Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/ZdqDR-Lk37Ytfrd5Hn1JROnTJuI.roa
File:                     ZdqDR-Lk37Ytfrd5Hn1JROnTJuI.roa (raw, json)
Hash identifier:          s12fUeuhULw6tQ0zmt8FQWgs4cB3AZ2OlEeRxu1wEGs=
Subject key identifier:   65:DA:83:47:E2:E4:DF:B6:2D:7E:B7:79:1E:7D:49:44:E9:D3:26:E2
Certificate issuer:       /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Certificate serial:       09A1
Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/ZdqDR-Lk37Ytfrd5Hn1JROnTJuI.roa
Signing time:             Wed 29 Sep 2021 02:56:00 +0000
ROA not before:           Wed 29 Sep 2021 02:56:00 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24158
IP address blocks:        2402:7500:f9ff::/48 maxlen: 64

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2465 (0x9a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
        Validity
            Not Before: Sep 29 02:56:00 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=65DA8347E2E4DFB62D7EB7791E7D4944E9D326E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f9:9d:d7:04:e1:1a:65:1b:9f:a2:cc:2f:f3:
                    de:00:20:9e:b5:fe:1b:84:7b:95:eb:34:0f:95:cc:
                    01:85:87:30:ea:70:3c:69:f5:26:ba:c7:88:e2:88:
                    f9:7f:17:ca:01:c4:d4:97:62:36:5e:ef:9c:3c:3c:
                    e3:cd:27:f0:66:ce:64:d5:71:65:8d:d6:93:9d:cf:
                    15:82:e3:92:d9:dd:90:0e:b1:10:ed:16:2b:42:6d:
                    0a:d4:25:e3:81:7a:30:b1:9e:6b:b5:b4:b2:13:1c:
                    6d:82:28:a8:97:1f:b6:44:c9:ab:2b:c3:ac:c1:42:
                    62:4c:92:96:ab:64:b8:91:a7:a0:e8:b7:9d:a1:cc:
                    72:30:c2:33:e3:a2:36:c9:27:59:10:38:9b:7a:e8:
                    79:7f:12:a7:b3:1f:fe:13:fb:52:86:24:c7:b7:d3:
                    03:a0:67:ce:f6:c3:78:3b:f4:94:e6:d5:98:7f:74:
                    22:af:8f:d7:01:9c:6a:85:db:58:d8:7a:5f:f1:83:
                    2f:ee:f5:10:50:f9:ec:ea:bc:9c:72:e9:e9:b9:a0:
                    79:6e:73:0d:fc:11:e4:c9:f6:30:af:e0:8c:2c:8d:
                    ef:1a:14:e0:78:15:3b:0b:f9:0c:d8:77:18:95:9a:
                    7b:c7:10:e2:5b:5f:83:43:69:9a:64:da:eb:84:53:
                    5c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:DA:83:47:E2:E4:DF:B6:2D:7E:B7:79:1E:7D:49:44:E9:D3:26:E2
            X509v3 Authority Key Identifier:
                keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/ZdqDR-Lk37Ytfrd5Hn1JROnTJuI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:7500:f9ff::/48

    Signature Algorithm: sha256WithRSAEncryption
         39:7c:a0:9c:f0:ce:6a:16:8b:6d:b3:80:cd:b1:b8:90:f2:13:
         b8:69:87:91:d9:fb:ac:7d:64:9c:09:15:18:b6:5f:64:da:4b:
         74:cc:66:51:07:3d:ab:3b:bb:de:2a:9a:ff:ff:b5:fd:35:83:
         1d:e2:8f:da:a0:94:0c:a4:f1:2b:20:9b:7b:80:62:32:8c:67:
         07:9d:fb:51:c2:a5:9b:62:c5:37:98:21:00:44:1c:e4:da:ae:
         33:04:37:4c:38:ad:18:f5:07:9d:2f:4c:ed:f8:87:93:43:95:
         36:02:45:78:0a:1b:0a:2d:07:da:ff:03:8f:6d:e6:91:33:5c:
         1b:47:2d:f4:56:0f:e4:71:4b:8f:2a:68:0f:72:11:f0:e6:49:
         35:25:c0:89:c4:28:45:90:b6:57:f4:ec:86:18:b7:ff:60:d2:
         8f:fd:b5:90:5a:9b:d6:a3:e7:bb:18:46:9b:1d:65:95:ec:22:
         18:dd:dd:dd:fc:49:1e:0d:f8:22:b0:c5:10:89:20:ba:60:d9:
         2a:f5:8a:3a:97:17:e8:92:46:f3:8b:2b:3e:f7:ff:97:f8:36:
         86:98:9b:45:6e:0d:0e:21:22:be:88:ee:6e:7c:6d:bc:72:36:
         5e:32:93:76:4b:7c:51:6c:45:45:e4:e1:b5:bf:32:a4:95:03:
         4e:b6:b3:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----