Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IMCRS/n_pBFywM_AO1lW6vrT0_EB0gJ2w.roa
File:                     n_pBFywM_AO1lW6vrT0_EB0gJ2w.roa (raw, json)
Hash identifier:          WaFl07Rnmah/6/vWjTr2DcaWqjXkuMrszDkxGxoSx4c=
Subject key identifier:   9F:FA:41:17:2C:0C:FC:03:B5:95:6E:AF:AD:3D:3F:10:1D:20:27:6C
Certificate issuer:       /CN=22C51298D97A102902731FDC49BDFAB39D52AB2B
Certificate serial:       03
Authority key identifier: 22:C5:12:98:D9:7A:10:29:02:73:1F:DC:49:BD:FA:B3:9D:52:AB:2B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/IsUSmNl6ECkCcx_cSb36s51Sqys.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCRS/n_pBFywM_AO1lW6vrT0_EB0gJ2w.roa
Signing time:             Fri 26 Nov 2021 06:00:52 +0000
ROA not before:           Fri 26 Nov 2021 06:00:52 +0000
ROA not after:            Sat 26 Nov 2022 00:46:50 +0000
asID:                     38042
IP address blocks:        103.177.32.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22C51298D97A102902731FDC49BDFAB39D52AB2B
        Validity
            Not Before: Nov 26 06:00:52 2021 GMT
            Not After : Nov 26 00:46:50 2022 GMT
        Subject: CN=9FFA41172C0CFC03B5956EAFAD3D3F101D20276C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:de:0a:2b:7d:0c:ce:49:ce:c3:ee:1b:58:cd:
                    3d:ed:f7:d0:52:49:83:5f:c0:40:51:bc:56:bc:fb:
                    5d:7d:35:89:bb:cb:df:28:b6:58:0d:0b:6a:90:49:
                    79:b3:f6:8e:a0:d4:85:b7:e6:89:46:b0:c2:9b:15:
                    ec:83:c9:52:22:bf:34:52:24:32:bd:00:f1:f9:f2:
                    39:85:c0:7a:76:10:c7:58:c6:37:ee:27:81:3a:a2:
                    ff:f6:bc:7c:fc:1b:da:9f:7d:62:26:80:30:ec:fa:
                    91:3b:11:a2:c7:05:55:0e:c0:59:3d:44:98:97:f6:
                    03:29:85:22:6b:f5:61:45:cc:91:fe:67:99:fc:c7:
                    11:b0:8f:fc:88:a8:93:37:33:3a:47:cf:25:ed:94:
                    d1:5f:a9:0a:c2:05:47:9f:91:77:70:cc:e3:5f:89:
                    21:da:e0:45:3c:cc:8e:e3:7b:5d:20:81:97:c6:db:
                    bb:ee:6c:a9:47:75:bd:89:96:55:18:58:5c:12:ad:
                    23:e7:b6:57:a1:25:84:55:c0:dc:f2:fe:68:b7:60:
                    d6:a1:e2:e6:18:29:c3:8e:02:e2:18:3d:9e:77:d0:
                    83:7c:53:c9:e4:f3:13:3a:5d:0a:ca:1e:1c:f8:ab:
                    a3:81:b6:7d:59:f6:9e:20:44:f6:b3:5d:ba:06:27:
                    9b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:FA:41:17:2C:0C:FC:03:B5:95:6E:AF:AD:3D:3F:10:1D:20:27:6C
            X509v3 Authority Key Identifier:
                keyid:22:C5:12:98:D9:7A:10:29:02:73:1F:DC:49:BD:FA:B3:9D:52:AB:2B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCRS/IsUSmNl6ECkCcx_cSb36s51Sqys.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IsUSmNl6ECkCcx_cSb36s51Sqys.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCRS/n_pBFywM_AO1lW6vrT0_EB0gJ2w.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a2:24:36:7d:21:fc:ac:83:21:80:50:53:06:ff:8b:25:34:f7:
         7c:a9:f8:2e:1d:cf:05:17:8c:2b:e2:20:63:d5:a7:90:ec:eb:
         30:e1:3a:6d:24:22:8d:e5:e5:24:2f:6f:05:b9:8f:97:ce:02:
         a7:e3:81:e4:0a:1b:3e:4b:b2:1c:ed:5d:70:b7:a4:60:a7:7a:
         86:af:1d:b8:64:19:b2:03:d6:c7:66:fb:20:a4:d9:8d:da:3b:
         52:bb:f8:30:22:a3:26:2b:25:0b:11:23:89:a3:78:10:4d:95:
         d9:91:02:73:f7:c0:1d:7b:df:d6:bc:84:97:69:90:b2:ce:19:
         e1:0f:d7:87:f8:25:48:21:39:a5:21:4d:ca:8e:c9:1e:e8:20:
         e8:fe:20:bb:2e:df:68:63:ba:dc:92:66:c3:8f:18:3c:8e:07:
         8b:ee:63:f4:1a:30:6a:d6:bb:94:9e:20:4d:c9:98:a5:c4:c9:
         2e:3e:46:87:fb:15:27:0d:d2:50:64:dd:11:d1:7f:e9:36:61:
         3f:c7:55:ad:39:44:dc:9c:69:46:2d:1d:21:aa:c4:2a:26:83:
         0e:e4:7b:49:92:aa:9f:94:a4:ec:d1:86:cd:c3:21:51:02:55:
         21:b6:69:9d:cd:32:37:a3:b2:0d:59:42:d5:2f:c1:59:32:61:
         d1:cb:6c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----