Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/eXyGDMceet7j8JP6U-8A61CSC4Y.roa
File:                     eXyGDMceet7j8JP6U-8A61CSC4Y.roa (raw, json)
Hash identifier:          6gPvuKO0aEYTLf6kkmgfK2isV4Uo4PwOJNHyr3OtnEo=
Subject key identifier:   79:7C:86:0C:C7:1E:7A:DE:E3:F0:93:FA:53:EF:00:EB:50:92:0B:86
Certificate issuer:       /CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
Certificate serial:       099F
Authority key identifier: 00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/eXyGDMceet7j8JP6U-8A61CSC4Y.roa
Signing time:             Wed 29 Sep 2021 02:44:41 +0000
ROA not before:           Wed 29 Sep 2021 02:44:41 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38047
IP address blocks:        103.106.55.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2463 (0x99f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
        Validity
            Not Before: Sep 29 02:44:41 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=797C860CC71E7ADEE3F093FA53EF00EB50920B86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c2:75:af:ae:19:35:90:a6:c6:11:37:a1:2f:
                    5b:64:a2:06:03:c6:d0:87:c3:e2:bb:ce:8e:41:46:
                    10:0a:eb:9c:15:69:6f:d3:a5:2a:aa:92:58:ef:41:
                    8c:9b:1b:38:8b:ba:ca:af:9c:1d:02:0f:f4:27:ae:
                    31:df:d8:a2:f1:5b:27:2d:98:16:f1:29:58:0d:57:
                    be:5e:db:05:ff:72:98:5f:b0:1d:a9:f5:46:5e:4f:
                    0a:0d:72:75:ce:76:34:76:30:b5:91:89:df:f5:be:
                    60:59:52:fc:84:e2:0a:5d:8e:a5:67:ab:60:ac:d3:
                    94:ed:8b:86:ac:aa:fc:c7:68:19:17:b2:0d:52:08:
                    cd:99:00:81:d7:db:e6:fb:18:75:ad:a9:c2:a1:6b:
                    6a:37:38:54:69:ea:96:5a:0e:4c:7d:2d:85:79:99:
                    12:27:47:b4:16:65:42:78:f6:ca:ba:70:4c:d0:a3:
                    f2:cd:8f:e3:23:44:3b:ae:15:a1:38:db:c7:bb:98:
                    7f:90:de:a3:4b:b0:02:7b:41:b6:0f:08:97:cf:44:
                    47:6e:85:a7:d5:b5:e3:c6:22:10:4a:ca:14:7f:6f:
                    50:29:5a:98:79:63:c7:c8:1f:cc:63:01:41:4f:8c:
                    87:94:f1:ed:86:48:27:c8:ea:8b:3e:52:5b:44:d6:
                    bd:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:7C:86:0C:C7:1E:7A:DE:E3:F0:93:FA:53:EF:00:EB:50:92:0B:86
            X509v3 Authority Key Identifier:
                keyid:00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/eXyGDMceet7j8JP6U-8A61CSC4Y.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.106.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:15:c3:f2:52:4b:6f:62:39:64:9d:1a:cb:a9:da:1e:5e:42:
         b1:ba:5e:82:5b:aa:b4:57:7e:52:c7:af:24:93:eb:89:ec:be:
         8f:a9:d4:c3:7b:9f:51:fe:dd:73:b0:de:8a:91:3c:e1:d9:65:
         ac:99:e9:8e:ca:01:75:d9:4f:dd:ed:52:88:66:34:ef:bb:77:
         7a:48:23:c6:ba:bd:1b:c7:44:b3:49:91:f7:11:06:01:d9:3c:
         f9:dd:ec:9a:7d:10:f2:ff:78:4f:9e:bb:2c:0e:58:97:c8:df:
         ed:4d:41:37:7d:18:08:ec:57:bb:06:04:d8:97:0e:9a:b6:ad:
         eb:81:62:b4:1b:bb:90:29:f5:81:e8:28:a3:63:c1:7c:98:0c:
         d3:ee:18:a3:cc:9a:65:c2:f8:34:80:b8:2e:69:3a:01:87:46:
         82:8c:2e:99:6a:79:1a:61:e6:6f:2a:2c:16:f9:44:bf:3f:2e:
         7d:f1:2c:25:35:fe:ff:36:ef:49:e7:79:3f:6a:6b:b1:47:a6:
         45:cd:29:24:f0:25:bc:5f:e0:23:64:f4:5a:52:cd:ed:7d:e7:
         00:c2:d4:a0:f5:24:95:25:8d:d4:f0:aa:6b:30:ed:0e:44:9b:
         21:18:3f:e1:3f:36:17:ff:26:0e:da:53:1a:d5:b7:41:6b:ea:
         3f:a3:e4:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----