Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGJING/RP7fje7kKkb1YFktwPxrsw-O2pc.roa
File:                     RP7fje7kKkb1YFktwPxrsw-O2pc.roa (raw, json)
Hash identifier:          mqYtudhelNV+og8GJt6WApZHrQTnAwvmxbyC8kyWFaw=
Subject key identifier:   44:FE:DF:8D:EE:E4:2A:46:F5:60:59:2D:C0:FC:6B:B3:0F:8E:DA:97
Certificate issuer:       /CN=4E721C5DD3459DFF85348F1B39DDA9DD50586234
Certificate serial:       0DB6
Authority key identifier: 4E:72:1C:5D:D3:45:9D:FF:85:34:8F:1B:39:DD:A9:DD:50:58:62:34
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJING/RP7fje7kKkb1YFktwPxrsw-O2pc.roa
Signing time:             Sun 07 Feb 2021 13:04:55 +0000
ROA not before:           Sun 07 Feb 2021 13:04:55 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     48024
IP address blocks:        103.127.240.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3510 (0xdb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E721C5DD3459DFF85348F1B39DDA9DD50586234
        Validity
            Not Before: Feb  7 13:04:55 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=44FEDF8DEEE42A46F560592DC0FC6BB30F8EDA97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:06:ec:28:6c:10:64:2b:c9:4f:e2:4d:5f:76:
                    7a:bc:90:88:79:b1:bd:0b:04:4b:72:5a:27:c7:75:
                    03:c5:5b:16:a7:53:e3:58:ba:06:fa:f1:7d:5d:c1:
                    04:8b:d4:b2:fa:e8:c1:40:a3:27:dc:14:8b:98:44:
                    87:99:a0:66:ba:b9:4a:ef:30:68:88:77:a1:1e:26:
                    39:b8:e2:4f:6f:a6:6e:72:83:aa:ed:e7:70:df:32:
                    f8:a7:6f:2b:f4:89:d2:40:4d:57:4a:31:85:85:5b:
                    aa:cf:63:b6:0c:d6:fe:bf:06:26:37:68:fb:95:82:
                    9f:97:96:be:a6:9c:9b:3c:68:33:71:56:3e:b9:e3:
                    d7:cc:3b:ff:f9:8a:df:16:d3:7c:43:3b:30:11:ad:
                    b4:f5:c9:4c:3b:12:7a:1a:04:c3:98:a2:a0:76:ba:
                    b5:b1:94:04:5f:2d:b0:90:8e:b8:d6:45:07:bd:2a:
                    a4:d7:72:c3:99:a5:b1:02:94:85:9d:b0:cb:81:54:
                    45:ab:94:1a:3f:d1:f5:98:76:e9:95:23:48:78:9b:
                    85:c6:10:85:d7:96:94:77:55:d5:17:06:7b:f7:fb:
                    63:a6:29:19:5b:32:94:6d:70:0d:16:95:bb:39:c4:
                    4a:30:23:bc:33:f8:c4:5c:28:9f:55:f9:72:15:19:
                    b1:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:FE:DF:8D:EE:E4:2A:46:F5:60:59:2D:C0:FC:6B:B3:0F:8E:DA:97
            X509v3 Authority Key Identifier:
                keyid:4E:72:1C:5D:D3:45:9D:FF:85:34:8F:1B:39:DD:A9:DD:50:58:62:34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJING/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TnIcXdNFnf-FNI8bOd2p3VBYYjQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJING/RP7fje7kKkb1YFktwPxrsw-O2pc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.127.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:f9:30:24:76:48:28:22:a0:d5:79:a3:64:dd:d1:a8:24:db:
         3b:af:6f:db:2f:8c:bf:f2:10:cc:1f:3a:27:2b:c5:7b:15:99:
         1c:82:a2:d4:27:90:be:0c:dd:b6:15:b7:7a:82:62:e7:bb:58:
         20:8c:63:6c:50:00:4e:66:cf:d6:80:86:5f:99:fc:e6:55:6d:
         8d:99:56:ec:19:e7:00:a7:0e:c5:c1:39:d2:aa:61:a9:96:96:
         03:42:1a:31:a1:e4:e6:bd:63:58:08:7b:2e:cb:12:78:89:60:
         78:c8:73:ac:9e:b7:79:bc:5e:bd:fd:12:91:22:b2:39:31:07:
         bf:7f:57:44:ec:4a:e4:0d:62:f1:59:28:cf:36:c8:5d:d8:0d:
         fe:d2:0d:38:87:2d:d6:1a:41:66:c2:ec:24:bd:7d:06:39:7c:
         f9:09:66:84:79:d2:24:f9:40:2c:f8:2f:18:fd:28:3d:70:ad:
         1a:6f:56:b2:fc:3e:f2:be:d6:d4:74:ce:f6:5c:af:d2:26:be:
         0a:7c:04:13:32:5d:42:cb:b8:6f:d1:91:a7:b6:0d:ed:95:71:
         99:45:0b:04:cd:8f:a3:bd:60:b9:d4:6e:9a:75:3d:ac:c8:27:
         26:95:1b:41:fe:04:d8:e0:41:1f:67:c2:12:a2:63:f6:e4:9b:
         c9:27:cc:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----