Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/FV79UXXYOrq6rYuSTuzJ1W8ES_g.roa
File:                     FV79UXXYOrq6rYuSTuzJ1W8ES_g.roa (raw, json)
Hash identifier:          yoqsUrc7wkodjuR90IgX5sYrmq081Cy5eNERv5egUo0=
Subject key identifier:   15:5E:FD:51:75:D8:3A:BA:BA:AD:8B:92:4E:EC:C9:D5:6F:04:4B:F8
Certificate issuer:       /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Certificate serial:       09DD
Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/FV79UXXYOrq6rYuSTuzJ1W8ES_g.roa
Signing time:             Wed 29 Sep 2021 02:52:18 +0000
ROA not before:           Wed 29 Sep 2021 02:52:18 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9922
IP address blocks:        61.61.80.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2525 (0x9dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
        Validity
            Not Before: Sep 29 02:52:18 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=155EFD5175D83ABABAAD8B924EECC9D56F044BF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:01:2d:fc:82:df:21:df:f6:21:d3:98:47:8d:
                    c0:f6:e2:89:48:89:5c:71:ca:dd:ec:db:d3:86:79:
                    d1:e6:ef:1d:fb:1d:06:f9:34:58:b1:7c:95:c5:59:
                    27:67:c6:a4:61:25:21:68:b8:26:f4:10:6b:8c:8d:
                    10:39:68:96:86:25:59:20:ea:65:b4:de:58:54:75:
                    43:b9:8d:05:15:c8:27:b7:7f:73:7f:84:a3:9e:1c:
                    c7:2a:42:7c:92:ba:c5:01:74:af:92:d7:3b:7c:53:
                    d9:82:f5:88:bf:d9:91:d5:7b:ec:8c:ba:21:06:6c:
                    5f:fe:4a:86:97:57:f0:07:0a:e4:d2:46:cd:65:b4:
                    da:04:63:2b:90:3c:94:e4:3b:e5:1d:7c:7e:8f:bc:
                    75:ff:07:c8:7a:4a:65:2b:4b:27:07:d2:c7:46:34:
                    41:b0:ea:2a:a4:06:f0:a8:5a:e6:2b:d1:87:d5:77:
                    5a:31:39:05:46:4e:c1:40:27:15:36:f3:2c:7c:2f:
                    ce:6a:f0:c4:76:c6:c3:4a:51:c6:81:e6:51:b6:bc:
                    ea:db:a6:4f:99:d7:a8:35:1b:4a:0a:2f:50:90:49:
                    3b:19:0f:b9:b3:fb:c8:ca:3d:d9:a0:42:88:e5:c5:
                    29:fc:47:72:ac:ea:ce:67:79:48:72:c4:fd:f5:6c:
                    14:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:5E:FD:51:75:D8:3A:BA:BA:AD:8B:92:4E:EC:C9:D5:6F:04:4B:F8
            X509v3 Authority Key Identifier:
                keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/FV79UXXYOrq6rYuSTuzJ1W8ES_g.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.61.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8a:28:46:bb:18:10:3c:99:a1:be:24:ff:7a:3a:a7:19:06:7d:
         0c:01:08:70:3d:54:df:c2:5d:d1:de:96:14:40:49:00:6e:65:
         8f:1a:8e:b6:d0:dd:e7:80:fc:ff:cd:72:6a:d8:da:df:3c:9f:
         bc:3f:56:22:11:ad:4c:72:06:54:53:85:cc:b0:95:da:6b:eb:
         80:eb:6b:65:1d:7a:ac:42:18:a7:d0:0d:4b:1f:dc:df:89:e0:
         7c:8a:f3:ff:c3:03:70:eb:3b:7e:1a:29:91:19:bc:7e:82:cd:
         f5:26:ef:27:18:15:a1:57:ce:8d:bf:c3:a6:07:f8:19:24:29:
         b2:1b:d9:d9:24:ee:16:c7:11:5f:b9:58:44:a9:6e:9f:e0:26:
         a9:21:7e:cb:5e:1a:a7:8c:52:d3:26:49:5a:64:92:0b:54:fc:
         80:31:fd:12:a3:5c:86:9d:75:c3:86:92:05:00:9a:fe:66:f5:
         1e:ac:6a:02:3c:32:d6:a1:7f:06:45:75:4e:7b:b5:4d:72:5f:
         56:5f:b8:6d:89:46:7b:9b:26:5b:a7:8e:6d:1f:15:ac:0f:41:
         11:5b:43:31:ed:e9:07:46:3d:5c:ba:5f:17:3c:69:dd:66:c7:
         44:b6:7e:60:84:26:4c:c4:85:b4:69:1b:1f:80:3e:5a:72:81:
         c9:4d:1a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----