Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/dxxSAvBXcI5kRY5HD5Xl-YwBBAE.roa
File:                     dxxSAvBXcI5kRY5HD5Xl-YwBBAE.roa (raw, json)
Hash identifier:          mskkqykCpYEP1CP7Kr2KOe/7tAqPyAZy8Q3RXFna8c8=
Subject key identifier:   77:1C:52:02:F0:57:70:8E:64:45:8E:47:0F:95:E5:F9:8C:01:04:01
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0EA6
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/dxxSAvBXcI5kRY5HD5Xl-YwBBAE.roa
Signing time:             Wed 29 Sep 2021 02:43:49 +0000
ROA not before:           Wed 29 Sep 2021 02:43:49 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     131627
IP address blocks:        122.147.16.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3750 (0xea6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 02:43:49 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=771C5202F057708E64458E470F95E5F98C010401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7f:92:9e:7b:a4:53:80:b8:8b:7c:cc:1f:81:
                    06:20:a6:87:e9:7f:0e:7c:b2:d6:94:ec:ce:db:4d:
                    f5:5e:1a:4f:e2:28:a3:b1:7f:b0:c7:99:ee:75:c2:
                    09:aa:29:a8:63:86:da:d3:e6:2a:f4:d9:86:d2:00:
                    64:60:9c:51:e7:2e:08:1a:2e:84:6f:b1:30:af:35:
                    86:5d:5a:76:f3:8d:26:61:e2:63:50:73:e4:23:5c:
                    19:3d:eb:f9:68:f5:42:8b:2d:49:cd:98:a1:44:2d:
                    c3:d5:f0:bb:d3:28:21:3f:8b:40:8e:e3:c7:09:bc:
                    a1:5c:99:4a:85:d0:92:11:10:44:20:1b:e9:d0:0a:
                    e9:13:d0:10:9b:59:ff:91:17:40:8d:f2:ce:04:a5:
                    12:75:03:87:52:30:b1:0c:07:6c:b1:f2:1d:f6:f1:
                    f6:d6:ed:af:d7:a5:2d:37:ef:d9:df:ca:76:5c:24:
                    bf:ef:70:6f:9f:69:52:4d:be:e4:32:c5:ae:de:4c:
                    b4:86:ef:a7:c6:b9:c7:fb:e8:bf:ff:91:05:4d:e3:
                    ae:96:a0:16:71:99:22:09:c2:43:09:ba:a9:1a:e7:
                    e5:2a:9c:38:2e:85:50:9c:30:a1:56:0c:4d:ec:af:
                    a1:e9:b8:53:2a:7b:86:ed:68:29:0c:fb:dd:4b:fd:
                    c2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:1C:52:02:F0:57:70:8E:64:45:8E:47:0F:95:E5:F9:8C:01:04:01
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/dxxSAvBXcI5kRY5HD5Xl-YwBBAE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.147.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         bd:d1:be:1b:a6:fe:c4:c4:c1:90:18:68:ae:98:93:16:0d:b8:
         5c:7f:07:02:3d:82:15:39:df:57:b2:cd:8d:27:34:5b:5e:3b:
         55:45:9a:af:fe:55:28:45:02:d6:36:b6:c5:35:6e:95:f1:78:
         45:4a:09:a0:63:04:b8:06:fd:6d:ea:b4:0f:2e:a9:df:00:dc:
         17:4f:d6:ad:58:0d:85:c0:1b:0c:55:a8:42:92:e0:ab:53:3f:
         52:6e:73:95:ce:86:8f:d4:aa:5d:ce:42:a4:9e:ce:37:f2:64:
         e4:41:2f:47:4a:98:12:7a:ef:0c:a7:ad:13:57:07:9d:a4:a3:
         e1:f6:a9:07:d7:a7:9a:2d:54:7f:5b:3d:0d:d5:44:f0:12:05:
         98:c3:40:e1:24:02:44:92:d4:ac:c7:a9:c3:8a:cc:86:2f:34:
         d0:58:43:43:17:ec:11:3c:40:4f:f1:de:2f:3a:6a:06:6a:ab:
         dd:f4:d9:2b:e5:8a:a6:4c:cd:d2:ec:8d:e2:cf:11:af:3f:a1:
         02:75:5e:c3:40:b0:c5:bc:1b:d2:1a:53:ec:1c:6e:f5:61:33:
         be:18:8e:b4:4e:7b:9c:7b:f2:d8:40:0f:e9:94:f7:08:2d:ff:
         dc:1e:39:98:ee:1a:cd:aa:4c:1f:b4:56:49:79:5b:4b:b8:63:
         c5:50:86:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----