Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NARL/KmHbdSzONkI3UAhmxMPU0FDqxec.roa
File:                     KmHbdSzONkI3UAhmxMPU0FDqxec.roa (raw, json)
Hash identifier:          Kj8Ri3ravSg7xx7ALzt2GtXwXbzh2dR9u0417kR1ZlE=
Subject key identifier:   2A:61:DB:75:2C:CE:36:42:37:50:08:66:C4:C3:D4:D0:50:EA:C5:E7
Certificate issuer:       /CN=451EF9359A984F6A4CF91FE9004EAEB089A984C0
Certificate serial:       095D
Authority key identifier: 45:1E:F9:35:9A:98:4F:6A:4C:F9:1F:E9:00:4E:AE:B0:89:A9:84:C0
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/RR75NZqYT2pM-R_pAE6usImphMA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NARL/KmHbdSzONkI3UAhmxMPU0FDqxec.roa
Signing time:             Wed 29 Sep 2021 02:52:45 +0000
ROA not before:           Wed 29 Sep 2021 02:52:45 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     18426
IP address blocks:        203.145.192.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2397 (0x95d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=451EF9359A984F6A4CF91FE9004EAEB089A984C0
        Validity
            Not Before: Sep 29 02:52:45 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=2A61DB752CCE364237500866C4C3D4D050EAC5E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7f:ca:fa:28:ce:fd:61:ce:1f:2e:e5:7a:ef:
                    86:7a:3b:45:6d:15:fb:b3:00:6d:de:09:be:14:00:
                    e6:28:d6:ab:1f:4d:80:e8:fc:4b:29:91:1e:92:01:
                    9c:a6:21:f3:bc:03:b7:0c:b1:41:e6:21:d3:f3:4b:
                    95:51:cd:14:ed:3d:e8:fe:a8:3d:b2:5d:6b:fa:49:
                    ef:71:e7:cd:c9:b4:b2:7d:36:49:95:df:11:31:01:
                    d5:2d:41:d1:98:12:fe:b1:3b:7d:60:90:ed:9b:e6:
                    8e:48:9f:71:33:af:cb:2d:da:36:d9:4e:03:5e:5a:
                    96:cf:93:09:2b:6c:52:8a:12:11:48:8c:a9:27:5a:
                    a1:8b:68:d3:a7:c2:da:1d:9a:61:7a:05:0c:cb:0e:
                    b0:75:6a:c3:df:ee:85:51:66:f1:a1:b6:02:0b:73:
                    36:9c:6f:39:50:1a:8b:06:19:a8:f8:36:37:bc:dc:
                    f3:da:4c:58:0c:ff:c4:d3:53:17:09:df:d2:79:cd:
                    c9:4a:e4:80:59:95:8b:e0:dc:c2:e7:49:13:07:ce:
                    a5:93:0e:e6:45:2b:73:f3:64:4c:c0:53:35:9e:fd:
                    bb:5e:12:44:b2:92:e6:78:b1:0d:c6:55:12:a4:d9:
                    7e:1f:ac:7e:6a:52:66:49:40:17:04:a6:85:83:9b:
                    dc:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:61:DB:75:2C:CE:36:42:37:50:08:66:C4:C3:D4:D0:50:EA:C5:E7
            X509v3 Authority Key Identifier:
                keyid:45:1E:F9:35:9A:98:4F:6A:4C:F9:1F:E9:00:4E:AE:B0:89:A9:84:C0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NARL/RR75NZqYT2pM-R_pAE6usImphMA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RR75NZqYT2pM-R_pAE6usImphMA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NARL/KmHbdSzONkI3UAhmxMPU0FDqxec.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.145.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         53:9e:3c:22:60:9d:c9:24:e6:26:32:0a:00:54:ac:ec:40:83:
         f2:4f:ec:0f:17:5d:ad:ea:33:98:d2:33:54:8e:17:c8:5e:d7:
         6e:57:db:6f:6b:70:f0:0d:79:d1:87:e3:62:b9:3e:e3:72:59:
         50:b6:65:48:3b:04:5a:f3:9f:a5:c8:45:15:01:ce:eb:58:2e:
         ee:f1:94:45:ee:db:cb:77:d0:6d:a9:cd:18:17:f1:a2:df:52:
         93:08:7e:04:9f:85:7b:7e:14:e1:79:eb:98:24:75:72:cc:f0:
         ae:5c:2e:64:18:d6:a3:58:3b:39:ee:0b:a5:c7:a7:03:2e:53:
         55:bb:0e:b2:6a:3a:79:0b:56:92:fe:5e:5f:90:cc:e6:9e:30:
         b4:66:18:67:ba:07:a0:34:c9:1e:a1:f2:43:aa:e7:a1:09:6d:
         24:3a:1d:bf:74:61:e9:78:5d:b0:5e:83:e5:7f:9c:65:97:57:
         67:f1:73:05:b4:d5:6f:64:6f:9c:77:f0:4a:bd:22:c7:91:78:
         83:63:a0:73:ad:48:be:9c:9c:a2:d1:99:6e:38:c8:63:29:98:
         7e:75:84:a9:37:32:70:4d:a5:95:fd:45:d8:98:ea:7a:27:de:
         25:4c:a2:44:0e:5f:c0:34:a7:1d:2c:d8:f8:6b:ff:70:a6:da:
         6f:83:f4:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----