Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KBT/yfnOuL51QfZrFKodnpxigTnV0oQ.roa
File:                     yfnOuL51QfZrFKodnpxigTnV0oQ.roa (raw, json)
Hash identifier:          idb4gHlwzFsX0FbiX33OkWXYSNy/vHl9K59ucHYYmfA=
Subject key identifier:   C9:F9:CE:B8:BE:75:41:F6:6B:14:AA:1D:9E:9C:62:81:39:D5:D2:84
Certificate issuer:       /CN=2DBED751DA8F01930418E2DE2432D0D03A97DA7C
Certificate serial:       09B4
Authority key identifier: 2D:BE:D7:51:DA:8F:01:93:04:18:E2:DE:24:32:D0:D0:3A:97:DA:7C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/yfnOuL51QfZrFKodnpxigTnV0oQ.roa
Signing time:             Wed 29 Sep 2021 02:40:44 +0000
ROA not before:           Wed 29 Sep 2021 02:40:44 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     18042
IP address blocks:        58.86.38.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2484 (0x9b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DBED751DA8F01930418E2DE2432D0D03A97DA7C
        Validity
            Not Before: Sep 29 02:40:44 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=C9F9CEB8BE7541F66B14AA1D9E9C628139D5D284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:cf:7b:49:c9:99:c1:d4:1d:38:a5:f3:a6:be:
                    06:50:cf:41:36:55:4e:e6:4f:31:54:14:66:cd:95:
                    4a:9e:a3:84:5e:d9:01:34:7a:d7:6a:88:5f:34:63:
                    b1:88:f5:8b:fb:d1:a2:8f:d3:de:ee:01:3c:07:f6:
                    aa:87:85:96:64:e7:c3:c3:f9:5e:01:83:b6:b2:87:
                    f8:4b:3e:c1:25:cd:6c:de:b8:92:4e:14:f3:ea:d8:
                    78:63:e5:bb:f8:ba:f4:dc:2b:5e:fe:8a:87:70:ca:
                    36:6c:cf:2f:0a:57:f9:b4:a7:0a:d8:07:24:cd:74:
                    ae:d5:84:8c:75:5a:49:9b:58:bc:b8:cb:56:d0:d5:
                    81:02:39:1a:bd:c7:6d:c6:52:19:fe:d4:32:e1:a5:
                    3c:91:9c:cf:94:ef:13:ca:ef:5b:0b:c5:7b:f7:f3:
                    e0:f0:c3:ad:49:fa:ab:f9:e7:7e:48:09:2b:60:fd:
                    8b:76:8d:f8:42:7e:7d:8c:8a:71:5a:81:1c:fc:2c:
                    72:68:ce:5f:cc:eb:cb:bf:df:ee:4d:e0:a3:ae:41:
                    ad:4c:25:75:52:62:ca:de:4f:97:d5:da:d3:eb:00:
                    31:96:d4:de:3f:12:18:e0:da:11:eb:61:66:fa:61:
                    67:cb:a5:5d:b9:64:42:35:9c:c2:e1:cc:a6:d8:58:
                    14:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:F9:CE:B8:BE:75:41:F6:6B:14:AA:1D:9E:9C:62:81:39:D5:D2:84
            X509v3 Authority Key Identifier:
                keyid:2D:BE:D7:51:DA:8F:01:93:04:18:E2:DE:24:32:D0:D0:3A:97:DA:7C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/yfnOuL51QfZrFKodnpxigTnV0oQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.86.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:0e:23:de:32:94:46:eb:9c:26:ec:fa:da:85:c9:d9:eb:a2:
         30:60:25:ed:e7:f0:d5:25:34:64:c9:d1:fb:7d:9c:b8:f5:a1:
         9e:9c:74:6b:de:27:bd:27:8a:98:fa:ae:a4:d6:1c:f2:c6:39:
         d8:be:c0:eb:bc:0a:d6:70:27:1b:78:67:81:ff:d6:81:2b:89:
         79:26:ba:f3:3b:5e:26:1b:99:d6:25:c0:13:6e:b8:59:69:d8:
         9d:23:e8:78:bc:af:33:b0:e7:99:5c:14:17:13:b4:f8:9e:76:
         1c:0f:e3:95:05:c6:2f:f5:cd:33:7f:80:fa:0e:90:e2:c4:4a:
         c7:fe:a0:e1:0e:bb:aa:60:19:19:b4:22:1b:b0:f6:bd:84:cb:
         a7:d4:8c:65:97:04:ba:ba:1b:b1:f7:2a:a3:0f:af:25:5b:52:
         4e:cc:c0:de:f7:b5:88:32:bf:9b:12:27:d8:93:d2:68:4e:ac:
         0a:46:30:a5:23:75:0b:db:67:48:fb:00:19:5c:15:9c:9a:25:
         ac:d4:f3:f6:01:62:b0:bf:bf:62:87:fe:b1:23:1b:5a:3d:bd:
         ac:4c:fa:3f:bb:87:87:f8:c8:8c:7b:20:16:99:47:bd:1b:38:
         29:a6:01:18:97:42:c1:e5:fb:ba:cb:e0:04:eb:3c:d3:52:8c:
         63:5f:bf:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----