Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/zISofYqzViS0B1ddrOgNqxgsoiA.roa
File:                     zISofYqzViS0B1ddrOgNqxgsoiA.roa (raw, json)
Hash identifier:          8Iuo1hUJC4XDjtbuYXXlueHlpSEfZ3+aAgNC0OFpRq8=
Subject key identifier:   CC:84:A8:7D:8A:B3:56:24:B4:07:57:5D:AC:E8:0D:AB:18:2C:A2:20
Certificate issuer:       /CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
Certificate serial:       09A8
Authority key identifier: B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/zISofYqzViS0B1ddrOgNqxgsoiA.roa
Signing time:             Wed 29 Sep 2021 02:56:02 +0000
ROA not before:           Wed 29 Sep 2021 02:56:02 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24158
IP address blocks:        124.29.128.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2472 (0x9a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2CA39D8D17B10D97D5A51E0EA2F9FB1BC40CD90
        Validity
            Not Before: Sep 29 02:56:02 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=CC84A87D8AB35624B407575DACE80DAB182CA220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:65:c4:c4:55:f2:db:b6:19:7c:1a:7c:67:62:
                    42:48:08:0a:82:01:12:64:76:1a:67:eb:f2:ff:85:
                    52:d3:8f:68:e5:06:fb:da:8f:6d:c2:a0:06:28:b4:
                    30:3a:86:4f:10:01:e1:24:86:ec:6c:70:26:0c:65:
                    32:88:3e:a1:e1:d6:8c:29:93:d2:09:0c:79:dd:52:
                    8c:a9:36:b9:55:8b:df:c4:cd:09:fe:97:f6:3c:e0:
                    e8:c3:42:3f:9c:5a:8c:a0:e2:23:4c:5c:c6:5f:e9:
                    1a:f2:20:cd:7f:86:8e:ec:69:3a:ce:e3:64:dc:86:
                    2e:24:31:e4:f2:2c:a9:29:b7:ce:9b:b4:f7:2d:b1:
                    33:a6:ec:41:ea:19:c1:02:02:74:4a:9f:11:04:1e:
                    b2:68:61:e4:6f:a0:2c:50:75:a4:12:9c:91:ea:87:
                    76:76:92:03:20:35:3b:5b:0d:46:60:c7:45:84:83:
                    0f:cb:06:66:e7:2f:28:dc:8a:4e:2c:8a:23:39:c9:
                    f8:2f:0e:16:10:1a:0a:3b:d8:12:99:8b:29:00:ac:
                    b6:0c:8d:4f:2c:ca:f9:3b:ee:32:d5:d2:9a:80:c2:
                    fd:d5:85:52:d4:21:c0:de:bc:c1:a2:77:37:30:fb:
                    fd:74:ac:b8:80:6a:4b:1a:b3:27:63:2d:9b:a4:ea:
                    93:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:84:A8:7D:8A:B3:56:24:B4:07:57:5D:AC:E8:0D:AB:18:2C:A2:20
            X509v3 Authority Key Identifier:
                keyid:B2:CA:39:D8:D1:7B:10:D9:7D:5A:51:E0:EA:2F:9F:B1:BC:40:CD:90

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/sso52NF7ENl9WlHg6i-fsbxAzZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/sso52NF7ENl9WlHg6i-fsbxAzZA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIWANMOBILE/zISofYqzViS0B1ddrOgNqxgsoiA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.29.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         64:95:17:ed:c9:85:e4:0e:0a:d9:78:d8:9c:84:f2:17:4a:27:
         0e:21:3c:2d:0d:d3:46:57:61:5d:33:59:73:c8:3f:0f:1d:08:
         37:31:af:ea:44:1f:3b:ec:7f:e9:1d:bd:5a:ac:0d:03:e2:e2:
         2e:37:06:50:31:a9:70:69:1e:83:4f:1e:b6:a6:ea:64:fe:44:
         45:df:0a:28:70:b6:9b:0d:7e:98:72:0a:6c:60:d0:38:1b:c7:
         88:13:cd:f9:0b:91:be:08:77:ec:20:a7:2f:a8:8f:36:13:9c:
         ef:b9:64:6a:53:1d:84:9a:dd:59:56:a0:db:06:dc:f0:c4:cd:
         94:9b:f6:e0:00:94:a3:59:7c:42:97:05:e9:20:c6:66:2b:b8:
         cc:0a:c0:e5:9f:ef:26:05:9c:e7:13:6a:d9:3f:45:a4:25:37:
         c1:f4:cf:3c:f6:18:1f:f2:dd:f2:10:d0:61:3e:44:af:a2:a1:
         1b:42:5e:eb:ca:17:f1:d8:3e:93:cc:4b:78:31:98:18:de:3f:
         c3:d6:59:24:cc:d8:14:64:4c:1f:e6:a4:56:17:6c:18:92:e5:
         3b:18:30:91:5d:13:2a:45:23:80:4b:e2:81:d3:a4:c6:b6:3e:
         2f:34:91:e2:e8:c8:50:03:0f:04:9d:77:e9:e1:f1:0c:d3:d6:
         4b:c5:a7:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----