Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SONET/lPe22wSN83ihtxpLkYt8lqoZcZ4.roa
File:                     lPe22wSN83ihtxpLkYt8lqoZcZ4.roa (raw, json)
Hash identifier:          8KosBn2Jc/U+6jPYF5BZneMjEziN57agNcFcGXxSMiA=
Subject key identifier:   94:F7:B6:DB:04:8D:F3:78:A1:B7:1A:4B:91:8B:7C:96:AA:19:71:9E
Certificate issuer:       /CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B
Certificate serial:       097B
Authority key identifier: CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/lPe22wSN83ihtxpLkYt8lqoZcZ4.roa
Signing time:             Wed 29 Sep 2021 02:51:53 +0000
ROA not before:           Wed 29 Sep 2021 02:51:53 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     18182
IP address blocks:        27.105.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2427 (0x97b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B
        Validity
            Not Before: Sep 29 02:51:53 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=94F7B6DB048DF378A1B71A4B918B7C96AA19719E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:22:29:fe:14:00:d7:58:f8:f0:c2:b7:76:58:
                    f5:9b:57:51:ed:a0:53:2d:2a:c4:5f:43:3a:ba:a6:
                    6b:0b:2a:01:47:32:e1:29:e2:f8:b3:82:3b:3d:ba:
                    8f:1c:70:cf:f6:32:38:d1:56:ce:e8:be:2c:7f:04:
                    43:d7:a9:7f:06:0e:fb:a9:0c:9c:09:93:7c:3c:fb:
                    0f:e8:17:95:8f:d5:62:fb:cf:9c:e9:96:64:1d:94:
                    a5:06:6b:70:88:ed:1a:53:be:56:4e:3c:8b:dc:e0:
                    05:de:41:69:1a:60:6c:56:dd:1d:77:dd:54:65:2c:
                    9c:56:bc:4e:cb:1a:7b:a4:70:11:ee:0c:52:ed:60:
                    5b:83:87:ed:19:70:2d:fa:fb:19:54:02:65:f2:04:
                    9c:6d:d4:84:13:37:74:d9:2e:f7:bf:0d:95:09:2f:
                    f2:61:75:26:4b:66:5a:8a:8a:8d:81:0e:60:87:f7:
                    20:48:53:48:e6:a6:40:42:08:57:b5:6b:4a:d2:60:
                    3a:51:ac:7f:dd:c5:26:b3:72:1c:64:35:e4:68:91:
                    03:00:de:89:ce:05:ad:cf:e3:9b:57:e6:cf:46:98:
                    82:58:1d:2d:c3:83:97:50:53:df:ef:e4:74:67:f0:
                    ef:55:e4:07:b1:01:8e:6e:4c:21:00:dc:a6:c0:fd:
                    00:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:F7:B6:DB:04:8D:F3:78:A1:B7:1A:4B:91:8B:7C:96:AA:19:71:9E
            X509v3 Authority Key Identifier:
                keyid:CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/lPe22wSN83ihtxpLkYt8lqoZcZ4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.105.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0c:ae:41:56:42:34:91:24:f9:3d:c1:c6:50:e5:05:6d:b9:d3:
         37:dc:47:92:a2:56:57:c8:ea:75:af:4b:26:4a:ab:64:77:4b:
         dd:98:aa:e0:4c:ae:c6:4b:90:08:d6:1d:67:35:bf:14:fe:a0:
         15:02:f5:3c:87:75:2a:05:55:79:8b:e8:b3:d1:e7:ce:ca:4a:
         d6:7c:5e:f0:c7:86:e6:12:23:4f:7c:56:c7:c7:11:4d:48:8a:
         00:c7:9b:1c:ce:d1:04:42:fd:fb:80:ec:7c:45:49:08:a0:f9:
         12:3d:ce:80:b3:75:f9:67:8a:b8:61:37:b3:50:22:24:7c:b8:
         96:a2:0e:cc:1e:5e:9e:43:8f:d3:9a:a8:61:5d:b8:54:12:39:
         bc:35:fc:4d:e8:87:41:29:1f:4f:86:0a:77:3f:e9:af:2d:7e:
         84:14:10:77:2f:43:d8:c6:97:66:8d:17:04:af:63:e1:11:69:
         5a:2f:a7:cd:51:0d:61:c5:a6:2b:d3:e0:10:cd:a1:43:e8:0e:
         13:15:bf:bd:0c:3d:b8:55:72:73:58:b7:5d:e5:16:56:73:47:
         40:fa:bd:cb:ea:d4:56:43:2d:db:bc:f5:a9:0f:0e:cd:38:06:
         73:f0:60:cd:ba:e8:09:33:95:5a:98:45:83:4f:48:37:02:6b:
         0c:e2:db:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----