Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KBT/BQG95ExdGNgKZqIG7uBsf7BCv8M.roa
File:                     BQG95ExdGNgKZqIG7uBsf7BCv8M.roa (raw, json)
Hash identifier:          Yeofc+lMXryv8KfMuUSXmJUWI/W2BlK9MEE56eD8OOQ=
Subject key identifier:   05:01:BD:E4:4C:5D:18:D8:0A:66:A2:06:EE:E0:6C:7F:B0:42:BF:C3
Certificate issuer:       /CN=2DBED751DA8F01930418E2DE2432D0D03A97DA7C
Certificate serial:       09AC
Authority key identifier: 2D:BE:D7:51:DA:8F:01:93:04:18:E2:DE:24:32:D0:D0:3A:97:DA:7C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/BQG95ExdGNgKZqIG7uBsf7BCv8M.roa
Signing time:             Wed 29 Sep 2021 02:40:42 +0000
ROA not before:           Wed 29 Sep 2021 02:40:42 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     18042
IP address blocks:        61.63.32.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2476 (0x9ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DBED751DA8F01930418E2DE2432D0D03A97DA7C
        Validity
            Not Before: Sep 29 02:40:42 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=0501BDE44C5D18D80A66A206EEE06C7FB042BFC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d7:c0:6d:f2:12:6e:68:47:11:81:5e:a3:d4:
                    d0:f5:22:ec:de:c7:cc:0b:9b:3e:88:cb:5d:51:5f:
                    c0:53:4f:c9:6a:34:17:34:7d:85:eb:d4:2a:b4:02:
                    7a:37:46:75:5d:6d:5d:a8:9d:a7:9b:6e:3d:36:94:
                    99:c2:0f:55:1c:b9:cb:a6:ba:7e:76:11:e1:28:85:
                    21:97:3e:56:e1:d9:b6:95:c5:ca:3b:56:27:08:d7:
                    40:83:77:37:aa:ec:11:89:fd:6d:50:99:09:d4:6e:
                    50:75:76:ea:f1:fa:e2:cc:86:28:ef:db:e3:bd:09:
                    9d:0a:58:50:64:bf:25:b9:2a:97:82:43:7b:32:2e:
                    6c:db:28:04:cb:f0:cd:99:8f:c0:d3:81:ae:6b:7f:
                    11:02:38:52:d1:ba:7e:80:98:af:7b:c5:88:15:c0:
                    ee:19:5e:bb:87:74:84:ca:f3:de:1c:72:92:c5:3d:
                    dc:47:82:f9:3b:16:23:9b:37:d0:df:c2:9f:ae:ff:
                    9c:20:fc:27:86:02:e9:c6:b8:57:98:cf:f0:a3:93:
                    c2:31:3b:c6:56:7e:1f:16:85:27:b6:f9:14:28:1e:
                    98:83:a0:d4:0f:f1:a5:15:63:3c:15:a2:eb:0d:36:
                    92:ba:68:ac:c1:a8:32:c3:bc:e8:40:0e:18:17:ff:
                    b5:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:01:BD:E4:4C:5D:18:D8:0A:66:A2:06:EE:E0:6C:7F:B0:42:BF:C3
            X509v3 Authority Key Identifier:
                keyid:2D:BE:D7:51:DA:8F:01:93:04:18:E2:DE:24:32:D0:D0:3A:97:DA:7C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/BQG95ExdGNgKZqIG7uBsf7BCv8M.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.63.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5a:45:ce:0b:e7:dd:58:39:d0:12:d2:22:21:a5:46:31:4f:1f:
         0f:66:a1:bd:f6:b8:87:63:e6:a4:69:1d:56:4d:dc:95:f1:b8:
         06:40:2e:22:34:32:71:54:61:1c:ea:5e:cf:39:5d:3a:18:6b:
         42:ed:9e:e6:3a:68:7a:e7:3e:8c:ff:26:42:a7:a1:c5:8f:48:
         72:47:57:e8:d2:62:16:06:31:c6:aa:86:09:2e:e3:a5:b2:2e:
         e6:92:26:40:d0:9e:51:96:fa:aa:d6:f4:12:58:da:df:16:60:
         00:34:4b:ed:83:ea:1e:94:53:5d:9a:0f:ea:6c:88:7a:a4:5c:
         dd:82:b4:99:a0:96:57:92:a8:c1:f4:3c:4d:9a:9d:4e:9c:1d:
         e8:32:a9:ba:96:4b:3c:53:e9:63:45:85:ca:91:bd:8a:46:bf:
         d9:ec:9b:14:5d:6b:0e:ec:a8:47:46:72:60:86:d7:33:e8:3e:
         b0:de:85:3a:34:15:44:b6:5d:06:28:1b:dd:6d:89:90:80:2e:
         14:4a:02:70:65:63:a8:74:71:be:78:ef:94:3d:a8:34:2d:e2:
         4f:64:80:79:ef:bf:8a:8f:75:ea:45:68:28:c3:d7:a9:92:7d:
         b1:0e:31:38:f1:02:2c:cd:8b:a0:d7:d0:28:c4:cd:00:79:60:
         06:0d:2f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----