Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SONET/rLVrWQPo9GphoPF3XZb-oTueZHY.roa
File:                     rLVrWQPo9GphoPF3XZb-oTueZHY.roa (raw, json)
Hash identifier:          Yc/z7BchOolVg4vObyGakkfqghlYRRyz/TjxbjQsUaQ=
Subject key identifier:   AC:B5:6B:59:03:E8:F4:6A:61:A0:F1:77:5D:96:FE:A1:3B:9E:64:76
Certificate issuer:       /CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B
Certificate serial:       0982
Authority key identifier: CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/rLVrWQPo9GphoPF3XZb-oTueZHY.roa
Signing time:             Thu 30 Sep 2021 13:39:39 +0000
ROA not before:           Thu 30 Sep 2021 13:39:39 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     18182
IP address blocks:        219.84.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2434 (0x982)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B
        Validity
            Not Before: Sep 30 13:39:39 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=ACB56B5903E8F46A61A0F1775D96FEA13B9E6476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ed:cb:3e:4f:8a:63:a9:61:82:6c:02:00:b3:
                    76:9f:b7:f6:41:6e:b2:84:77:ae:d8:83:9d:df:62:
                    b3:32:8a:9c:82:e1:24:26:9e:9f:32:61:dd:e1:1e:
                    f9:25:2f:4d:20:33:4b:c0:c7:c8:9e:88:58:c7:ba:
                    f6:53:1d:7e:66:f2:a8:81:86:47:42:70:19:a0:6b:
                    30:e2:5f:2f:c2:b6:64:1e:60:3a:83:53:90:a9:3b:
                    7e:6a:ba:66:b3:e7:61:ef:13:27:15:22:ed:ea:84:
                    64:d6:f2:31:b7:0d:a8:ab:25:9f:26:b0:57:1b:09:
                    08:27:3d:93:57:22:ea:5f:de:ac:d5:a0:1e:8d:00:
                    91:f2:b0:48:93:32:79:3a:8f:cd:a8:17:bc:e5:36:
                    25:31:f1:13:4d:56:2c:fa:46:91:48:70:2a:88:56:
                    08:2d:4d:13:48:6d:b0:8e:fb:95:68:e0:59:bd:f9:
                    6d:5c:98:06:9b:43:6b:3a:22:b6:97:b3:34:bc:00:
                    0e:c7:f6:a4:15:ab:87:80:5e:e4:15:8d:ce:00:99:
                    0d:0a:ec:2b:9b:57:c6:0e:1c:cf:fb:aa:d2:80:e9:
                    1d:91:6c:54:38:93:81:de:ef:ef:52:fd:74:d7:7b:
                    a8:be:ec:40:75:b9:62:1f:09:22:cb:b9:dd:53:28:
                    52:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:B5:6B:59:03:E8:F4:6A:61:A0:F1:77:5D:96:FE:A1:3B:9E:64:76
            X509v3 Authority Key Identifier:
                keyid:CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/rLVrWQPo9GphoPF3XZb-oTueZHY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.84.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         be:ee:e6:11:12:3e:6a:9b:52:82:d2:4c:39:1e:bb:d1:0e:6d:
         07:3e:7a:35:5e:26:56:4d:82:24:ca:1c:fe:be:db:6c:d2:57:
         15:02:9d:d0:3e:b8:68:e1:1b:be:52:8b:52:fe:91:38:e9:e0:
         66:4c:9b:6b:19:54:ad:14:12:a7:a1:69:17:db:14:34:58:75:
         fd:01:ab:4e:3c:f1:58:19:06:4c:a3:21:6b:be:e7:5e:f8:42:
         f5:31:e7:b2:d7:7e:e8:de:45:06:8e:26:3c:c4:81:f1:c2:b5:
         e8:2c:57:7e:d4:d6:00:39:97:d3:e4:03:ef:66:25:66:72:a7:
         7e:ef:8f:4f:1c:23:40:b4:5e:21:59:81:1a:71:64:e7:c3:fc:
         e3:db:2b:69:ee:6e:3a:c9:e6:71:3a:3c:60:b4:d0:4a:e8:b3:
         a4:34:5c:97:ed:4d:f2:75:8b:25:69:a1:95:9c:78:a5:0c:20:
         1a:31:06:2c:ec:c7:08:cd:25:ae:75:a1:1e:d5:e3:19:f7:9a:
         7c:e3:bd:a0:71:06:02:11:de:f6:93:04:cb:d4:f1:d3:14:d1:
         3e:46:00:59:f2:8d:5c:87:a7:d3:83:a7:f6:5f:ac:67:06:e7:
         a3:6b:7f:41:cf:e4:82:bd:a7:85:47:a0:f1:b2:44:dd:16:7f:
         f5:da:81:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----