Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/snLCeukbump-TYm6hwcgi410rAY.roa
File:                     snLCeukbump-TYm6hwcgi410rAY.roa (raw, json)
Hash identifier:          r6//3CMMB8KrD/LMkBTy8qAjS9ahE9XIOevQM7feOok=
Subject key identifier:   B2:72:C2:7A:E9:1B:BA:6A:7E:4D:89:BA:87:07:20:8B:8D:74:AC:06
Certificate issuer:       /CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
Certificate serial:       0971
Authority key identifier: 0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/snLCeukbump-TYm6hwcgi410rAY.roa
Signing time:             Wed 29 Sep 2021 02:44:37 +0000
ROA not before:           Wed 29 Sep 2021 02:44:37 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     131593
IP address blocks:        43.251.60.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2417 (0x971)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
        Validity
            Not Before: Sep 29 02:44:37 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=B272C27AE91BBA6A7E4D89BA8707208B8D74AC06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:33:3a:9c:f7:12:34:8c:eb:e1:1a:4d:1f:85:
                    d1:88:89:9c:5c:34:3d:c9:13:cd:01:40:00:87:86:
                    cd:2b:53:ff:67:49:de:4f:6f:1f:a2:74:c0:fe:23:
                    a0:97:7a:db:82:b5:c8:b0:fb:bd:eb:14:2d:31:fc:
                    3e:2e:ac:05:4f:73:8f:93:2d:1b:26:3b:1a:48:05:
                    90:bb:5e:52:33:92:2b:46:5b:1e:ac:f6:07:b7:f4:
                    94:a4:42:93:f3:65:53:af:6c:1a:c2:4c:2d:4b:15:
                    0f:7d:f7:78:a5:be:73:bc:cf:6e:77:20:a8:b6:78:
                    51:af:3a:fb:db:39:9b:d3:b8:aa:18:71:2f:76:eb:
                    7e:57:c8:bc:f3:68:8f:23:6d:bc:f9:94:bb:3a:55:
                    28:c2:9f:59:a4:ff:7b:b5:1d:25:89:c5:8a:86:31:
                    8e:4d:8a:64:2f:1d:74:7e:00:a4:b8:1b:f8:94:bf:
                    8e:1f:9f:27:4d:af:02:26:90:e9:b1:91:fe:0d:07:
                    05:94:8c:61:7b:3a:0a:32:25:1b:55:c1:01:4d:bc:
                    75:1a:3f:06:ce:d9:9a:4e:5a:5d:ef:b1:7c:74:c7:
                    a2:f3:b5:31:2e:fe:92:3a:a6:dc:72:66:78:53:70:
                    aa:3d:87:b9:01:58:05:61:b8:88:26:21:69:17:3c:
                    82:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:72:C2:7A:E9:1B:BA:6A:7E:4D:89:BA:87:07:20:8B:8D:74:AC:06
            X509v3 Authority Key Identifier:
                keyid:0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/snLCeukbump-TYm6hwcgi410rAY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.251.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:e0:f2:43:15:19:9d:34:37:47:c8:19:79:2e:db:db:c1:db:
         86:1a:54:a3:21:46:39:8c:0d:a3:95:e9:54:c3:ca:b8:44:85:
         49:ab:64:b9:19:ff:1c:28:4c:8f:4a:5c:27:8d:2f:ce:5b:9c:
         d2:63:7a:dd:b5:f3:4b:fb:06:e6:d0:42:d6:6e:36:18:eb:8d:
         ff:13:f2:da:5d:16:9f:c5:4b:4e:34:b3:e5:d4:45:96:65:06:
         b4:69:ce:29:ea:ae:a9:62:64:cf:3c:5d:b1:e8:16:56:c3:4f:
         63:88:a8:95:d9:3f:cf:2b:b3:44:c0:03:62:d7:58:c1:54:79:
         d9:9e:11:21:20:14:ef:fb:d3:33:25:32:59:ff:6c:4c:6c:d4:
         93:7b:93:af:a0:67:ef:fe:1d:15:34:f9:9f:c8:cb:9b:c5:a1:
         e4:cb:1b:d9:65:19:24:90:4a:c4:bd:df:4c:98:d7:e9:bf:8e:
         80:d2:ae:18:a2:fe:84:1e:e8:d6:d7:2a:d7:68:3e:61:e2:90:
         0b:54:98:3d:e2:83:43:3a:8f:28:6e:8f:33:64:1a:da:5d:93:
         06:a4:45:05:0a:3b:84:85:bf:c3:cc:d2:34:cd:27:61:90:76:
         1d:50:f3:6c:7c:b5:7f:01:c9:7f:b4:ee:1c:de:39:e9:98:f9:
         45:d3:e5:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----