Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TINP/fNcNOfXJsRg88AAryJBNZwmt-Nw.roa
File:                     fNcNOfXJsRg88AAryJBNZwmt-Nw.roa (raw, json)
Hash identifier:          v4zltI/JvRwxUqFgw6iFQ1OLznbqad6bOOxcYGBBjI0=
Subject key identifier:   7C:D7:0D:39:F5:C9:B1:18:3C:F0:00:2B:C8:90:4D:67:09:AD:F8:DC
Certificate issuer:       /CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
Certificate serial:       0A97
Authority key identifier: E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/fNcNOfXJsRg88AAryJBNZwmt-Nw.roa
Signing time:             Thu 15 Sep 2022 02:51:03 +0000
ROA not before:           Thu 15 Sep 2022 02:51:03 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     4780
IP address blocks:        49.213.128.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2711 (0xa97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
        Validity
            Not Before: Sep 15 02:51:03 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=7CD70D39F5C9B1183CF0002BC8904D6709ADF8DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:31:60:f6:c2:86:4c:ba:80:b5:91:94:61:71:
                    4f:d6:ac:b5:a8:81:5d:16:4d:41:a2:d8:33:75:bc:
                    52:e5:32:a5:78:dc:23:51:64:1a:4e:14:4e:81:95:
                    26:c2:33:34:81:be:86:b8:cb:f4:9b:c5:e2:d8:f2:
                    c5:12:e3:df:06:aa:a7:15:81:69:58:c0:ff:27:37:
                    44:67:99:c4:ed:02:cd:a3:9e:a0:e6:af:c1:18:d1:
                    e2:43:f0:90:77:e4:e2:ea:fe:d4:be:67:c6:7f:44:
                    27:e4:33:8d:df:81:7b:bb:84:a4:ce:da:76:3c:8a:
                    a3:ca:51:ed:42:c2:f2:9f:85:05:c8:b4:3f:d0:73:
                    b7:e8:4b:b2:8c:c3:a6:6f:8b:e8:7c:85:81:92:7f:
                    f3:c6:a8:65:33:a9:a6:7b:f0:51:6e:f8:ac:15:7a:
                    7a:93:3f:9e:43:d6:55:2d:1a:ea:ed:cd:6c:6c:e2:
                    03:cf:c2:1d:d7:41:d8:7f:bf:2b:b1:5d:0a:74:d7:
                    55:d4:22:3f:32:4d:ed:01:61:a5:3e:4d:9c:a8:d5:
                    d0:c8:8b:4d:7b:6c:23:e7:dc:98:5a:8c:4e:57:b3:
                    ec:c6:28:b2:4f:31:35:60:5d:b8:d3:99:7f:e0:60:
                    cb:c7:be:8b:cc:29:7e:2b:a8:7a:9c:5f:89:90:4e:
                    79:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:D7:0D:39:F5:C9:B1:18:3C:F0:00:2B:C8:90:4D:67:09:AD:F8:DC
            X509v3 Authority Key Identifier:
                keyid:E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/fNcNOfXJsRg88AAryJBNZwmt-Nw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.213.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         59:82:1e:11:87:5a:3f:e4:e4:63:a4:54:e6:05:b1:69:ad:06:
         c7:e8:df:cd:7f:06:e3:ce:2f:0a:49:60:e8:6f:b6:a5:97:42:
         35:44:32:82:7d:ab:21:dc:e9:8c:26:7f:73:c4:cb:26:35:0c:
         44:61:fe:55:73:a1:25:ad:37:50:32:7c:0b:5a:30:75:05:19:
         37:88:71:5c:c7:43:c4:0d:be:b1:cf:f0:87:d3:c4:73:d9:6f:
         cb:09:4b:d4:95:62:d0:ac:9a:69:b3:b4:76:d8:4b:1f:df:42:
         b1:09:a7:e8:81:b8:c2:06:61:12:d0:a4:9b:3a:5f:55:d0:a1:
         ea:af:f7:b7:9a:67:ba:9b:16:e6:8a:35:79:48:1e:70:98:64:
         2f:a8:15:42:25:13:e5:51:a5:3b:0e:f7:0b:6d:bd:92:c5:9a:
         fb:9a:26:1f:0b:53:39:60:a7:ad:8f:d7:f3:ec:9e:4f:92:50:
         27:24:66:50:77:7c:96:5f:24:46:af:fb:05:88:94:4f:32:8c:
         6c:4e:e4:fe:6b:b3:b8:4b:80:40:92:38:16:43:13:e5:10:91:
         06:44:94:75:2b:f5:31:ea:c1:ef:21:44:8a:44:43:45:82:46:
         a1:3a:45:77:6a:6b:e8:fc:b2:e9:56:3d:d9:e6:75:98:70:de:
         ba:bf:8a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----