Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PUMO/dfIhBNFXRRd1I8YAe-U75uYfxUA.roa
File:                     dfIhBNFXRRd1I8YAe-U75uYfxUA.roa (raw, json)
Hash identifier:          um3sWgMDdlc6gwruL99QsNZz+YLoZI98iEOzHXrWDLA=
Subject key identifier:   75:F2:21:04:D1:57:45:17:75:23:C6:00:7B:E5:3B:E6:E6:1F:C5:40
Certificate issuer:       /CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Certificate serial:       097F
Authority key identifier: 34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/dfIhBNFXRRd1I8YAe-U75uYfxUA.roa
Signing time:             Sun 07 Feb 2021 13:09:23 +0000
ROA not before:           Sun 07 Feb 2021 13:09:23 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38843
IP address blocks:        124.150.129.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2431 (0x97f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
        Validity
            Not Before: Feb  7 13:09:23 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=75F22104D15745177523C6007BE53BE6E61FC540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:87:e3:29:bc:b5:5e:5e:29:63:91:83:60:57:
                    92:30:f2:9f:66:ec:99:d8:ee:f9:8f:12:67:4a:37:
                    2d:cd:12:ee:3a:4b:9f:88:c8:75:8f:13:31:99:1f:
                    30:5f:45:6c:b6:bd:8f:17:07:ad:99:2f:d0:93:c1:
                    e5:ea:f4:bd:69:37:e0:02:7d:cf:03:2a:19:28:35:
                    94:4f:ae:9e:f2:86:c6:d5:7a:f3:72:92:7f:1f:9e:
                    ea:da:f9:57:2f:1b:35:3a:89:27:f9:b7:a4:80:5d:
                    68:a8:6d:30:d7:33:3e:d2:0a:4e:60:2f:27:b5:76:
                    35:90:a5:d6:dd:8c:33:03:ca:2a:36:7f:ae:2e:e8:
                    f7:ca:0e:70:a0:39:6e:2e:01:53:5b:e2:f4:02:e5:
                    91:7d:65:15:b4:b5:59:b8:a5:7f:0a:ce:cd:37:6f:
                    32:a3:66:61:a9:5b:6f:21:10:4f:51:82:a5:ce:0f:
                    ab:e1:75:36:10:80:89:92:6b:12:ee:8a:8c:7f:4b:
                    5d:a5:c7:c3:0b:d8:cf:18:8f:0f:f3:df:2a:99:d5:
                    d9:3a:5d:39:58:da:e5:45:04:e1:3f:eb:e2:fb:24:
                    a1:95:f6:98:f1:82:6b:89:d6:94:44:e4:a7:8e:1c:
                    81:79:be:bd:cc:a9:f9:d2:0c:63:53:11:9f:5b:98:
                    74:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:F2:21:04:D1:57:45:17:75:23:C6:00:7B:E5:3B:E6:E6:1F:C5:40
            X509v3 Authority Key Identifier:
                keyid:34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/dfIhBNFXRRd1I8YAe-U75uYfxUA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.150.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:e1:ae:f5:50:ae:05:df:b5:94:21:d6:3c:22:3a:21:d1:a2:
         f1:d3:f1:54:c3:f0:e6:5e:c8:76:90:c0:e6:32:b6:df:96:28:
         6e:00:28:05:43:7f:ec:9f:05:92:14:28:75:79:67:d0:d0:fc:
         26:89:2c:b0:67:db:a3:91:11:dc:70:99:e0:06:d7:a7:0a:60:
         1f:18:73:81:ac:31:8e:89:8d:1a:c5:19:20:f4:9f:10:a9:38:
         ae:80:e5:d5:4c:5b:67:ca:ea:6e:93:6a:f6:2b:2c:22:d3:9a:
         3c:e5:bb:55:51:5f:b1:c4:7a:e1:64:c2:d7:4d:f1:a0:28:1f:
         12:de:c4:bf:25:0b:3d:76:61:69:25:44:98:6c:88:a2:a9:11:
         62:2a:7e:1d:22:ac:85:3c:7a:8f:b4:11:db:2d:93:0e:26:a7:
         fa:13:d8:d7:ba:a0:4c:ec:e9:e6:54:98:9a:9a:00:cf:9d:4f:
         6f:4e:df:ae:ca:0c:8b:98:00:1a:33:51:42:9f:dc:c4:84:c3:
         7f:80:fd:1d:b2:09:3e:11:3e:68:98:af:03:64:f4:0e:fa:44:
         09:95:dc:90:e1:0b:92:a5:db:2f:98:86:e6:b3:2b:0e:cf:b8:
         15:95:87:22:1e:b2:54:8a:42:de:ba:ae:2e:85:a7:95:07:9f:
         9c:bc:50:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----