Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/VISION4YES/JRvgoDLlVLBDrmIa4xQxS3dzHq4.roa
File:                     JRvgoDLlVLBDrmIa4xQxS3dzHq4.roa (raw, json)
Hash identifier:          PPPJ6REJM9riet0YGIy9y+ae3qmYwcL7Gz+dgz+39II=
Subject key identifier:   25:1B:E0:A0:32:E5:54:B0:43:AE:62:1A:E3:14:31:4B:77:73:1E:AE
Certificate issuer:       /CN=63400AA6E6C68B13DDDC9C00B82586124273FA9B
Certificate serial:       0765
Authority key identifier: 63:40:0A:A6:E6:C6:8B:13:DD:DC:9C:00:B8:25:86:12:42:73:FA:9B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Y0AKpubGixPd3JwAuCWGEkJz-ps.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/VISION4YES/JRvgoDLlVLBDrmIa4xQxS3dzHq4.roa
Signing time:             Tue 29 Sep 2020 10:09:11 +0000
ROA not before:           Tue 29 Sep 2020 10:09:11 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131618
IP address blocks:        103.122.227.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1893 (0x765)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63400AA6E6C68B13DDDC9C00B82586124273FA9B
        Validity
            Not Before: Sep 29 10:09:11 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=251BE0A032E554B043AE621AE314314B77731EAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b2:74:ca:1c:b6:58:5c:ff:d0:4a:cf:de:db:
                    d5:e5:80:16:94:88:ef:22:84:82:90:c2:99:25:b4:
                    67:5b:08:7f:6b:8c:0b:b7:c8:ee:61:fb:02:b2:f9:
                    5b:81:c2:2e:84:87:45:54:9d:d1:b4:d2:04:b3:26:
                    70:64:4e:f2:d3:4e:f3:80:0f:44:81:ae:ed:f6:43:
                    cc:f8:84:62:b2:7b:6c:50:9b:b4:6c:a4:14:94:cc:
                    96:aa:21:aa:c4:3b:1f:1d:12:3f:14:d5:ee:b7:86:
                    e7:d6:54:58:38:29:a8:dd:a8:39:d5:d7:a8:d1:d1:
                    74:ce:82:cc:9f:83:73:18:18:e4:12:24:12:55:9d:
                    32:41:62:ed:1d:8b:b9:89:45:fc:9f:61:c2:01:34:
                    81:71:8d:ae:63:8a:cd:df:26:63:9b:10:3f:00:1b:
                    85:4e:43:23:a4:b2:33:3e:a3:25:9e:cf:c6:a2:18:
                    9e:08:7a:e1:c3:4f:cf:6c:78:71:56:3f:45:6c:b7:
                    17:db:d9:b3:ef:a6:08:52:62:fd:30:ca:4b:e0:4e:
                    5e:4f:42:7c:77:9c:89:a4:a6:62:0c:3f:c9:76:58:
                    2e:96:0d:7c:61:77:ed:24:5d:64:f7:f5:ea:fd:ab:
                    75:39:bd:25:21:a1:27:84:ec:1f:b9:c3:0f:71:a9:
                    8c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:1B:E0:A0:32:E5:54:B0:43:AE:62:1A:E3:14:31:4B:77:73:1E:AE
            X509v3 Authority Key Identifier:
                keyid:63:40:0A:A6:E6:C6:8B:13:DD:DC:9C:00:B8:25:86:12:42:73:FA:9B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VISION4YES/Y0AKpubGixPd3JwAuCWGEkJz-ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Y0AKpubGixPd3JwAuCWGEkJz-ps.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VISION4YES/JRvgoDLlVLBDrmIa4xQxS3dzHq4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:80:ce:0c:d1:59:6f:a8:2b:c2:a6:51:4f:0d:cd:dc:84:d3:
         05:0f:a5:62:95:ed:66:fb:00:63:a3:79:58:c2:ce:69:67:b9:
         9e:f9:9f:36:25:91:b0:b1:3e:6c:e1:e1:eb:1d:37:a5:f1:9d:
         7d:67:e0:09:c6:0f:4e:f9:84:c0:31:53:c5:ae:4b:57:03:16:
         55:d0:e0:4e:d6:72:b0:ab:4e:f5:9a:3b:11:c6:0a:aa:d8:c4:
         7e:ae:71:b1:0e:42:bf:38:8a:bc:b6:96:2e:ce:a3:a6:04:4a:
         e4:46:d8:eb:53:d0:02:ca:79:fc:66:3f:a3:27:b5:ab:28:ce:
         7e:25:e3:3c:aa:59:aa:ed:9b:2a:00:21:01:58:02:d6:04:39:
         1d:b2:d7:42:15:4b:b9:4c:cb:b2:9c:b8:c6:a4:ae:95:04:6b:
         07:93:f0:0a:e9:7b:b2:d4:58:68:55:7c:57:06:a7:b2:23:e7:
         0c:8d:6b:80:3e:ee:f4:02:c9:55:90:c3:7a:67:d5:c5:62:6d:
         ec:b9:e3:48:c7:53:23:40:2c:d7:4c:32:9b:60:48:ba:04:01:
         f0:7c:6b:1b:cc:3c:ec:37:e5:72:ed:65:1b:b4:a1:4c:eb:8a:
         4f:f9:6f:f2:4f:10:a9:ab:ee:1b:7a:62:7d:f7:97:c9:8d:73:
         81:96:3d:8c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----