Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IMCLOUD/5wVmpbQVTx27jRkMArdaUH5FGt8.roa
File:                     5wVmpbQVTx27jRkMArdaUH5FGt8.roa (raw, json)
Hash identifier:          mWaO1kHQsYhfgMF7BRZPGCouHm8d1/0XB53DjviiFqg=
Subject key identifier:   E7:05:66:A5:B4:15:4F:1D:BB:8D:19:0C:02:B7:5A:50:7E:45:1A:DF
Certificate issuer:       /CN=61E0EE79428B85EDABB5F6EB9578EFB19E63C98F
Certificate serial:       0BB6
Authority key identifier: 61:E0:EE:79:42:8B:85:ED:AB:B5:F6:EB:95:78:EF:B1:9E:63:C9:8F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/YeDueUKLhe2rtfbrlXjvsZ5jyY8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCLOUD/5wVmpbQVTx27jRkMArdaUH5FGt8.roa
Signing time:             Wed 29 Sep 2021 02:42:16 +0000
ROA not before:           Wed 29 Sep 2021 02:42:16 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     134823
IP address blocks:        103.137.22.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2998 (0xbb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61E0EE79428B85EDABB5F6EB9578EFB19E63C98F
        Validity
            Not Before: Sep 29 02:42:16 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=E70566A5B4154F1DBB8D190C02B75A507E451ADF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3a:56:a3:c5:1e:d0:c7:5c:99:f8:2a:4a:ee:
                    34:f8:81:07:29:2f:de:a3:db:57:28:dc:8d:c1:fc:
                    28:b5:13:77:fa:85:6d:2a:fa:50:b1:1c:e6:0f:f8:
                    67:ec:f3:e7:d0:91:24:e3:0a:d9:df:ba:8c:ec:1d:
                    3b:38:21:93:78:df:d6:6a:01:61:8f:ae:53:67:0f:
                    46:e3:15:72:69:0b:04:3a:b2:f1:22:7e:15:4d:2b:
                    45:b4:1d:6c:59:63:c5:a6:0f:ae:c1:83:63:bf:27:
                    1b:34:01:cb:68:77:d2:7c:db:c7:6c:5d:da:8a:16:
                    e1:f9:57:21:8a:50:c8:6a:59:d7:56:f3:cd:7c:54:
                    08:48:2f:0b:20:dc:e8:41:b0:fc:60:f7:4c:23:6f:
                    fd:24:42:52:2e:6a:08:0b:bd:c4:11:83:37:5c:ad:
                    cd:8b:89:09:25:de:e4:c5:c7:63:4a:ab:35:ce:62:
                    25:54:ac:a9:95:7f:1c:c5:98:e6:4c:fa:a6:40:6c:
                    32:1d:e2:88:df:53:8b:13:67:a7:9a:41:53:06:e7:
                    73:1e:ae:00:b0:17:a0:27:42:91:58:77:19:78:7f:
                    61:46:4c:4b:76:48:32:ef:ab:8e:74:bb:26:e4:7e:
                    1a:ca:06:ab:a9:b4:a2:3f:c3:39:13:f8:fe:e6:56:
                    50:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:05:66:A5:B4:15:4F:1D:BB:8D:19:0C:02:B7:5A:50:7E:45:1A:DF
            X509v3 Authority Key Identifier:
                keyid:61:E0:EE:79:42:8B:85:ED:AB:B5:F6:EB:95:78:EF:B1:9E:63:C9:8F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCLOUD/YeDueUKLhe2rtfbrlXjvsZ5jyY8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YeDueUKLhe2rtfbrlXjvsZ5jyY8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCLOUD/5wVmpbQVTx27jRkMArdaUH5FGt8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:77:a3:1e:4c:1d:bd:5c:39:ce:9b:e3:13:26:b7:e6:c1:85:
         30:65:69:7e:53:03:77:3d:12:0c:23:8e:ea:b8:b5:83:d5:37:
         62:00:b6:c1:ee:8c:2c:3e:76:f1:e0:d3:71:a5:7f:cc:c2:3f:
         9f:ad:bd:c0:9c:c4:b9:67:41:33:a9:60:f3:47:bd:a1:76:b0:
         11:e3:3e:0c:d8:d1:ba:78:01:40:ae:74:f4:a1:86:7b:3a:fd:
         d2:61:25:15:aa:63:66:36:d2:f9:20:d9:7b:d6:a7:cb:2e:27:
         8c:ef:14:f2:12:34:bd:3b:11:39:8d:c9:a9:f3:fb:a3:4d:39:
         d7:ab:dc:67:b1:eb:9e:e2:56:51:7d:95:1a:98:d2:20:5c:d7:
         5b:1a:0c:67:86:d3:47:b7:94:73:05:8b:75:0f:30:64:bc:fc:
         6a:a9:73:f2:ba:f4:a5:0a:e1:7a:e2:f5:09:e1:0c:ef:a0:c1:
         27:62:6e:14:fc:e6:c8:fd:3f:7d:9d:78:17:89:8f:ed:e3:c7:
         20:e4:97:40:3b:af:88:d0:3d:1d:e9:63:7e:d0:4f:22:f4:72:
         e8:83:c3:70:4d:78:69:e4:2a:51:4a:a6:b1:dd:5e:f8:7a:94:
         a8:d7:3b:c3:d4:a6:da:02:36:6b:f8:72:3d:40:e4:70:c6:12:
         b1:a9:ab:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----