Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/ZmjUB6qnwbuwfgte37G0GV3j_IE.roa
File:                     ZmjUB6qnwbuwfgte37G0GV3j_IE.roa (raw, json)
Hash identifier:          Cu6u6ZxE9eqEJ0uuibrPdKI1DviolVo74lPPamY7qpw=
Subject key identifier:   66:68:D4:07:AA:A7:C1:BB:B0:7E:0B:5E:DF:B1:B4:19:5D:E3:FC:81
Certificate issuer:       /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Certificate serial:       078C
Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/ZmjUB6qnwbuwfgte37G0GV3j_IE.roa
Signing time:             Tue 29 Sep 2020 10:06:25 +0000
ROA not before:           Tue 29 Sep 2020 10:06:25 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24158
IP address blocks:        43.240.108.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1932 (0x78c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
        Validity
            Not Before: Sep 29 10:06:25 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=6668D407AAA7C1BBB07E0B5EDFB1B4195DE3FC81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:78:82:46:14:41:87:fe:60:0d:45:05:21:9b:
                    d1:0c:0a:2f:1f:aa:83:58:28:11:c6:5a:cb:63:79:
                    50:58:52:13:d0:85:ab:86:52:3c:98:0a:da:9a:ac:
                    9a:fc:eb:b2:52:d7:77:9a:fb:78:a2:c2:28:7e:b0:
                    c0:0f:fc:19:6f:22:70:39:8d:ec:96:ca:90:83:c2:
                    d9:3d:b8:55:79:2a:71:44:19:95:6c:2e:ef:a1:27:
                    1c:90:88:60:0c:63:78:28:8f:cf:15:7b:9f:10:36:
                    9f:96:18:37:d4:61:a1:52:dc:bd:91:77:20:47:84:
                    0c:fa:70:31:87:5a:d3:67:bd:7e:10:8d:a8:fc:53:
                    d7:97:8a:50:b8:9e:c7:c0:4e:48:15:10:eb:31:89:
                    c6:66:6b:98:67:51:81:21:01:fe:18:9e:63:5f:43:
                    fe:27:2c:65:11:e2:f2:c5:13:f4:99:2c:9f:06:bf:
                    9c:68:be:ad:6a:2e:83:ad:f9:76:e3:11:7f:9e:8f:
                    bf:6b:0b:8c:85:6c:14:eb:68:8a:8d:7b:82:29:7b:
                    fb:31:3d:f9:57:9a:d1:a5:47:0a:66:a5:8b:92:0c:
                    8a:89:7f:b7:3c:7a:95:8e:d8:34:d8:1e:9f:ea:99:
                    11:0c:1c:5a:ed:3b:4b:49:5d:c2:bb:a4:b1:31:a7:
                    99:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:68:D4:07:AA:A7:C1:BB:B0:7E:0B:5E:DF:B1:B4:19:5D:E3:FC:81
            X509v3 Authority Key Identifier:
                keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/ZmjUB6qnwbuwfgte37G0GV3j_IE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.240.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:a1:ac:9e:8c:6c:b0:b5:51:3a:cf:5d:5f:d6:d6:ac:aa:44:
         5c:47:90:b0:73:16:84:ec:47:80:2c:5c:33:ca:9d:eb:e7:18:
         84:d3:08:62:29:66:f2:1c:1e:20:88:0d:38:4e:98:f5:af:09:
         24:4d:91:33:f4:7c:f7:8c:9b:b5:de:ff:4e:d8:dc:a1:85:cd:
         19:5c:8b:e3:f3:67:ba:08:02:25:8e:b8:50:a1:98:f3:64:42:
         da:8d:2f:8d:71:f2:12:c6:36:d8:13:bc:57:f6:fb:27:ee:ad:
         df:a1:2a:1d:e1:75:6c:c1:e7:0a:91:3c:40:69:5a:94:79:57:
         66:92:96:45:88:06:09:0d:74:59:32:52:32:d9:4b:67:61:7e:
         b7:be:12:85:24:bc:60:a9:64:7f:01:4a:2a:ab:d1:17:fa:7e:
         4b:ed:3b:3c:ed:7b:ce:98:b2:63:cf:61:69:d7:e3:3b:92:5a:
         37:04:38:fa:7b:b9:10:ed:82:f4:e1:6a:e2:ec:bf:63:40:66:
         1b:ba:58:d0:03:18:f1:e3:11:dd:1d:79:5c:a2:13:12:6f:69:
         ec:0d:f7:2f:9c:59:f1:3d:68:26:1a:7f:c1:a9:a1:e6:8d:cc:
         40:ea:56:f8:28:68:64:f4:9a:52:28:19:45:ef:62:cd:48:b2:
         4a:2d:e7:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----