Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWDS/55-m1IRnP3n_PxjgjZjQeKNMO8M.roa
File:                     55-m1IRnP3n_PxjgjZjQeKNMO8M.roa (raw, json)
Hash identifier:          AyUS1Ek1qiiMz0ZUIGhxkIqemcYqiQ0keufOxZBmLY0=
Subject key identifier:   E7:9F:A6:D4:84:67:3F:79:FF:3F:18:E0:8D:98:D0:78:A3:4C:3B:C3
Certificate issuer:       /CN=291BAF6A0C176CE0A32423666BCE78F9D91824CB
Certificate serial:       06F1
Authority key identifier: 29:1B:AF:6A:0C:17:6C:E0:A3:24:23:66:6B:CE:78:F9:D9:18:24:CB
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KRuvagwXbOCjJCNma854-dkYJMs.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TWDS/55-m1IRnP3n_PxjgjZjQeKNMO8M.roa
Signing time:             Wed 29 Sep 2021 02:53:47 +0000
ROA not before:           Wed 29 Sep 2021 02:53:47 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     18041
IP address blocks:        103.147.22.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1777 (0x6f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=291BAF6A0C176CE0A32423666BCE78F9D91824CB
        Validity
            Not Before: Sep 29 02:53:47 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=E79FA6D484673F79FF3F18E08D98D078A34C3BC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:65:9d:b7:f7:f9:3a:b0:4e:09:e0:c7:4f:1c:
                    e0:2e:86:87:8d:60:14:d1:fd:43:11:0f:f8:c8:aa:
                    ec:a1:c4:17:02:88:0f:cd:c3:9a:78:2c:b3:bd:72:
                    8f:6b:be:29:1a:6e:62:ef:38:c8:63:4b:38:22:ee:
                    ad:b0:a5:68:d0:99:42:7e:2b:8a:69:f0:47:b6:cc:
                    b7:54:05:fa:21:67:db:6a:f5:91:5a:ff:cd:7b:84:
                    77:3d:a7:63:fb:f3:74:1d:93:2b:33:e5:2c:82:23:
                    0c:4e:00:0a:c8:76:5b:a3:b8:61:84:97:cf:3c:c9:
                    09:8f:cd:83:69:fc:28:49:75:fb:aa:0c:40:92:15:
                    e4:c1:4f:35:fe:b6:c7:d4:5d:c0:d2:aa:f2:b1:e5:
                    e4:06:8c:6c:6b:7f:db:f7:c0:6a:fb:4d:4c:1b:33:
                    7d:c8:fc:d8:7c:73:df:42:9b:35:97:1c:d8:a1:79:
                    02:91:ac:d5:fd:14:aa:c4:37:98:cd:14:4b:3a:81:
                    53:bc:46:bf:ba:33:9a:7d:dd:61:62:37:cb:56:ee:
                    4c:fb:cf:40:28:45:f9:c4:9d:36:5c:59:1f:83:1e:
                    c1:9a:ba:93:17:3c:0b:bf:06:c6:f5:d0:fc:51:26:
                    04:9c:2a:d0:75:62:99:32:0e:9b:4d:77:b0:8b:83:
                    3d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:9F:A6:D4:84:67:3F:79:FF:3F:18:E0:8D:98:D0:78:A3:4C:3B:C3
            X509v3 Authority Key Identifier:
                keyid:29:1B:AF:6A:0C:17:6C:E0:A3:24:23:66:6B:CE:78:F9:D9:18:24:CB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWDS/KRuvagwXbOCjJCNma854-dkYJMs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KRuvagwXbOCjJCNma854-dkYJMs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWDS/55-m1IRnP3n_PxjgjZjQeKNMO8M.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:b3:ad:f0:1f:f9:f5:c4:25:20:9e:04:a0:d5:a6:88:f3:76:
         70:17:44:af:62:8d:4e:3e:90:eb:f4:c8:bb:01:b4:ba:0a:48:
         60:e3:2e:a5:1c:21:0b:8c:de:6e:96:26:b8:5a:fa:f5:85:26:
         a2:d4:f5:3e:e7:a6:6b:61:2d:d7:3e:13:32:d8:86:4b:e5:44:
         32:a1:1e:22:d3:2d:58:47:9c:21:79:e6:c4:16:35:36:9b:78:
         e4:75:eb:98:9c:5f:01:cc:75:fc:23:0b:5d:3b:ac:4d:cf:d6:
         4b:c8:65:5d:4f:89:7d:f3:67:7c:68:4c:d8:96:8b:12:7e:8e:
         16:9b:9c:f6:22:56:60:e4:17:ea:c6:54:78:03:ee:60:7d:ac:
         07:f0:9f:e5:3c:a6:8f:40:f7:58:f6:fc:f6:10:f5:ec:93:46:
         f1:80:31:62:e8:7b:60:16:d1:0b:14:5e:1d:e6:82:58:59:b6:
         33:f0:bf:35:bf:b0:6f:c0:6b:ce:37:70:b9:e1:4d:d9:57:1c:
         07:dd:5e:e1:9a:63:0c:71:70:3c:da:15:b4:bf:a8:b7:09:b7:
         e7:36:92:1a:23:08:6b:f5:1a:eb:06:99:7c:fd:75:be:2f:97:
         c2:09:4b:fa:d1:54:3e:35:d3:12:9a:95:ab:93:20:b2:37:0e:
         d1:57:7c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----