Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PUMO/-1eK2OLzFXlhdbcsLgunj2TtnNI.roa
File:                     -1eK2OLzFXlhdbcsLgunj2TtnNI.roa (raw, json)
Hash identifier:          NxtwjNInx9xJLTjr91oqaMy+oeU95wNKdsZsGKtIpfM=
Subject key identifier:   FB:57:8A:D8:E2:F3:15:79:61:75:B7:2C:2E:0B:A7:8F:64:ED:9C:D2
Certificate issuer:       /CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Certificate serial:       098B
Authority key identifier: 34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/-1eK2OLzFXlhdbcsLgunj2TtnNI.roa
Signing time:             Sun 07 Feb 2021 13:09:34 +0000
ROA not before:           Sun 07 Feb 2021 13:09:34 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38843
IP address blocks:        124.150.135.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2443 (0x98b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
        Validity
            Not Before: Feb  7 13:09:34 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=FB578AD8E2F315796175B72C2E0BA78F64ED9CD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:77:13:fe:e0:e8:bc:a6:40:70:2a:3e:40:5e:
                    5c:c0:08:c2:18:c3:e4:14:bd:d1:00:c0:f4:1c:14:
                    82:2a:eb:c6:11:3c:11:ab:b5:5d:89:81:3b:8d:19:
                    cf:72:09:17:14:dc:b3:5a:65:93:db:7b:d0:6d:00:
                    9b:39:08:aa:7f:d2:da:c1:00:21:8e:9c:93:b0:9a:
                    66:d8:1b:4f:96:e5:e1:44:fd:27:4d:2e:38:87:64:
                    03:cf:bf:49:0d:03:c7:f8:a3:86:f5:04:c1:bc:ab:
                    55:dd:78:ad:d3:a5:28:0c:04:26:cc:1d:19:21:8b:
                    28:c8:7e:c2:d5:76:24:25:8d:7e:61:a7:bd:37:89:
                    b8:af:37:c0:18:ca:db:af:14:0c:14:c1:dd:c1:04:
                    16:b0:ad:a7:d1:8b:9e:2c:4c:b3:8b:fd:ee:e2:fb:
                    35:2d:8d:95:92:1e:3d:12:f1:1f:7c:e0:de:82:4c:
                    f7:f5:aa:25:ce:f6:7c:b4:3c:7f:c3:6f:51:5b:35:
                    9c:a2:8f:6f:83:60:12:ad:78:fc:0c:07:7b:b4:59:
                    2d:e6:96:e8:63:f1:d4:eb:f8:98:a1:47:2a:81:b1:
                    e3:75:67:2b:33:3c:88:60:5f:24:7d:2e:99:a3:94:
                    bd:0f:89:82:d2:75:0a:49:8e:5c:12:f6:58:8d:67:
                    fa:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:57:8A:D8:E2:F3:15:79:61:75:B7:2C:2E:0B:A7:8F:64:ED:9C:D2
            X509v3 Authority Key Identifier:
                keyid:34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/-1eK2OLzFXlhdbcsLgunj2TtnNI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.150.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:86:62:52:b8:1a:35:27:95:97:6a:6e:31:d8:8c:00:6f:11:
         46:8b:bb:01:bc:37:1e:36:53:5e:6c:32:c8:e2:0e:a2:bb:b1:
         b0:ba:c7:81:88:96:a5:f1:26:97:a9:79:56:9c:6b:aa:8b:36:
         b3:3b:c2:9a:18:7b:7b:17:b3:0b:bb:f6:31:c5:36:01:1d:f4:
         24:75:19:af:f2:17:ae:84:0e:f5:a1:5c:ba:db:d6:53:9f:60:
         ab:ad:51:07:ca:5a:0c:41:2a:59:b5:96:e6:95:54:98:7f:12:
         63:3f:61:27:61:fb:97:78:17:44:83:82:c9:8e:51:55:46:af:
         a7:7c:4c:d3:14:46:c8:08:1c:b6:62:e3:bb:68:b5:68:67:fe:
         b3:54:99:ad:4e:ac:4b:ef:c7:15:06:13:e4:05:c5:3f:51:07:
         c1:d0:6d:cb:26:60:d6:d0:ed:51:b4:d8:7c:85:82:6a:dc:5a:
         31:cd:c0:c1:e2:48:b5:26:c1:fd:e7:9c:da:be:ec:29:ec:a7:
         71:5c:ad:ef:79:7d:6b:4f:e3:f2:d8:35:5c:58:37:a4:b0:8e:
         f3:f9:8c:6d:f2:69:d8:32:19:7f:c6:1c:d1:50:bc:1c:85:68:
         06:c6:8f:f2:7d:d1:2e:4f:1c:82:92:5c:98:21:bf:ee:32:06:
         e7:3b:ca:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----