Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PUMO/EsQbUUBmOmV-SUhhe7-AMoc0rPo.roa
File:                     EsQbUUBmOmV-SUhhe7-AMoc0rPo.roa (raw, json)
Hash identifier:          yphO70nY0E4ggcIC4/H9I2lmfIRjJj1fVROdyoc4lB0=
Subject key identifier:   12:C4:1B:51:40:66:3A:65:7E:49:48:61:7B:BF:80:32:87:34:AC:FA
Certificate issuer:       /CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Certificate serial:       098D
Authority key identifier: 34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/EsQbUUBmOmV-SUhhe7-AMoc0rPo.roa
Signing time:             Sun 07 Feb 2021 13:09:36 +0000
ROA not before:           Sun 07 Feb 2021 13:09:36 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38843
IP address blocks:        223.27.32.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2445 (0x98d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
        Validity
            Not Before: Feb  7 13:09:36 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=12C41B5140663A657E4948617BBF80328734ACFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e3:4f:f2:09:a8:e4:79:63:e1:8d:bb:ec:3a:
                    49:a2:40:c8:78:76:03:71:dc:52:5c:14:0d:b2:e5:
                    ac:da:b6:8c:fa:57:04:b0:80:6d:2a:eb:03:19:78:
                    12:8b:28:09:13:56:13:a4:68:8d:bb:6a:ec:35:d8:
                    87:55:f4:26:da:25:fa:79:7c:eb:9e:ae:df:11:4c:
                    41:16:bd:4b:85:6b:59:d1:13:88:3a:41:de:1c:6f:
                    34:89:01:3b:be:d2:bf:61:85:ca:71:bc:96:78:af:
                    6a:a3:39:57:c8:a9:06:94:08:a3:7e:eb:90:bf:2d:
                    a3:1c:74:63:0d:a2:6f:3a:2d:d4:3c:5d:05:b9:9a:
                    cd:04:29:4c:24:42:7e:cd:4a:1b:8b:4f:40:01:5e:
                    b6:a6:e4:f5:28:4d:f4:0d:79:00:70:e3:62:79:39:
                    f9:7b:f9:34:d1:2a:cf:55:e7:38:0f:17:b5:64:9e:
                    32:96:1a:c7:8a:89:e3:66:6a:20:4f:27:79:b6:3b:
                    90:c6:7a:f2:8e:af:46:47:e6:07:a7:68:93:5f:c9:
                    cb:0b:24:25:93:83:d6:c1:70:66:a7:1e:1c:43:ee:
                    cb:33:0c:0e:28:d2:e2:1a:9f:eb:69:f1:43:d0:62:
                    60:d5:6f:8f:14:25:fa:c6:aa:7f:18:1b:5b:69:50:
                    78:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:C4:1B:51:40:66:3A:65:7E:49:48:61:7B:BF:80:32:87:34:AC:FA
            X509v3 Authority Key Identifier:
                keyid:34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/EsQbUUBmOmV-SUhhe7-AMoc0rPo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.27.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:4c:68:c3:b2:2d:4d:d7:dc:33:e4:94:aa:03:c4:90:75:bb:
         86:fe:71:b3:85:d9:73:25:ac:a2:da:84:9d:91:00:63:fe:c1:
         5f:79:1d:7b:5b:8d:98:34:4b:81:d6:2a:01:ad:fb:e2:16:07:
         b1:e0:99:c6:5e:56:90:44:01:27:b7:46:2e:3b:6c:c1:7e:20:
         78:ad:7d:e6:a9:9e:55:78:8b:fd:d6:15:2d:c1:49:5b:2d:9d:
         1f:86:b7:a0:98:27:2c:56:93:3a:03:ed:e5:7c:ac:11:b7:f6:
         b2:56:1e:ff:b1:13:90:8f:70:bc:79:3c:2b:97:a2:44:c4:3d:
         df:36:4b:6b:e6:98:4e:3d:59:58:df:3e:99:15:64:b5:1f:cf:
         f9:32:a4:75:a1:09:f4:b5:27:ae:3c:c7:a0:78:a2:25:ea:6d:
         59:98:9a:2d:d7:3d:46:ff:76:57:84:f5:12:81:3d:12:03:55:
         54:c8:3c:af:9e:15:17:68:b8:69:dd:8a:b9:17:8d:cf:5d:df:
         fa:c2:a6:c2:17:68:fe:3c:53:c6:b0:9c:12:4c:23:fe:cd:8c:
         57:35:1c:e9:96:38:ef:4c:be:da:8a:1f:3b:47:16:2c:3c:b1:
         1d:0f:dc:28:6c:9f:27:dc:dc:8e:f6:13:be:a5:a0:b2:43:6c:
         be:f6:97:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----