Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/tX0jfzXjoVeFoMABWfOxcvu-jD4.roa
File:                     tX0jfzXjoVeFoMABWfOxcvu-jD4.roa (raw, json)
Hash identifier:          8VmhdZY2ceS32IM35Ip7tCIg/sswqmaerau+dGvriFU=
Subject key identifier:   B5:7D:23:7F:35:E3:A1:57:85:A0:C0:01:59:F3:B1:72:FB:BE:8C:3E
Certificate issuer:       /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Certificate serial:       09A3
Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/tX0jfzXjoVeFoMABWfOxcvu-jD4.roa
Signing time:             Wed 29 Sep 2021 02:56:01 +0000
ROA not before:           Wed 29 Sep 2021 02:56:01 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24158
IP address blocks:        2402:7500:800::/40 maxlen: 64

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2467 (0x9a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
        Validity
            Not Before: Sep 29 02:56:01 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=B57D237F35E3A15785A0C00159F3B172FBBE8C3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2a:05:89:70:cf:3f:b3:f3:ef:9e:45:96:97:
                    41:1e:a6:a4:c0:1d:32:54:31:58:a3:2a:b1:24:25:
                    1f:49:f4:db:1a:6b:07:78:a8:66:22:30:c8:c8:2f:
                    e4:3a:22:94:f5:fd:c9:fd:5f:f9:e5:58:33:9c:5d:
                    73:71:28:68:1c:a3:53:54:f5:58:e0:fc:b7:64:b1:
                    80:cc:cb:6f:70:08:51:bd:d5:13:fc:2d:c2:d4:63:
                    98:c7:10:a0:70:20:b4:35:e8:25:18:89:93:84:b6:
                    6f:a4:2a:05:70:b3:66:84:bb:80:af:68:3e:26:51:
                    91:30:a8:e2:a4:a9:0e:a6:b4:8b:06:02:07:7a:dd:
                    44:18:f7:01:3e:b8:b3:83:2d:76:40:43:a7:9b:ee:
                    c6:67:e7:f1:7c:66:dd:86:44:6e:48:4a:10:aa:b2:
                    99:47:5c:75:b0:62:d5:50:be:75:58:c4:6d:fb:99:
                    cf:26:79:4b:f4:27:ff:db:1b:c7:8e:dc:19:30:e9:
                    fe:03:2c:a6:44:5a:4d:58:4d:c9:a3:f6:9f:bf:9c:
                    41:36:82:1d:c7:80:3b:81:fa:7a:88:23:77:44:0f:
                    d6:c7:72:79:19:69:71:63:bb:02:cd:fe:8d:45:7f:
                    66:f0:19:51:2c:c8:6c:df:19:5d:5c:c6:52:c3:0a:
                    53:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:7D:23:7F:35:E3:A1:57:85:A0:C0:01:59:F3:B1:72:FB:BE:8C:3E
            X509v3 Authority Key Identifier:
                keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/tX0jfzXjoVeFoMABWfOxcvu-jD4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:7500:800::/40

    Signature Algorithm: sha256WithRSAEncryption
         bd:03:6a:46:9e:cb:c0:e1:ef:23:e1:b3:84:7b:67:a7:72:8f:
         58:d5:a7:93:eb:5c:6c:c7:5f:27:80:70:5c:fb:ee:a3:8e:f7:
         81:7f:2b:73:1a:f4:02:11:76:1e:4d:22:ba:57:00:cb:b5:6d:
         5e:bf:59:81:ad:ea:ed:91:f4:be:d4:9e:9c:b1:f6:01:1e:8b:
         38:7e:68:d0:fc:27:f7:f2:a7:1c:ef:b4:f9:b8:0a:fd:cf:d4:
         26:d9:6a:16:c5:dd:46:b6:4b:92:b6:65:60:24:88:73:b1:14:
         70:09:31:bc:c4:23:cc:48:0c:a8:26:f7:00:f8:48:94:a2:24:
         99:a6:8d:df:86:e0:fc:bd:6f:1f:e1:d9:f3:35:a0:d2:f0:e0:
         ca:56:31:7e:e2:8b:e0:df:30:27:22:d8:59:2e:c0:c1:45:61:
         ea:3b:80:93:55:ef:cb:1e:a5:11:34:24:fc:ac:2b:a0:fd:50:
         7e:97:16:61:04:43:59:dc:d8:bc:9a:c0:d6:a1:eb:ad:94:1b:
         2b:ff:7b:46:2c:63:59:6e:d4:81:4f:30:cc:e3:45:98:d8:5f:
         b3:8a:87:2b:95:71:c0:6b:2a:f4:db:ef:83:c0:19:c9:a1:6d:
         d9:df:2a:76:fd:73:f9:1c:82:b1:cd:ab:ba:6d:9b:94:58:13:
         d5:e9:14:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----