Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/OTCu-mCVS-6XS-y7LlS0_4NEvuw.roa
File:                     OTCu-mCVS-6XS-y7LlS0_4NEvuw.roa (raw, json)
Hash identifier:          cojWt5FA1i+7xN+2tzG9zLQUp3Qg4Zt8JvwmDnf0/4g=
Subject key identifier:   39:30:AE:FA:60:95:4B:EE:97:4B:EC:BB:2E:54:B4:FF:83:44:BE:EC
Certificate issuer:       /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial:       0CFA
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/OTCu-mCVS-6XS-y7LlS0_4NEvuw.roa
Signing time:             Mon 21 Mar 2022 07:04:35 +0000
ROA not before:           Mon 21 Mar 2022 07:04:35 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     131621
IP address blocks:        118.168.255.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3322 (0xcfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
        Validity
            Not Before: Mar 21 07:04:35 2022 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=3930AEFA60954BEE974BECBB2E54B4FF8344BEEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2f:ac:46:fb:29:16:3b:42:1d:c6:5b:e2:88:
                    6d:1c:b2:e1:20:b1:3f:0b:8f:e1:3a:68:b6:a1:43:
                    18:7d:7d:9e:c2:a4:31:7a:fc:47:e6:1b:ba:81:cf:
                    ec:10:2c:23:e2:f3:f7:eb:84:cb:b1:fd:4d:13:d5:
                    ec:78:23:fa:d1:70:e7:b5:80:3e:d6:1e:e0:ac:89:
                    c1:be:f0:31:ea:3c:d8:fc:4f:b7:69:7a:a0:a0:c0:
                    64:de:a7:4b:b7:45:05:ba:0e:ee:cd:a4:00:06:f0:
                    d6:d4:60:fb:eb:b2:57:3c:ac:c5:90:e1:99:00:04:
                    97:08:50:62:8f:cb:10:62:29:c4:4d:df:03:27:1f:
                    60:9d:93:d2:48:03:ed:37:ec:29:a4:46:a5:a5:25:
                    77:fa:32:14:34:56:71:07:a3:5c:ff:0e:b0:3c:a6:
                    56:40:0d:68:02:66:cc:f3:9d:6b:e8:41:6d:36:93:
                    11:16:c4:b4:98:8f:6f:28:2c:26:2b:0f:e7:df:d1:
                    15:24:71:d7:74:c3:48:d8:9b:18:90:c0:b5:78:41:
                    9d:88:25:a0:e2:43:0f:03:4d:4c:9e:52:3a:f1:7a:
                    dd:31:fa:3d:a0:87:9d:3c:e4:cb:b8:37:73:6b:84:
                    dc:24:e8:f9:39:15:38:0e:7d:91:cf:f5:18:f5:bd:
                    50:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:30:AE:FA:60:95:4B:EE:97:4B:EC:BB:2E:54:B4:FF:83:44:BE:EC
            X509v3 Authority Key Identifier:
                keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/OTCu-mCVS-6XS-y7LlS0_4NEvuw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.168.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:12:9d:f4:df:9d:8c:61:53:3a:7f:c9:e1:ca:83:ed:ed:18:
         64:35:79:75:dd:fe:c8:fe:3f:f7:25:53:97:11:e9:04:5b:96:
         44:6b:06:0f:01:75:b8:94:00:ce:f3:69:4f:ac:61:b0:f7:3c:
         1a:db:59:25:a9:f2:a9:6c:2e:2a:cf:fe:73:9a:9d:75:69:da:
         9c:90:06:81:28:75:1b:e2:f2:03:3a:71:ff:6e:1a:65:b8:e2:
         0b:0b:df:25:98:d8:3a:bb:f3:c7:66:09:c6:0b:7c:8e:a5:6a:
         fb:53:07:c3:f9:ed:77:f7:f9:e3:60:62:be:30:3b:3a:70:81:
         b5:e8:c8:db:25:69:9c:7c:42:e6:25:96:f6:a0:36:e7:a2:be:
         7c:11:d8:d5:d4:44:6e:ea:91:b8:4f:99:43:c5:af:7f:4d:21:
         bc:17:47:a1:53:12:01:e0:dd:33:52:8a:a2:84:e8:ad:10:0e:
         f3:5e:e8:f5:2a:6d:36:62:dc:90:7d:16:5f:09:a4:62:db:b4:
         1f:98:65:9e:57:57:dc:0b:19:3d:81:98:6e:a6:f5:96:77:59:
         1d:3e:ac:fb:33:03:b0:5c:64:7b:e1:37:3f:46:a5:e4:0c:15:
         34:b8:de:81:74:8c:0b:0b:76:7b:a8:44:1c:62:da:1c:ce:2d:
         4a:be:06:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----