Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SCNET/by4bJnEul_A49Ur5sdSG3QF5rfg.roa
File:                     by4bJnEul_A49Ur5sdSG3QF5rfg.roa (raw, json)
Hash identifier:          WvNz2zVPNZsWxFsfr+dNPlE/lYkYkF0wkDidh554ZOM=
Subject key identifier:   6F:2E:1B:26:71:2E:97:F0:38:F5:4A:F9:B1:D4:86:DD:01:79:AD:F8
Certificate issuer:       /CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948
Certificate serial:       1014
Authority key identifier: 34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/by4bJnEul_A49Ur5sdSG3QF5rfg.roa
Signing time:             Wed 29 Sep 2021 02:50:26 +0000
ROA not before:           Wed 29 Sep 2021 02:50:26 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     131631
IP address blocks:        103.123.219.0/24 maxlen: 25

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4116 (0x1014)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948
        Validity
            Not Before: Sep 29 02:50:26 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=6F2E1B26712E97F038F54AF9B1D486DD0179ADF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:65:e0:78:e8:c8:d1:dc:80:c7:2c:77:67:d8:
                    9e:99:99:9b:3c:12:6c:05:6e:98:f2:7f:55:cb:d9:
                    52:eb:03:20:ff:90:21:2b:58:1c:1a:b5:da:80:81:
                    b4:57:f8:72:49:73:f3:42:99:b1:f8:b1:b9:f8:8d:
                    0f:22:91:6b:65:b5:a2:b1:68:f5:15:8b:0b:c9:3a:
                    0e:3f:5a:4b:89:8d:59:dc:87:c7:99:21:9a:fd:de:
                    1b:57:7d:21:49:6f:fb:31:13:30:3e:6a:dd:91:a5:
                    82:3c:e8:ca:bf:59:23:ae:f0:0d:06:0e:fa:1f:54:
                    5e:42:d8:aa:a1:0b:c1:99:f5:15:34:11:8c:17:11:
                    44:de:f5:b8:bc:ab:ac:8f:4b:48:ca:46:f9:7b:96:
                    c3:22:53:9d:39:45:77:e8:1c:0c:80:49:5b:93:46:
                    e5:cb:3d:ad:13:37:56:8f:26:ea:a2:00:e6:e0:4a:
                    eb:dc:47:dc:99:d2:56:75:9e:52:36:66:c3:33:73:
                    cf:8b:4e:a2:de:0b:ad:a9:50:2d:82:c9:70:d2:5c:
                    aa:ae:ef:f3:17:4c:36:a3:ad:a8:f8:f6:87:83:aa:
                    be:54:bf:a7:a5:60:08:a5:7d:ac:48:3f:7d:db:8c:
                    15:d1:b5:d4:60:03:55:71:7d:0d:68:0b:64:4b:69:
                    26:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:2E:1B:26:71:2E:97:F0:38:F5:4A:F9:B1:D4:86:DD:01:79:AD:F8
            X509v3 Authority Key Identifier:
                keyid:34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/NJuc6QrgPa0ZvFTf9jroxB4iOUg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/by4bJnEul_A49Ur5sdSG3QF5rfg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:69:10:1b:09:d4:d6:63:7a:ba:ce:ac:0d:c3:a2:23:ff:6d:
         da:87:83:32:1e:43:9e:9f:73:1a:ba:4e:d0:53:19:d5:de:2e:
         20:78:fd:92:23:63:72:d3:da:5f:3f:dd:eb:46:4c:17:f7:b6:
         7c:80:3c:1a:c5:e9:10:6e:7d:f4:c6:92:b4:b3:7d:0f:02:94:
         ca:11:22:27:a7:ea:d6:b5:23:3e:09:b1:0c:3f:f3:5f:34:91:
         d5:e4:f6:81:7e:29:a8:ac:2c:a3:a8:05:c1:f3:13:1d:b5:9b:
         dd:e4:fe:87:90:10:03:b8:19:e5:a4:6b:a4:1b:8f:9f:45:ff:
         7c:32:59:b4:e2:a3:f3:e4:be:dd:1f:62:c2:f5:f5:24:04:d5:
         b9:e3:f0:38:1b:0d:c4:f4:b4:d9:8a:35:0d:f9:bb:ab:38:e6:
         85:79:26:90:6d:90:bd:26:82:bd:9b:61:f9:a3:13:81:db:ee:
         3a:06:9e:99:cc:22:1a:94:5d:54:cd:21:8b:c9:56:e3:cd:2c:
         54:66:0e:55:58:97:a2:3e:ec:35:af:4a:76:a2:f3:88:f0:48:
         91:02:1b:d4:30:56:00:8d:e1:42:0e:7c:2d:a1:c5:3d:00:01:
         e5:0c:3f:f5:0e:6e:dc:c7:47:0a:ba:5c:1d:08:dc:27:cf:dc:
         0d:dc:e1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----