Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SCNET/i2nMvZmBYb8_42zYywBXkWueJaM.roa
File:                     i2nMvZmBYb8_42zYywBXkWueJaM.roa (raw, json)
Hash identifier:          OJjwVdWHUvQp6aC4b1znjfKzh9IoyBat90BckfLmFn4=
Subject key identifier:   8B:69:CC:BD:99:81:61:BF:3F:E3:6C:D8:CB:00:57:91:6B:9E:25:A3
Certificate issuer:       /CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948
Certificate serial:       0E30
Authority key identifier: 34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/i2nMvZmBYb8_42zYywBXkWueJaM.roa
Signing time:             Tue 29 Sep 2020 09:58:13 +0000
ROA not before:           Tue 29 Sep 2020 09:58:13 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131631
IP address blocks:        103.123.219.0/24 maxlen: 25

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3632 (0xe30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=349B9CE90AE03DAD19BC54DFF63AE8C41E223948
        Validity
            Not Before: Sep 29 09:58:13 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=8B69CCBD998161BF3FE36CD8CB0057916B9E25A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:13:0b:e7:91:41:52:1f:fe:91:28:22:45:f3:
                    94:01:12:a1:a7:a4:b2:87:e1:93:da:ff:a5:0d:75:
                    cd:46:30:be:15:f4:47:7d:d9:9f:9b:e4:4e:a3:f0:
                    33:e3:e4:02:42:99:68:52:4c:fc:fa:9c:6e:64:86:
                    6f:99:4d:c8:3e:bc:4b:3f:73:ae:8a:61:75:ea:35:
                    86:28:b8:b2:98:cd:f8:69:0e:55:ff:03:61:4b:d0:
                    15:d1:e0:b2:67:3e:80:b0:89:8a:e1:ee:b5:96:26:
                    1d:6f:34:88:f9:9b:4d:9d:68:a6:cd:2f:a6:ac:2c:
                    22:79:eb:53:c5:96:1e:34:d6:53:b3:ae:69:79:97:
                    65:0b:57:22:d9:7f:80:c3:ef:74:28:d2:a2:17:67:
                    e0:44:6a:77:9e:10:25:a0:43:13:c3:06:02:e5:3f:
                    9c:eb:08:de:d6:4d:ef:bf:3a:c0:45:4b:02:26:e6:
                    2a:f4:0b:35:40:04:93:a8:4b:77:cf:cf:60:77:ac:
                    ad:5a:c5:b1:4c:a0:fe:cc:48:6a:e5:fd:8d:cd:63:
                    aa:4b:66:9a:42:81:08:43:4d:2a:1a:ba:83:5b:68:
                    a0:81:d1:97:12:53:4a:94:4d:28:45:06:a9:73:e1:
                    ef:1c:5b:20:b3:fe:9f:be:41:28:86:96:72:03:5a:
                    82:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:69:CC:BD:99:81:61:BF:3F:E3:6C:D8:CB:00:57:91:6B:9E:25:A3
            X509v3 Authority Key Identifier:
                keyid:34:9B:9C:E9:0A:E0:3D:AD:19:BC:54:DF:F6:3A:E8:C4:1E:22:39:48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/NJuc6QrgPa0ZvFTf9jroxB4iOUg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NJuc6QrgPa0ZvFTf9jroxB4iOUg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SCNET/i2nMvZmBYb8_42zYywBXkWueJaM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:4a:ba:ab:34:11:1f:96:88:c0:6d:67:2a:f8:ca:99:7c:76:
         bc:7d:58:72:c4:9b:44:61:86:f2:e8:51:5e:ed:44:09:91:f4:
         16:b8:c3:52:59:ae:93:64:97:40:02:d8:46:e2:e7:2b:ed:cf:
         50:30:6d:93:c0:38:d2:f9:ac:0b:9f:7b:5e:e3:85:a3:2b:5b:
         64:08:6a:81:c8:53:bd:2f:77:03:50:ec:2e:41:44:40:85:12:
         6f:81:a1:49:8e:a5:89:86:49:20:a6:b9:25:be:64:cf:fd:e7:
         f8:44:87:70:1e:b2:c6:ec:f9:a7:44:cb:26:ce:3d:36:6c:0d:
         65:1c:b8:fa:d1:69:b0:8a:c2:c3:57:a3:5d:c2:19:88:fa:ca:
         3e:32:f8:04:5d:55:3f:45:11:ec:46:93:39:f1:bc:3b:e1:d3:
         52:bc:4d:ef:f4:64:7e:a2:4e:c9:be:04:87:23:fe:89:7c:59:
         9c:9c:70:f4:c9:4b:05:0b:69:08:ce:df:76:c0:7f:03:d2:b0:
         aa:c0:fc:c2:0c:a8:36:97:18:51:1b:fe:89:37:58:cf:39:ce:
         9b:40:11:91:e4:67:93:f4:28:55:01:20:41:95:e7:54:7e:4e:
         e3:32:3a:3f:94:3b:41:70:40:55:9e:0b:56:e3:c9:e2:ab:81:
         a5:c6:e2:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----