Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/shyQ7jamFn0anpxpxUhAsL30eHI.roa
File:                     shyQ7jamFn0anpxpxUhAsL30eHI.roa (raw, json)
Hash identifier:          WzRn8gs+48vQhApP8tiYo7nYggouBJ1uB+1W5e2qPHQ=
Subject key identifier:   B2:1C:90:EE:36:A6:16:7D:1A:9E:9C:69:C5:48:40:B0:BD:F4:78:72
Certificate issuer:       /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Certificate serial:       0B79
Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/shyQ7jamFn0anpxpxUhAsL30eHI.roa
Signing time:             Wed 29 Sep 2021 02:44:14 +0000
ROA not before:           Wed 29 Sep 2021 02:44:14 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     4780
IP address blocks:        192.72.192.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2937 (0xb79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
        Validity
            Not Before: Sep 29 02:44:14 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=B21C90EE36A6167D1A9E9C69C54840B0BDF47872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:2a:33:f6:c5:da:fc:79:59:61:2c:55:fb:e4:
                    fd:bc:50:39:83:95:fd:51:6d:be:94:c2:98:16:fa:
                    ad:db:91:22:ce:9d:f3:7c:b1:cd:59:00:8a:8c:4e:
                    76:e5:a3:be:69:01:d4:a8:07:e4:8c:9f:62:55:57:
                    e1:b2:62:9f:e0:fc:09:e9:f4:3b:a1:fc:a7:f4:e3:
                    e4:cd:3d:1e:af:bd:71:c4:5b:69:d2:46:6d:a4:57:
                    ab:81:e8:d7:ca:12:0c:8e:fb:3d:15:6d:4f:aa:92:
                    08:04:5c:9b:8e:76:11:42:90:6e:4d:65:9c:41:27:
                    b8:30:4f:6a:cc:38:4c:66:ac:47:4e:98:08:e3:40:
                    00:8f:f5:a4:3e:aa:4d:92:ab:32:e4:46:ab:74:10:
                    38:ac:77:fb:3d:5f:06:55:56:6a:61:6d:af:f0:e2:
                    51:4b:fa:f2:21:67:17:7d:59:58:83:1d:72:06:21:
                    7b:68:7a:96:cb:69:1a:78:22:a8:bf:80:5f:20:a2:
                    9f:71:c8:fe:42:1d:4d:39:fa:52:d9:b7:9f:2e:d7:
                    51:0f:6d:01:02:78:de:1c:b3:03:d7:38:ab:4b:3b:
                    77:f0:a4:55:b1:61:89:6a:77:01:25:bd:07:f8:84:
                    5d:9e:b8:bd:66:a8:7b:eb:f3:36:de:f1:25:d2:a6:
                    87:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:1C:90:EE:36:A6:16:7D:1A:9E:9C:69:C5:48:40:B0:BD:F4:78:72
            X509v3 Authority Key Identifier:
                keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/shyQ7jamFn0anpxpxUhAsL30eHI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.72.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3f:2b:90:d8:cf:e5:25:fc:ee:5f:35:f8:bd:6f:86:cf:fc:bf:
         29:16:b2:cc:c8:e2:f0:59:c6:73:87:c2:a0:26:e1:05:7a:a4:
         8b:db:63:20:07:6c:6d:d4:c9:67:d1:a5:5e:76:5c:f5:dc:2d:
         1b:57:ef:79:52:db:71:0e:0e:c3:d7:53:54:5d:83:9b:93:26:
         7f:f6:6b:cd:95:23:dc:a3:2e:cf:f4:a2:7a:01:06:ce:41:fd:
         fa:cd:75:dc:bf:48:cb:a5:72:c0:8a:7a:e7:6d:9c:64:03:52:
         71:5c:d7:49:41:79:e8:3a:fe:71:fa:c7:bb:a5:2c:d6:e4:57:
         95:b7:a4:ce:1b:df:d5:43:34:3f:53:6a:2a:49:7b:13:c5:41:
         cd:c8:37:a9:03:06:e5:e4:ef:cb:a7:02:1e:63:71:50:2e:a9:
         42:c7:53:b3:89:78:3e:b2:2f:b1:c6:0a:65:60:9c:38:2d:46:
         cd:5c:37:f6:87:4f:cd:06:e2:dc:9f:f7:0e:41:ab:00:fc:12:
         84:1f:50:c9:61:2a:47:7e:8f:f1:97:c3:1d:99:e9:16:38:f1:
         0e:0f:84:76:eb:2f:fa:63:79:fb:fe:c8:db:b1:81:a4:9d:2e:
         fd:d1:00:85:fe:f7:f7:95:a0:45:e4:d1:49:50:e5:22:5c:60:
         e3:37:1c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----