Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/a0Zx6a1Jjbqy7lP54LNY2flJCm4.roa
File:                     a0Zx6a1Jjbqy7lP54LNY2flJCm4.roa (raw, json)
Hash identifier:          6FQlVrbJt+lYIWe43fEfsDNZgCjMpcz8nAzx8YGS+Fo=
Subject key identifier:   6B:46:71:E9:AD:49:8D:BA:B2:EE:53:F9:E0:B3:58:D9:F9:49:0A:6E
Certificate issuer:       /CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864
Certificate serial:       03F0
Authority key identifier: AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/a0Zx6a1Jjbqy7lP54LNY2flJCm4.roa
Signing time:             Wed 29 Sep 2021 02:37:47 +0000
ROA not before:           Wed 29 Sep 2021 02:37:47 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     17415
IP address blocks:        103.152.202.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1008 (0x3f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864
        Validity
            Not Before: Sep 29 02:37:47 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=6B4671E9AD498DBAB2EE53F9E0B358D9F9490A6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:19:46:8a:a6:4c:e0:c6:a2:3f:dd:08:2e:9f:
                    82:13:08:99:44:e1:28:26:f1:47:d6:62:08:7a:27:
                    5c:85:ac:4e:25:e7:2f:83:87:33:d2:c8:e9:d0:b9:
                    0b:de:55:61:d8:d1:c6:9c:57:3a:c1:bc:93:1d:fe:
                    7f:1f:f6:6f:0c:99:d4:1e:5d:92:ab:7b:08:5e:a3:
                    07:d5:d0:bc:46:dc:b9:6f:35:3f:15:97:eb:9f:52:
                    a3:9b:64:73:88:de:42:6e:bd:f3:3c:4c:8d:93:6b:
                    80:17:9b:42:29:13:8b:67:fe:d2:dd:43:d9:e6:c2:
                    0c:4b:3f:9d:a2:9e:c1:e7:e7:ca:aa:f6:08:08:45:
                    8c:cd:6c:5d:27:17:37:50:56:f5:a6:9d:e3:9d:70:
                    d9:14:9a:dd:22:4c:16:6f:8d:3f:27:3b:95:80:0c:
                    7b:0f:b3:5b:7d:34:7f:5e:7c:32:3e:6c:f4:90:4d:
                    81:b2:4a:62:5f:23:0e:41:2f:b8:01:b5:b2:1b:8e:
                    f7:d1:49:8f:07:62:22:1a:14:39:64:55:04:e5:1e:
                    4b:ec:3c:a1:38:3b:aa:42:6f:f2:d4:7e:09:c6:56:
                    77:e0:b1:2e:45:71:48:fe:bd:d0:b4:ff:09:0b:76:
                    62:2b:8d:0f:26:49:96:c7:2c:3d:97:39:38:cd:14:
                    47:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:46:71:E9:AD:49:8D:BA:B2:EE:53:F9:E0:B3:58:D9:F9:49:0A:6E
            X509v3 Authority Key Identifier:
                keyid:AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/a0Zx6a1Jjbqy7lP54LNY2flJCm4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:97:29:01:f2:2b:ed:b4:f9:cd:fe:b0:b8:30:cf:c2:bb:86:
         11:8e:df:8b:ee:dc:cb:d1:4a:6c:c0:ca:48:31:35:70:8f:13:
         ff:38:23:21:ec:56:5d:e1:b2:da:05:96:aa:15:6d:f1:48:0f:
         e7:fe:1e:68:3b:29:13:49:e3:e3:fe:5b:4d:05:ad:b1:c4:a8:
         3a:40:a6:c4:35:73:7b:c6:48:1c:77:72:64:e7:cc:1c:43:ba:
         06:4c:21:0a:7b:3c:7e:98:69:2f:25:71:13:62:99:8d:2b:12:
         72:35:44:8d:70:25:c1:1f:8e:07:b2:32:0b:f5:80:d8:de:20:
         81:9e:5a:19:5d:11:fb:50:20:b5:f6:b1:e4:85:33:69:ed:5e:
         a9:96:1a:f9:b8:21:22:9d:4d:01:6a:09:4e:1e:87:4e:8c:15:
         32:32:10:c8:19:7a:4b:14:36:91:15:a0:e1:c5:17:55:80:aa:
         c2:bd:6d:a9:b1:2f:d4:74:d5:d8:66:38:36:7a:9f:08:69:c6:
         76:34:d1:50:27:6f:fe:73:38:80:da:4f:83:87:ea:4d:22:e4:
         15:2c:e7:75:47:15:f6:48:f4:1a:f6:c4:6d:6b:77:7e:1e:72:
         21:9f:8b:66:19:96:b8:29:2b:7d:e1:78:6c:a9:e4:f5:a4:94:
         aa:6b:ea:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----