Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/G-UgDkiZ9SQ3H-3FhhkeG8a00qQ.roa
File:                     G-UgDkiZ9SQ3H-3FhhkeG8a00qQ.roa (raw, json)
Hash identifier:          jUrITWJe7hs1PWd6DhOU254ai+reHMYqGWml5Bjdwr0=
Subject key identifier:   1B:E5:20:0E:48:99:F5:24:37:1F:ED:C5:86:19:1E:1B:C6:B4:D2:A4
Certificate issuer:       /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Certificate serial:       0FC9
Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/G-UgDkiZ9SQ3H-3FhhkeG8a00qQ.roa
Signing time:             Sat 21 May 2022 01:47:39 +0000
ROA not before:           Sat 21 May 2022 01:47:39 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     18180
IP address blocks:        2001:dc1::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4041 (0xfc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
        Validity
            Not Before: May 21 01:47:39 2022 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=1BE5200E4899F524371FEDC586191E1BC6B4D2A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ce:a5:09:d3:db:64:05:d2:ae:08:9e:fe:a6:
                    5f:a5:89:ea:2c:02:17:ce:b9:60:7a:82:c5:0c:38:
                    96:50:fa:45:db:ed:73:e3:1e:da:0e:62:d9:6b:69:
                    a0:cd:c8:f0:df:2c:7a:a3:62:0e:2d:27:08:25:64:
                    a2:ac:27:c4:8d:6e:1b:4d:7f:f8:d0:b2:9c:14:f9:
                    12:98:26:00:be:40:a3:2b:43:94:ab:20:bf:27:93:
                    e3:41:c8:dd:8a:2d:69:2f:e7:1e:99:fe:79:48:3b:
                    64:05:1b:e2:4c:ff:74:06:17:26:22:61:55:c1:ab:
                    5d:22:12:3b:ec:ce:b5:64:f3:d2:81:bd:3c:95:6b:
                    16:45:fd:0d:1d:1f:b9:62:6a:0b:65:04:be:b7:29:
                    54:05:7a:1a:42:bc:c1:44:17:68:0a:5f:e7:bb:09:
                    e4:b8:a1:27:5e:ff:88:57:64:11:1a:7a:5c:eb:9b:
                    a8:56:21:1a:81:c9:bb:79:04:35:38:4e:23:82:de:
                    53:27:5e:ce:58:55:cd:44:f8:be:bc:71:31:cc:a0:
                    dd:26:24:f6:10:4d:ed:d9:30:a7:05:f2:b4:bc:29:
                    68:87:81:17:6d:05:2f:a0:7c:fe:48:d9:74:dc:80:
                    ec:88:a3:ad:cc:f6:e7:7b:c7:67:3a:7c:f2:c1:af:
                    ca:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:E5:20:0E:48:99:F5:24:37:1F:ED:C5:86:19:1E:1B:C6:B4:D2:A4
            X509v3 Authority Key Identifier:
                keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/G-UgDkiZ9SQ3H-3FhhkeG8a00qQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:dc1::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:24:91:b3:dd:35:67:e3:86:37:76:dc:75:41:6c:8d:6c:98:
         96:d8:37:50:ff:1b:2d:bf:f9:63:b9:ce:0b:43:9d:bc:d7:a7:
         20:4f:61:77:4a:8d:4e:1c:b3:c0:37:c3:03:69:b2:61:19:e0:
         9b:7e:4f:47:3f:e1:cc:ad:50:7d:8e:63:6f:bc:d4:04:65:f4:
         18:69:a0:2a:14:8b:13:03:56:d6:9f:d9:49:91:c2:bc:c8:9a:
         ad:ce:76:27:62:19:a9:d8:71:ce:38:73:48:d8:fe:b7:d8:f3:
         91:9b:8d:a3:ef:5d:ea:45:0f:87:32:47:fb:b1:bd:50:10:84:
         f3:35:b0:bc:a8:11:ce:93:be:ab:85:c6:db:d0:31:fe:6f:27:
         bc:42:47:a7:dc:69:6b:e2:ed:f0:58:54:28:e7:a9:39:e2:02:
         e9:17:c6:fa:4c:cd:44:96:20:e4:87:98:dd:ce:21:7e:67:b0:
         0c:e3:23:83:e8:8c:67:7c:ed:d0:4c:bd:7f:42:22:61:1d:fa:
         09:3a:5c:cd:7d:98:fe:07:27:60:4b:f0:c4:e4:64:75:65:f5:
         ef:09:cd:d5:4a:06:77:02:e9:95:3f:a9:28:6e:71:65:4c:be:
         66:ed:45:59:10:6a:eb:2f:ba:10:df:21:c3:79:80:59:44:fb:
         fc:73:b2:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----