Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SERVCOMP/5gdnJ_0gpdq0q-HM1TZA7YDUrwk.roa
File:                     5gdnJ_0gpdq0q-HM1TZA7YDUrwk.roa (raw, json)
Hash identifier:          j0XyiiOp7hCmbc6wTAUnfs4Nvn4AkLuHbGjRsF70k2U=
Subject key identifier:   E6:07:67:27:FD:20:A5:DA:B4:AB:E1:CC:D5:36:40:ED:80:D4:AF:09
Certificate issuer:       /CN=0CE68958C4074750F9B01967C18F50F9CB112212
Certificate serial:       072F
Authority key identifier: 0C:E6:89:58:C4:07:47:50:F9:B0:19:67:C1:8F:50:F9:CB:11:22:12
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/DOaJWMQHR1D5sBlnwY9Q-csRIhI.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SERVCOMP/5gdnJ_0gpdq0q-HM1TZA7YDUrwk.roa
Signing time:             Tue 29 Sep 2020 09:58:58 +0000
ROA not before:           Tue 29 Sep 2020 09:58:58 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131620
IP address blocks:        103.116.68.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1839 (0x72f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CE68958C4074750F9B01967C18F50F9CB112212
        Validity
            Not Before: Sep 29 09:58:58 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=E6076727FD20A5DAB4ABE1CCD53640ED80D4AF09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0b:53:51:91:8c:b9:fb:a0:7d:20:4c:c9:af:
                    e6:19:94:ed:4f:3b:a5:18:7f:72:bf:90:3c:ed:a7:
                    7c:a1:19:3f:10:27:99:96:b6:82:c0:eb:c8:45:05:
                    fe:9b:3e:16:95:bc:54:31:b3:d7:c9:83:ef:56:fa:
                    aa:49:0b:4d:ab:eb:41:a7:e2:eb:06:18:e3:5b:59:
                    96:9a:fa:56:51:40:01:08:ee:c6:8e:72:62:7c:b0:
                    02:c9:fd:db:4c:9e:3a:8d:80:de:3c:25:6d:fb:14:
                    e5:ae:26:78:98:e6:b3:31:c5:4a:c2:11:6f:55:2a:
                    f3:e6:9f:97:bb:bc:af:73:ee:99:6a:99:8a:56:64:
                    03:43:de:c4:45:48:1c:50:43:7b:55:7a:1e:38:5a:
                    aa:21:99:6a:8f:19:4c:d9:73:3d:33:65:cb:85:a2:
                    dc:b5:21:6d:88:9c:5a:b7:21:7a:9a:46:cd:0b:a4:
                    55:7b:0b:24:a5:e0:42:fd:c6:b3:7c:fe:76:0d:42:
                    73:1b:44:34:5e:21:07:fe:11:7a:0f:57:f2:5c:ba:
                    47:84:18:16:f4:21:c5:93:f1:bd:50:87:32:18:56:
                    c8:43:54:07:37:31:34:8b:7f:4c:c6:69:4d:fd:72:
                    e6:6a:8d:af:d2:44:aa:8c:bb:a5:87:2d:35:cd:01:
                    3f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:07:67:27:FD:20:A5:DA:B4:AB:E1:CC:D5:36:40:ED:80:D4:AF:09
            X509v3 Authority Key Identifier:
                keyid:0C:E6:89:58:C4:07:47:50:F9:B0:19:67:C1:8F:50:F9:CB:11:22:12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SERVCOMP/DOaJWMQHR1D5sBlnwY9Q-csRIhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DOaJWMQHR1D5sBlnwY9Q-csRIhI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SERVCOMP/5gdnJ_0gpdq0q-HM1TZA7YDUrwk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:fa:24:5f:a5:7f:a7:b7:9c:48:c6:9c:7e:76:84:95:0e:e9:
         c5:9f:14:df:90:13:bd:1e:89:6e:68:55:0f:99:76:4d:04:31:
         57:60:9a:73:e4:37:d8:2f:7a:6d:08:2c:98:53:73:ec:fb:9c:
         3d:18:5a:80:7e:7c:a6:08:c3:49:9a:c6:c8:80:a5:68:ea:2e:
         a0:99:e7:31:c4:4a:cf:15:96:99:ad:74:98:10:35:50:93:ac:
         4a:e2:c8:6f:9b:d6:c5:b7:79:0d:7c:d3:61:e2:9f:08:0e:f0:
         10:b1:65:15:87:29:aa:5a:70:79:99:dd:23:bf:96:1c:3c:b2:
         06:28:59:f8:ce:d6:79:ca:f6:61:d7:f1:91:69:97:38:b1:29:
         f8:f1:dd:12:0d:1b:5e:08:e4:6b:e9:34:2b:11:37:9f:8e:9f:
         10:54:35:32:2c:ad:36:49:8c:97:8c:20:c4:37:36:70:23:e9:
         f6:52:43:93:86:6e:9e:a6:8f:e5:a4:69:16:a2:8b:13:41:6f:
         d9:70:6d:54:4c:1b:4f:07:cf:d8:09:11:e0:ec:29:fc:d1:41:
         0f:ca:6b:16:19:62:30:19:c1:53:05:91:20:98:fb:0c:76:7f:
         df:73:e4:65:eb:0d:7f:78:a5:12:b8:07:9b:c6:fd:0e:2c:99:
         c5:cf:a7:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----