Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/Me-1k2BwobtizmcBWhaA6FueM3w.roa
File:                     Me-1k2BwobtizmcBWhaA6FueM3w.roa (raw, json)
Hash identifier:          F2Jc8vrQ2gBXY/orz+ejcY9iEWrPd/Kia7nF8TrA/ig=
Subject key identifier:   31:EF:B5:93:60:70:A1:BB:62:CE:67:01:5A:16:80:E8:5B:9E:33:7C
Certificate issuer:       /CN=00DCF050C4CEAE5021AA8D311953F02D6121FD8D
Certificate serial:       16
Authority key identifier: 00:DC:F0:50:C4:CE:AE:50:21:AA:8D:31:19:53:F0:2D:61:21:FD:8D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/Me-1k2BwobtizmcBWhaA6FueM3w.roa
Signing time:             Wed 25 Aug 2021 03:48:02 +0000
ROA not before:           Wed 25 Aug 2021 03:48:02 +0000
ROA not after:            Thu 21 Jul 2022 02:43:53 +0000
asID:                     38852
IP address blocks:        103.169.212.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00DCF050C4CEAE5021AA8D311953F02D6121FD8D
        Validity
            Not Before: Aug 25 03:48:02 2021 GMT
            Not After : Jul 21 02:43:53 2022 GMT
        Subject: CN=31EFB5936070A1BB62CE67015A1680E85B9E337C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3b:78:db:e4:68:a1:f8:17:ff:5f:13:52:dd:
                    7c:eb:d2:98:5f:2f:e5:cc:16:ac:20:b9:8d:fc:d3:
                    a5:19:57:6f:3d:07:f5:a8:4a:d8:84:f7:09:c5:77:
                    a6:5d:1a:70:5a:0b:7f:05:bc:e1:38:09:57:b0:59:
                    5a:0a:3a:e7:a3:14:73:d6:80:10:d3:38:e5:3a:7a:
                    c7:94:9e:c6:3f:40:bb:f5:2e:42:66:8d:4c:c2:ac:
                    de:a0:01:89:37:99:fb:0a:2b:47:8f:9c:30:c5:f8:
                    34:1f:14:9b:c8:58:09:9e:c5:fa:34:14:41:b4:d9:
                    e1:d4:6b:3f:34:8c:66:30:e7:0e:95:f2:e7:d4:e5:
                    c3:19:d2:0e:1d:47:59:cb:6e:12:00:90:fd:ac:15:
                    c1:5f:17:f3:60:af:44:b6:30:01:47:a4:2d:c2:11:
                    9a:89:fb:35:f4:10:95:49:90:3a:37:09:e0:b6:bb:
                    99:c0:ed:90:a6:9e:b8:49:31:c0:d2:38:6e:8b:b1:
                    3e:ab:2b:97:9b:19:88:77:f5:12:d4:11:48:99:f1:
                    ad:39:10:21:6f:f4:c9:fa:94:85:aa:48:2a:6b:ef:
                    1e:10:b2:e8:54:ec:45:c3:61:26:37:4c:03:37:77:
                    6f:6a:8d:94:9a:f3:36:a1:d9:1d:9f:01:53:79:80:
                    41:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:EF:B5:93:60:70:A1:BB:62:CE:67:01:5A:16:80:E8:5B:9E:33:7C
            X509v3 Authority Key Identifier:
                keyid:00:DC:F0:50:C4:CE:AE:50:21:AA:8D:31:19:53:F0:2D:61:21:FD:8D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/Me-1k2BwobtizmcBWhaA6FueM3w.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:81:c2:1d:ff:c1:8a:12:a8:07:3c:ea:32:3f:fe:0f:02:e0:
         df:da:cd:7b:f5:78:50:e4:b4:a9:22:95:06:9b:41:b2:9d:e4:
         a4:d1:b1:ac:08:0d:eb:20:94:1d:e9:6c:d3:48:f4:b2:24:53:
         17:d9:51:98:fa:a2:ab:b1:f6:e9:f4:da:36:cf:18:b9:02:99:
         80:f5:c3:ee:97:02:5b:2e:35:94:e9:f9:f2:9a:87:7c:4e:c0:
         31:c8:4d:29:8d:55:e5:b1:d4:e3:32:35:5e:40:d9:d6:dd:1b:
         e5:d0:4c:01:4d:20:48:d9:74:0b:0e:bf:c4:7b:40:55:dd:03:
         73:49:a4:92:f4:ba:82:ea:59:63:60:ca:d4:55:d7:a4:4e:e8:
         96:89:69:12:84:aa:f1:53:0d:9f:72:d3:4e:9a:53:cb:db:2d:
         df:63:79:7e:75:0b:df:1c:6d:77:cc:a4:e8:55:37:73:38:f9:
         1a:d4:d6:bd:37:b2:46:90:51:c8:a5:87:fe:9a:c7:0c:08:34:
         e9:bd:7f:3c:86:ce:7a:b9:9d:9e:d9:77:29:f6:9c:3f:35:c3:
         1b:58:3f:24:0f:60:7d:a8:41:b9:1c:b7:c1:78:31:f2:40:cc:
         c1:6f:1b:64:a0:84:82:6c:40:93:c2:9f:fc:5d:04:09:30:35:
         29:eb:ba:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----