Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PUMO/g5KGy2Chimju6fCu6SLI8sPOzVs.roa
File:                     g5KGy2Chimju6fCu6SLI8sPOzVs.roa (raw, json)
Hash identifier:          L6pNPgSPJ0+13jdYsxQ/V6nnsku/zN5wNelCH1wFgBE=
Subject key identifier:   83:92:86:CB:60:A1:8A:68:EE:E9:F0:AE:E9:22:C8:F2:C3:CE:CD:5B
Certificate issuer:       /CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Certificate serial:       09A9
Authority key identifier: 34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/g5KGy2Chimju6fCu6SLI8sPOzVs.roa
Signing time:             Sun 07 Feb 2021 13:10:03 +0000
ROA not before:           Sun 07 Feb 2021 13:10:03 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38843
IP address blocks:        223.27.52.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2473 (0x9a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
        Validity
            Not Before: Feb  7 13:10:03 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=839286CB60A18A68EEE9F0AEE922C8F2C3CECD5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b8:54:d8:ea:d9:be:a7:ff:da:31:74:84:8e:
                    34:47:d1:7a:da:27:b4:90:2e:7d:8f:a0:e4:e0:1d:
                    89:27:5c:6d:c9:76:6f:82:cc:88:a1:4c:d9:a5:ab:
                    57:f4:dc:28:b4:f9:a8:6f:06:9c:7e:df:a4:70:9c:
                    b2:58:13:8e:22:75:f8:29:85:0e:aa:67:8c:f6:7c:
                    a6:c8:c7:56:dc:d5:b0:c7:3e:16:27:ef:b3:9d:37:
                    b1:29:a8:43:5c:c2:60:c3:d1:ba:1b:f8:c8:b5:51:
                    1c:85:bc:50:bf:75:f6:86:fb:93:25:71:ec:1a:b2:
                    d6:9b:d8:f2:69:a4:cd:f0:3e:46:5c:ec:27:3a:f7:
                    b0:f3:26:98:04:4f:c7:37:66:b2:9a:ae:d6:d8:99:
                    9c:ab:93:08:1d:d0:43:e3:9c:40:05:48:d6:1d:08:
                    98:f9:0b:4b:c1:9f:44:b8:4e:7b:fd:2c:3f:09:8d:
                    d0:96:a8:27:9c:e6:ea:98:51:51:8a:d1:ca:7a:1a:
                    e5:d8:e9:3e:de:54:a7:c9:d2:f6:10:87:d8:77:e9:
                    24:9d:9b:6d:96:d9:90:37:a2:2e:8f:11:f8:62:9a:
                    b8:3e:1e:4c:f0:0f:bf:97:48:66:2b:fb:c2:db:13:
                    08:e6:7b:48:5c:1c:6a:62:91:e2:87:92:e9:06:11:
                    5b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:92:86:CB:60:A1:8A:68:EE:E9:F0:AE:E9:22:C8:F2:C3:CE:CD:5B
            X509v3 Authority Key Identifier:
                keyid:34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/g5KGy2Chimju6fCu6SLI8sPOzVs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.27.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:6e:65:27:6f:32:c2:2c:df:9e:03:dd:45:f8:17:c5:ea:9d:
         c1:55:a9:ba:cd:34:36:36:68:27:9f:92:33:71:07:8f:77:a9:
         db:1e:8f:7e:06:20:c3:fa:46:53:ee:43:5b:4f:bb:08:e0:68:
         f1:17:b8:46:ab:2f:58:2d:f2:1e:ff:94:09:d8:84:08:a8:99:
         d8:86:5b:d4:2e:2c:47:b2:78:4f:47:63:79:55:97:97:4e:2f:
         58:8a:dd:13:5e:6b:cc:95:2e:a9:31:5f:1f:92:45:0a:6a:73:
         7e:b6:e4:9b:3e:ab:41:ec:b7:85:ed:29:fa:78:48:97:d0:ac:
         30:af:23:25:6d:77:8e:0c:20:13:25:fb:f3:2c:83:d0:51:bd:
         2c:77:45:60:16:5e:70:6b:da:4e:90:2c:59:09:4c:91:cd:88:
         f4:84:df:d7:23:06:3e:91:20:41:83:cf:3d:1f:ee:c0:63:84:
         60:80:4a:96:2d:8d:47:83:37:31:b6:42:b9:b2:67:90:84:2f:
         45:24:9b:d4:77:c9:e4:28:6e:a9:43:79:2d:26:5a:f2:9b:96:
         22:f7:ff:7c:c6:f8:1a:c0:47:25:ff:d7:e5:6e:e8:4b:05:ce:
         61:1e:a0:a5:b4:f7:8d:f1:bb:5d:fe:b1:0c:94:97:45:b0:cb:
         8b:05:cb:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----