Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SIANGYUN/8hZMAjEbkc62pjtJPUArsB3gmOM.roa
File:                     8hZMAjEbkc62pjtJPUArsB3gmOM.roa (raw, json)
Hash identifier:          Y+Iey6k/mZjIMfgodb4rsO6T56UOchgaMcCLgT/VyAw=
Subject key identifier:   F2:16:4C:02:31:1B:91:CE:B6:A6:3B:49:3D:40:2B:B0:1D:E0:98:E3
Certificate issuer:       /CN=ADC7E450F1C2BB9FED0413B26CC08732E2C1C0F9
Certificate serial:       13
Authority key identifier: AD:C7:E4:50:F1:C2:BB:9F:ED:04:13:B2:6C:C0:87:32:E2:C1:C0:F9
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/rcfkUPHCu5_tBBOybMCHMuLBwPk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SIANGYUN/8hZMAjEbkc62pjtJPUArsB3gmOM.roa
Signing time:             Fri 24 Dec 2021 06:22:43 +0000
ROA not before:           Fri 24 Dec 2021 06:22:43 +0000
ROA not after:            Tue 29 Nov 2022 01:42:55 +0000
asID:                     396982
IP address blocks:        103.177.50.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADC7E450F1C2BB9FED0413B26CC08732E2C1C0F9
        Validity
            Not Before: Dec 24 06:22:43 2021 GMT
            Not After : Nov 29 01:42:55 2022 GMT
        Subject: CN=F2164C02311B91CEB6A63B493D402BB01DE098E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d0:04:51:6f:e7:0f:33:53:a9:78:7f:f2:32:
                    3e:4b:1b:64:b0:8a:db:8c:1d:14:78:84:35:a3:1a:
                    22:11:65:bd:e5:e7:92:86:65:9a:86:7d:2a:23:e9:
                    fb:83:b4:da:00:0e:83:27:23:59:9b:11:d0:92:32:
                    ff:96:11:e7:ca:ae:a6:75:44:f7:89:2e:d9:ae:c3:
                    84:38:cb:29:3a:1c:5b:ac:01:fb:4e:10:af:2b:0f:
                    eb:45:74:c5:b2:e3:db:a1:c1:b5:7a:b6:98:bd:94:
                    25:6b:b4:d8:7b:ae:eb:bd:20:75:ff:a0:7b:64:8c:
                    fa:9d:7e:36:a2:3c:5b:28:0b:40:03:13:6b:54:fc:
                    d6:0c:d3:2b:0b:95:ae:08:3d:2d:e7:99:f3:ce:d8:
                    93:74:35:52:98:a7:57:bf:09:d6:89:5b:ad:b8:04:
                    a4:f1:13:08:a5:a4:4b:53:bc:21:18:ce:29:f6:81:
                    0c:4f:5e:41:77:0b:23:bd:60:b6:12:c0:b5:f2:ce:
                    a9:fc:1c:13:0a:51:2a:34:c0:64:04:41:a3:a6:71:
                    36:78:f8:5e:3d:f4:48:e8:ac:e3:ce:17:8b:5d:c4:
                    af:18:2f:74:84:1e:27:a7:fd:fe:57:b8:cf:de:6a:
                    8d:eb:ae:2d:21:1e:f2:4a:5b:a1:c4:37:05:73:dd:
                    7a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:16:4C:02:31:1B:91:CE:B6:A6:3B:49:3D:40:2B:B0:1D:E0:98:E3
            X509v3 Authority Key Identifier:
                keyid:AD:C7:E4:50:F1:C2:BB:9F:ED:04:13:B2:6C:C0:87:32:E2:C1:C0:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIANGYUN/rcfkUPHCu5_tBBOybMCHMuLBwPk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/rcfkUPHCu5_tBBOybMCHMuLBwPk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIANGYUN/8hZMAjEbkc62pjtJPUArsB3gmOM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4a:db:11:a6:05:04:18:d0:b9:17:c5:1f:55:9d:86:c1:67:55:
         03:73:17:bf:03:29:52:1d:76:5a:e3:4f:61:5a:f0:79:72:30:
         e0:9b:69:43:5f:c2:eb:f1:0e:b4:4f:e5:79:ed:80:77:56:2c:
         3b:81:22:c4:af:9a:dc:d8:c6:37:5e:b2:d3:2a:da:cd:30:40:
         5d:09:52:eb:ab:73:73:ac:a1:5d:50:10:db:af:cc:79:9c:4e:
         47:2a:2b:5e:71:d2:c9:66:42:55:51:bf:bf:46:14:4b:73:e1:
         c8:30:a0:cb:08:50:9b:69:6f:cd:b5:ba:10:6f:12:d2:82:52:
         1c:d9:93:74:03:f0:a8:b9:4b:c2:3e:2b:98:df:00:68:ad:f2:
         2d:da:08:c3:79:bc:2e:4b:8e:47:f0:69:85:2b:53:75:73:3f:
         e9:c9:ba:3d:5d:8c:ce:06:fa:10:0c:6a:42:ad:01:9e:c0:7a:
         3b:a0:23:4d:0e:41:81:e6:97:b4:96:e1:16:00:3c:7a:aa:42:
         62:f5:a7:d6:08:35:68:1b:19:90:25:32:19:07:ae:dd:6c:28:
         c7:69:0c:94:fe:1b:81:fe:be:18:c2:ec:f9:4a:f4:5e:67:3d:
         59:e3:41:16:b9:f8:b2:b9:24:d3:cf:65:d8:a9:c0:77:4c:7e:
         26:a3:1e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----