Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PUMO/qjrgaRKC9jL74UpszVwe_sn_e-Y.roa
File:                     qjrgaRKC9jL74UpszVwe_sn_e-Y.roa (raw, json)
Hash identifier:          9Zw8CGTEm/IVWZ56skgjCQvOnnFkws3tQo7ayQSqLO8=
Subject key identifier:   AA:3A:E0:69:12:82:F6:32:FB:E1:4A:6C:CD:5C:1E:FE:C9:FF:7B:E6
Certificate issuer:       /CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Certificate serial:       08C0
Authority key identifier: 34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/qjrgaRKC9jL74UpszVwe_sn_e-Y.roa
Signing time:             Fri 11 Dec 2020 09:02:05 +0000
ROA not before:           Fri 11 Dec 2020 09:02:05 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     38843
IP address blocks:        124.150.129.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2240 (0x8c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
        Validity
            Not Before: Dec 11 09:02:05 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=AA3AE0691282F632FBE14A6CCD5C1EFEC9FF7BE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:32:e5:e3:64:b8:dc:6a:35:65:b0:13:87:0b:
                    71:c2:f8:ba:ec:02:cc:ad:4c:31:47:23:02:ba:21:
                    79:f6:85:af:41:7f:f4:e0:97:e6:45:a0:d5:2e:bf:
                    2a:bf:70:fa:4d:71:2d:26:2e:f7:12:00:f7:92:14:
                    f8:4e:e1:54:4b:d3:cc:05:ad:bd:0f:91:07:de:b8:
                    84:23:47:0e:be:2d:19:f9:a5:86:42:3c:ae:55:00:
                    be:44:66:68:db:5e:ec:14:ad:23:96:20:81:8e:4e:
                    d6:c6:f4:dd:0d:36:7c:2a:d4:7e:df:00:39:9c:4c:
                    b8:f5:c9:0d:59:17:d5:94:88:3f:b6:13:f3:38:d4:
                    85:48:97:e0:16:6e:a6:f3:60:e5:86:24:b3:0e:a6:
                    d9:65:e0:4a:26:d8:02:71:d5:f4:10:6a:f1:85:b9:
                    f6:53:bd:ea:cf:a5:5a:bc:fb:63:94:30:67:6f:23:
                    96:6d:6d:ce:2c:d4:07:ba:47:52:2b:93:33:f9:1f:
                    ef:4c:79:96:f0:b7:02:cc:af:a6:a6:6d:da:7a:e9:
                    18:2d:53:b7:b1:5b:59:25:d6:c2:b1:03:e5:39:f4:
                    2f:0b:5a:71:c3:90:46:f3:96:b8:23:53:04:75:98:
                    a9:d3:9b:50:0d:d9:6d:3e:3a:ea:4d:3b:35:ab:43:
                    7c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:3A:E0:69:12:82:F6:32:FB:E1:4A:6C:CD:5C:1E:FE:C9:FF:7B:E6
            X509v3 Authority Key Identifier:
                keyid:34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/qjrgaRKC9jL74UpszVwe_sn_e-Y.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.150.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:14:f3:d3:96:f6:fa:3d:12:c5:f9:64:2f:f7:35:35:2e:89:
         2f:ad:d0:b1:7c:22:dd:a5:24:61:a7:e5:c6:81:d8:fc:32:aa:
         f3:40:d3:21:48:fd:0e:f1:48:84:69:46:9c:e6:a7:ce:ea:d9:
         ba:cb:b6:7a:b7:f7:40:03:05:7f:ea:7c:22:0a:a2:bf:f7:f6:
         16:1b:98:72:21:20:04:70:d9:4f:04:be:35:96:30:49:80:7f:
         fe:a6:ae:7d:f6:9c:94:43:32:b1:5c:3c:73:cc:da:50:d6:8c:
         16:38:4a:8c:24:96:34:60:f8:db:a3:1e:76:89:de:1b:fc:0c:
         8d:ab:6a:cf:fc:60:2a:22:1a:ab:5b:7b:b0:4c:76:e2:6d:a5:
         e9:cc:af:ae:38:1f:ef:4c:3a:82:8c:5c:bc:ed:48:b2:4b:e0:
         a2:41:a4:6b:ef:80:fa:80:42:e2:5b:5d:d3:4a:f0:1e:98:f0:
         a1:fc:b6:25:1b:99:25:52:58:99:e9:d5:55:9a:d4:b8:98:a4:
         59:07:8e:e1:60:d2:42:06:51:26:46:fd:c2:da:10:11:90:72:
         ac:e6:87:b5:9c:c8:8d:84:82:d7:37:32:1e:06:8b:e4:b9:18:
         f9:af:4f:37:30:33:8c:79:c7:84:91:7b:0d:f5:04:2c:83:97:
         a5:7e:67:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----