Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/zgj6XJWTLOz4rjCw-TNLiYg1Md8.roa
File:                     zgj6XJWTLOz4rjCw-TNLiYg1Md8.roa (raw, json)
Hash identifier:          g1P2uiJcqlKbdxVXpnPLNFwPfD99X1fFV19stcstQ8M=
Subject key identifier:   CE:08:FA:5C:95:93:2C:EC:F8:AE:30:B0:F9:33:4B:89:88:35:31:DF
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       0AD3
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/zgj6XJWTLOz4rjCw-TNLiYg1Md8.roa
Signing time:             Wed 29 Sep 2021 02:41:08 +0000
ROA not before:           Wed 29 Sep 2021 02:41:08 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     1659
IP address blocks:        163.28.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2771 (0xad3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Sep 29 02:41:08 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=CE08FA5C95932CECF8AE30B0F9334B89883531DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7a:d9:1f:d6:c4:28:67:28:9c:bb:e1:73:ae:
                    18:b5:3b:75:8a:7e:af:ad:b3:a2:d3:a7:c3:4e:15:
                    48:97:8f:ca:8d:23:41:98:a6:fb:a0:1a:ea:34:e2:
                    b4:2d:d7:62:67:f0:21:73:5f:5a:e1:58:70:7c:7b:
                    34:d2:64:30:12:4b:78:aa:93:9e:7d:60:e1:87:6f:
                    64:27:65:bb:e0:90:c2:14:38:c1:12:6c:18:81:fc:
                    d3:dc:b8:a3:ee:5c:8a:44:c2:e4:4f:b4:f7:a4:34:
                    be:fe:81:ca:b4:62:42:46:5e:52:0b:34:bb:d1:a6:
                    89:df:f9:ef:aa:a0:72:50:3a:c6:06:d3:12:0b:f4:
                    0c:23:9f:10:eb:d4:6d:e9:9b:da:e0:1d:c2:bb:dc:
                    24:7d:c0:99:e3:88:83:32:12:d5:c2:0f:95:83:6c:
                    3c:50:2e:52:df:7d:09:86:61:de:a8:85:1d:0b:dd:
                    db:86:39:2a:25:3e:1e:05:18:e2:79:19:8f:c8:ba:
                    2a:34:ca:b5:27:0b:22:33:e2:be:a2:ec:18:52:92:
                    7c:f1:1c:c6:5c:6d:d4:bc:77:a9:f7:ca:cc:8f:05:
                    80:be:d9:cf:5d:3f:f6:d3:85:a6:ba:e3:c2:07:bf:
                    94:cc:d1:ac:b3:49:41:6e:0c:50:d6:ac:6c:a9:d5:
                    f1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:08:FA:5C:95:93:2C:EC:F8:AE:30:B0:F9:33:4B:89:88:35:31:DF
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/zgj6XJWTLOz4rjCw-TNLiYg1Md8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.28.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         78:9b:cb:61:ae:b9:1c:f9:3e:44:92:2c:a9:19:8b:0f:a2:37:
         7b:81:94:45:28:47:2b:1c:bf:15:fe:50:4a:65:ff:6b:a9:35:
         54:cd:70:93:5a:13:c6:a0:39:34:31:53:94:eb:89:39:30:ed:
         d1:15:15:fd:a0:52:f7:12:5b:43:14:4a:c9:77:57:b2:35:5e:
         30:33:69:88:32:53:a5:45:ad:db:03:95:e6:4f:e5:8b:06:1f:
         f3:a7:b6:ba:ae:2d:17:ef:2a:11:1c:29:1d:10:ba:1a:ad:88:
         55:61:b7:52:a1:12:e7:76:3d:65:60:ba:84:89:28:76:78:fa:
         da:3e:8e:50:80:39:f5:93:6e:c5:b2:ce:19:f9:39:80:88:57:
         e7:d6:9d:f6:92:bd:c0:80:af:75:64:c1:b7:bc:6d:28:82:9b:
         47:88:12:3e:52:b6:91:21:e9:c0:42:48:e9:93:3b:50:a0:f1:
         fc:8f:cb:64:85:4f:97:9f:c7:f8:2d:3a:4b:df:be:db:16:bb:
         b5:8b:93:a1:7b:9f:e7:d7:62:d7:47:e5:6e:31:60:08:ee:50:
         7c:3c:fa:d9:93:02:19:ee:0e:fa:c2:4e:54:8d:e4:ca:b3:16:
         18:55:39:e1:6a:91:a1:88:67:7b:a5:3b:07:2a:32:47:cd:c7:
         c1:b6:4a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----