Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/LSEAbiKxOTHCzS1TneZhifd9iAc.roa
File:                     LSEAbiKxOTHCzS1TneZhifd9iAc.roa (raw, json)
Hash identifier:          kvsbx03LFznm4qneFgvsFZGUjjZs+5lwOy7T4Wzg4Fk=
Subject key identifier:   2D:21:00:6E:22:B1:39:31:C2:CD:2D:53:9D:E6:61:89:F7:7D:88:07
Certificate issuer:       /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Certificate serial:       0792
Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/LSEAbiKxOTHCzS1TneZhifd9iAc.roa
Signing time:             Tue 29 Sep 2020 10:06:27 +0000
ROA not before:           Tue 29 Sep 2020 10:06:27 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24158
IP address blocks:        180.204.0.0/14 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1938 (0x792)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
        Validity
            Not Before: Sep 29 10:06:27 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=2D21006E22B13931C2CD2D539DE66189F77D8807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:53:81:03:80:fc:e2:2c:65:15:31:6a:45:de:
                    68:7f:b3:ad:13:54:d2:73:64:5b:ca:61:af:c6:c1:
                    25:37:7c:0d:34:3d:cb:4d:7e:ce:4a:8c:0d:b4:03:
                    56:c2:b1:28:dd:fe:db:22:51:7f:e9:31:5a:a0:ce:
                    93:c8:90:e0:c9:6f:eb:55:ab:e9:1b:a3:07:b8:79:
                    bd:1e:d5:73:d5:e3:88:0e:0c:df:47:3b:ec:a8:36:
                    7e:81:59:57:f2:96:3c:00:42:f4:79:96:ee:94:06:
                    a8:66:52:93:97:5f:80:78:92:00:7e:12:56:3f:9d:
                    d9:bb:a4:3e:38:12:d0:88:d3:46:e4:19:9f:bc:97:
                    ff:84:8a:f7:c2:43:27:7f:c8:b4:73:d9:fb:68:9e:
                    92:4d:6a:e1:b7:51:2d:9d:e5:3f:c2:3c:92:0e:04:
                    e3:cb:16:6b:09:99:63:ed:fe:fa:cf:57:a7:76:78:
                    f9:2b:0c:6e:c2:83:60:19:a4:9c:aa:b2:64:61:9f:
                    f0:58:f3:fa:a6:b2:20:90:9d:23:61:45:82:91:a8:
                    dc:08:bc:97:e4:37:b6:3d:fd:2d:20:fe:64:ca:01:
                    c5:b4:a8:53:3d:26:a2:a8:f6:50:fc:68:8c:4d:74:
                    e3:a0:ed:2c:e1:46:67:85:84:37:0a:80:8d:f5:4b:
                    49:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:21:00:6E:22:B1:39:31:C2:CD:2D:53:9D:E6:61:89:F7:7D:88:07
            X509v3 Authority Key Identifier:
                keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/LSEAbiKxOTHCzS1TneZhifd9iAc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.204.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         5f:0f:bb:3b:bd:49:5f:e0:46:eb:66:f1:4f:9e:1b:38:d6:ed:
         df:d9:24:3b:a5:a9:58:6b:8e:e0:e3:c8:9f:84:40:ff:35:27:
         f7:ab:d0:94:43:de:74:17:ae:ed:26:29:c6:3c:9e:c4:fb:ca:
         54:9e:35:7f:27:39:90:ef:6d:a4:5d:9c:a6:78:94:8c:dc:ea:
         ba:03:a6:ad:7c:37:5b:b3:c8:fb:69:e3:79:cd:26:6b:2d:37:
         0e:e0:50:67:43:42:6a:15:05:f3:2b:7b:1f:90:cd:af:46:e4:
         9d:b2:90:fa:8a:93:21:50:10:22:5e:22:19:7d:79:b7:3c:2c:
         88:5f:ac:dd:2e:22:08:f6:bf:3b:50:85:c7:61:56:ac:c1:be:
         cb:4a:e7:bb:a6:7a:84:11:e7:55:bb:64:7d:3a:e4:09:60:b6:
         ee:f0:2f:58:d5:cd:cb:c1:26:0e:e5:f0:3d:e7:03:d3:fa:00:
         3a:c6:5a:11:87:f7:a0:74:cb:d8:ba:02:33:5f:fa:a1:a0:ef:
         16:a8:f5:69:e4:3f:03:01:ac:05:37:03:6c:2d:0d:0b:ab:42:
         1e:b6:d3:88:85:5c:6f:bd:76:8f:13:de:92:95:e4:d2:e7:af:
         f0:9c:01:b2:6e:0c:1e:aa:0b:4d:78:02:1b:65:05:e0:1e:e3:
         43:3d:2b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----