Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NWCATVISP/ayw0ORIwlULnYcoeodUT1F7brxs.roa
File:                     ayw0ORIwlULnYcoeodUT1F7brxs.roa (raw, json)
Hash identifier:          2nY3ph4VQZj9hTJbZdlNP8g+jjY+rJv162sAabvWH0o=
Subject key identifier:   6B:2C:34:39:12:30:95:42:E7:61:CA:1E:A1:D5:13:D4:5E:DB:AF:1B
Certificate issuer:       /CN=A615237B28D4CEF8AFF942181704A1870B0F3F70
Certificate serial:       0DD5
Authority key identifier: A6:15:23:7B:28:D4:CE:F8:AF:F9:42:18:17:04:A1:87:0B:0F:3F:70
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/phUjeyjUzviv-UIYFwShhwsPP3A.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NWCATVISP/ayw0ORIwlULnYcoeodUT1F7brxs.roa
Signing time:             Fri 22 Jan 2021 07:13:50 +0000
ROA not before:           Fri 22 Jan 2021 07:13:50 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18046
IP address blocks:        103.126.252.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3541 (0xdd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A615237B28D4CEF8AFF942181704A1870B0F3F70
        Validity
            Not Before: Jan 22 07:13:50 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=6B2C343912309542E761CA1EA1D513D45EDBAF1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0e:62:d6:ca:ff:bc:be:05:8d:ca:57:d5:df:
                    ae:87:a6:7f:69:57:ce:94:92:70:06:38:07:3e:ba:
                    cc:4a:0e:26:cc:98:d2:dc:f1:c0:86:de:83:aa:6b:
                    b7:17:af:42:f1:42:8d:75:69:9c:12:3b:37:db:32:
                    19:16:16:9f:ec:43:fd:4b:d4:de:38:84:e3:b4:ca:
                    f9:9a:90:2f:f9:fb:8c:6a:da:33:f6:21:4a:e8:cb:
                    31:04:c3:ee:44:81:5b:bc:6d:e8:fc:84:6d:33:13:
                    67:70:f0:15:f6:8e:ab:db:79:b8:8b:13:e9:6e:5b:
                    03:ed:75:05:67:a1:60:b6:01:b1:3d:bd:a5:41:9e:
                    92:8a:b9:e0:84:2a:12:74:93:ce:d4:b5:75:3b:2e:
                    08:92:64:41:a5:57:30:48:62:13:42:10:06:3a:57:
                    ea:b2:8f:93:b7:a2:50:ea:22:07:51:09:11:07:66:
                    f0:19:18:b9:98:19:ad:b6:8c:cf:66:7d:79:d4:15:
                    1b:2b:c9:cc:25:b7:28:e2:b1:e0:98:b9:c7:12:4f:
                    4e:15:0f:c3:8a:fa:64:60:b4:ec:f7:99:5e:3f:c6:
                    cf:10:77:3d:2f:49:9e:fd:7a:25:6d:66:03:f9:ea:
                    42:cd:49:da:fa:52:35:c6:0f:bc:4a:fd:c0:d4:c9:
                    57:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:2C:34:39:12:30:95:42:E7:61:CA:1E:A1:D5:13:D4:5E:DB:AF:1B
            X509v3 Authority Key Identifier:
                keyid:A6:15:23:7B:28:D4:CE:F8:AF:F9:42:18:17:04:A1:87:0B:0F:3F:70

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NWCATVISP/phUjeyjUzviv-UIYFwShhwsPP3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/phUjeyjUzviv-UIYFwShhwsPP3A.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NWCATVISP/ayw0ORIwlULnYcoeodUT1F7brxs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cd:d3:3b:a5:2a:4e:3d:69:52:25:85:88:ac:bd:73:68:e6:b7:
         5d:eb:dc:4b:89:e7:cb:9a:3b:3b:9c:96:78:e8:8d:35:16:55:
         71:33:fe:25:e7:5a:36:64:f4:ab:35:4b:93:36:72:4c:6d:b4:
         94:b3:13:cc:99:ec:32:70:e9:c6:89:fc:34:d4:94:45:6e:51:
         1f:47:f4:8b:35:61:05:04:b3:04:99:f1:67:86:26:d1:0e:aa:
         fc:3d:5a:aa:85:7e:9f:94:77:68:56:d2:a2:78:5b:f5:f7:0c:
         42:f1:11:11:7e:77:1c:14:70:13:87:97:fb:47:9f:e5:b3:88:
         1f:d0:aa:c2:90:a8:40:0e:dc:15:fa:7a:d8:b1:de:f9:a8:c5:
         5f:1d:8a:95:f3:b2:82:f7:f0:ae:e9:70:fe:0f:3a:dc:3a:fe:
         b2:e0:db:36:3d:3b:b1:11:b3:c5:97:2c:1b:de:6e:a3:3d:fe:
         7b:17:16:cd:66:a2:cb:cb:9e:1f:c2:ca:ce:c9:5a:0b:5a:46:
         2d:0c:1d:4b:16:a1:e1:fe:fc:d8:8d:b7:a4:ab:33:dc:6a:35:
         78:1d:f5:45:49:81:52:06:1d:d3:5b:30:da:db:c4:96:5e:95:
         e4:e4:40:8d:e1:41:ac:db:3b:16:72:6f:ef:eb:e3:59:79:40:
         4d:fc:bd:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----