:B6:9E:5B:17:8B:8C:94:44:C4:D6:4A:69:63:B0:BC:9F:A3:57:62

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GOEASY/ZraeWxeLjJRExNZKaWOwvJ-jV2I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZraeWxeLjJRExNZKaWOwvJ-jV2I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GOEASY/WwLctagFNwsRiGQZFAj-O__bHr8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:49:5e:ae:38:1a:9a:94:a9:16:e4:84:65:49:bc:fb:5d:08:
         6c:a4:ba:50:7f:34:e5:6c:da:f6:95:88:22:9c:81:9a:90:5c:
         5f:6b:cb:da:70:78:30:bf:49:e7:d6:ba:57:20:14:0e:3b:75:
         91:0f:c5:f3:75:25:56:7a:f1:8f:dc:97:c4:83:f3:16:e1:1f:
         42:40:6b:d2:01:ae:59:04:e3:45:30:b7:78:01:bf:46:d1:e5:
         4a:7a:64:64:19:69:09:ea:1d:a2:42:dd:48:17:eb:65:6e:0c:
         7a:f1:d6:2b:5e:3a:1f:08:b1:a3:21:cc:47:01:b1:dc:d6:70:
         76:90:95:97:89:3f:f9:cd:53:6f:c9:d2:f2:3b:9e:7f:f2:01:
         f4:44:f8:99:40:64:04:34:6e:01:71:de:91:87:c4:b1:a8:d9:
         79:08:2d:60:2e:63:0c:93:13:12:e6:12:de:5a:e1:ac:55:eb:
         89:91:03:b6:f1:14:14:c0:2a:7e:a6:43:2f:db:79:70:e2:fe:
         4d:6d:6b:37:a6:63:75:60:98:db:83:bc:55:82:ac:5b:50:46:
         4f:06:37:0b:5e:81:90:04:09:ec:11:a9:6a:48:9a:05:e5:55:
         eb:10:e3:58:72:96:1c:73:fb:97:28:ba:05:db:a8:22:ff:94:
         3c:b2:48:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----