Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/yUk0kIFkypL7qGO5e_b98Rzmf74.roa
File:                     yUk0kIFkypL7qGO5e_b98Rzmf74.roa (raw, json)
Hash identifier:          V5tSoM4945Orkst7ggO/PJeQN5Dmpfds3IdJ1c7Jv5M=
Subject key identifier:   C9:49:34:90:81:64:CA:92:FB:A8:63:B9:7B:F6:FD:F1:1C:E6:7F:BE
Certificate issuer:       /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Certificate serial:       0B75
Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/yUk0kIFkypL7qGO5e_b98Rzmf74.roa
Signing time:             Wed 29 Sep 2021 02:44:14 +0000
ROA not before:           Wed 29 Sep 2021 02:44:14 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9919
IP address blocks:        192.72.248.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2933 (0xb75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
        Validity
            Not Before: Sep 29 02:44:14 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=C94934908164CA92FBA863B97BF6FDF11CE67FBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:49:cb:3a:3f:f9:c1:8c:94:0c:6c:5e:2f:00:
                    6b:a8:d0:1d:c9:6f:fd:cb:68:33:1e:1d:a8:49:00:
                    ae:64:49:79:d7:e3:b3:24:42:40:75:64:f7:53:85:
                    b0:da:b9:43:34:d0:69:18:82:bb:df:73:b1:05:f3:
                    8c:17:05:95:ac:9e:be:bd:12:74:e7:13:c1:af:83:
                    70:a2:5a:e0:e5:eb:9a:29:03:47:12:c9:b8:aa:44:
                    5c:88:34:a7:56:a1:eb:cb:89:4e:ca:95:02:eb:b6:
                    75:0a:4c:8f:fa:6d:b2:4a:e2:cd:72:d3:0c:14:68:
                    8e:24:e4:33:9b:45:95:7a:e0:a3:13:59:91:bd:99:
                    4d:6f:32:d3:3d:e7:68:e5:12:1c:7f:ab:84:33:48:
                    98:54:8e:f8:7d:6b:fd:87:e9:93:93:ec:9f:86:c5:
                    e1:94:a5:b5:40:fc:c9:06:9c:a4:dd:f4:1d:cc:40:
                    45:62:a5:ce:5f:f2:8b:b8:33:26:72:74:d4:1a:03:
                    cf:0a:11:47:45:15:2f:46:15:dc:e3:1c:50:d8:10:
                    e5:3a:f8:72:46:a0:b9:ee:b6:08:02:eb:08:75:eb:
                    1f:08:bf:db:ea:bd:bb:90:11:8e:23:65:48:f2:82:
                    6e:af:73:97:52:4a:16:88:a7:fd:c0:b6:f5:18:0e:
                    c5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:49:34:90:81:64:CA:92:FB:A8:63:B9:7B:F6:FD:F1:1C:E6:7F:BE
            X509v3 Authority Key Identifier:
                keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/yUk0kIFkypL7qGO5e_b98Rzmf74.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.72.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:e9:f5:30:88:1b:ab:35:4b:d6:8d:c0:b7:76:d9:28:c1:75:
         9c:03:cc:8f:ff:ec:f2:aa:02:6e:9f:6f:44:41:34:97:1d:65:
         91:05:1f:c0:50:a0:5e:83:5d:c0:51:e0:34:13:8b:93:cc:c3:
         d4:56:fd:54:c3:09:b2:a2:08:de:d3:09:f7:de:bf:20:6f:50:
         f5:18:9a:d8:6c:ae:9b:c7:61:87:2d:a6:c3:f6:e2:6c:74:52:
         da:4b:5a:2c:2c:0c:0f:34:af:91:dd:62:50:85:e0:40:cb:90:
         60:80:37:8b:4a:23:76:c8:b9:db:2b:d5:e2:fe:06:80:c8:06:
         b8:cd:8b:ca:d1:0e:e5:4e:45:98:2c:59:c4:e6:ce:59:b3:75:
         13:22:f1:f8:82:49:c2:bf:c4:be:89:52:9f:91:2e:42:70:69:
         89:04:65:aa:e5:de:73:f0:c5:f7:af:6d:7c:9b:bf:e3:88:2f:
         91:77:93:c4:71:13:d6:da:af:5d:72:f2:32:5d:4b:8c:65:36:
         9e:96:94:39:ec:a2:04:fa:d9:b7:46:27:27:4e:fc:c9:57:73:
         96:48:20:4f:2a:f6:5b:f9:d3:d9:bd:0b:44:ff:8b:4b:25:06:
         5f:42:1f:af:04:f6:35:0d:64:5a:3b:e2:55:e5:d2:c3:fa:7b:
         48:f7:62:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----