Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PUMO/doZrfLm2p-ftyq83k3xnhMXdzG4.roa
File:                     doZrfLm2p-ftyq83k3xnhMXdzG4.roa (raw, json)
Hash identifier:          8bfKUl3muwO9193bA5uxqD6Taaq1n7hmtqlitY8GtW8=
Subject key identifier:   76:86:6B:7C:B9:B6:A7:E7:ED:CA:AF:37:93:7C:67:84:C5:DD:CC:6E
Certificate issuer:       /CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Certificate serial:       08B2
Authority key identifier: 34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/doZrfLm2p-ftyq83k3xnhMXdzG4.roa
Signing time:             Fri 11 Dec 2020 08:57:29 +0000
ROA not before:           Fri 11 Dec 2020 08:57:29 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     198949
IP address blocks:        223.27.46.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2226 (0x8b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
        Validity
            Not Before: Dec 11 08:57:29 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=76866B7CB9B6A7E7EDCAAF37937C6784C5DDCC6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8f:a4:3c:a9:53:bc:c3:15:d7:09:07:e9:8b:
                    b6:85:7a:c4:75:45:e9:20:8b:b4:98:d7:ca:07:e3:
                    29:84:a3:32:19:13:f5:f5:fc:53:80:81:c2:3c:de:
                    94:c0:9f:a8:85:3f:9b:ae:55:8f:cb:1c:84:05:94:
                    98:66:67:be:3c:57:ce:2e:08:42:93:c3:ba:bd:01:
                    73:37:6b:bc:71:24:12:ae:d9:d4:69:10:b4:ba:b4:
                    46:73:70:3d:ef:f1:f8:32:2f:b0:85:25:aa:6d:b8:
                    4e:ea:13:7e:b7:b9:24:5b:13:41:9e:41:68:21:3a:
                    3a:31:79:07:9b:3f:6a:9e:24:7a:dc:52:70:1d:82:
                    4d:1f:60:8d:3b:e7:13:2f:f4:cb:4a:84:1b:5f:f4:
                    e5:e4:ed:96:d1:b0:10:cf:d1:eb:ad:f9:ee:42:d3:
                    ea:4e:9d:0f:66:f7:53:25:67:a7:48:fa:34:d2:a7:
                    47:5a:fc:32:2c:17:c7:f2:a4:eb:9a:f4:70:7e:55:
                    aa:3a:07:ca:20:f4:07:33:4c:54:97:f7:a5:9f:8c:
                    b2:fd:15:bf:ce:9b:4c:20:f0:98:b6:eb:4b:2c:04:
                    60:cd:52:ae:27:a0:fb:f4:c8:44:a7:5d:a2:c9:70:
                    57:66:54:15:71:ac:00:e0:6a:49:9d:66:3d:9b:90:
                    f1:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:86:6B:7C:B9:B6:A7:E7:ED:CA:AF:37:93:7C:67:84:C5:DD:CC:6E
            X509v3 Authority Key Identifier:
                keyid:34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/doZrfLm2p-ftyq83k3xnhMXdzG4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.27.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:04:6a:7d:60:a1:66:aa:3c:d6:61:97:b4:96:ac:e9:6c:1e:
         da:08:2a:63:d2:04:12:60:40:e4:72:3f:c7:ef:71:1d:c0:7c:
         ec:eb:83:d7:9a:92:ef:77:14:bf:4e:f7:7c:f8:03:17:63:0c:
         54:e1:39:29:b2:01:b6:59:71:46:33:66:c0:86:b3:90:b9:39:
         c9:62:99:0f:86:3f:fb:e7:84:2b:e3:78:fd:b8:0b:59:82:80:
         6f:a3:fb:f8:09:8d:93:b3:a2:ce:f8:92:b3:aa:25:be:66:fd:
         9f:a1:29:a9:ba:7f:28:e7:1c:72:7d:6c:fe:25:b8:24:c6:52:
         ce:8a:7e:05:9a:f0:bc:20:20:b6:ba:d3:f5:fe:1f:66:da:c5:
         00:64:fb:2d:24:c0:ef:44:85:1e:7f:b2:46:95:8f:65:cc:bf:
         26:6d:5a:5d:a7:e5:b3:ba:2d:db:00:ce:40:83:ec:89:73:11:
         b6:5a:bb:21:e5:0d:77:0f:50:5a:3b:dd:e4:63:f0:25:bd:f2:
         ee:73:64:3a:62:d4:33:ff:e8:61:39:8f:23:37:f5:2b:8a:0a:
         a0:e3:9d:9d:87:d1:80:ba:3f:3f:da:12:7e:0a:2e:7c:46:9d:
         6c:da:fb:b7:78:ac:68:bb:7b:ff:0a:8c:9a:f2:b4:8f:6e:87:
         43:c5:9c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----