Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/7gpatSo1qaIqkXYwKgw5QZNR-Yg.roa
File:                     7gpatSo1qaIqkXYwKgw5QZNR-Yg.roa (raw, json)
Hash identifier:          2nBR98wDdR7wwWS89AM7PAQj0sYkWUKYzSyytPN7gpk=
Subject key identifier:   EE:0A:5A:B5:2A:35:A9:A2:2A:91:76:30:2A:0C:39:41:93:51:F9:88
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0787
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/7gpatSo1qaIqkXYwKgw5QZNR-Yg.roa
Signing time:             Tue 29 Sep 2020 10:00:31 +0000
ROA not before:           Tue 29 Sep 2020 10:00:31 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24168
IP address blocks:        121.50.144.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1927 (0x787)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Sep 29 10:00:31 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=EE0A5AB52A35A9A22A9176302A0C39419351F988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:63:12:a6:3f:38:eb:b4:68:8a:8e:b8:67:9a:
                    6c:96:84:ad:cb:75:49:c7:be:56:7e:0e:d4:c5:8f:
                    a7:6b:e6:b4:2f:ef:ff:58:9d:33:97:e1:b3:fd:59:
                    b0:08:d2:4d:22:fb:20:8f:91:37:7e:98:24:f6:01:
                    22:39:1b:2e:7d:88:4e:1b:35:61:55:81:1e:7d:4c:
                    75:cc:1c:ca:fd:e7:ec:34:0f:c5:77:f5:e4:0c:f2:
                    af:28:12:4a:d7:ca:14:4d:e5:f2:c7:37:06:71:fe:
                    4c:0a:06:35:01:2a:34:15:c5:c8:d9:e9:ab:d6:54:
                    4a:54:b8:48:20:84:87:6c:40:19:44:5c:72:68:f1:
                    5a:cc:c1:05:15:59:30:5b:31:4d:e9:7e:50:d0:0c:
                    b2:03:5d:12:dc:f5:ef:c8:ce:80:8f:15:0d:24:fb:
                    bb:bd:0b:75:c9:af:1b:85:af:3b:b3:93:17:5a:b7:
                    f6:d2:4a:a9:bc:d6:15:4f:9b:c6:78:39:5f:65:67:
                    83:f1:89:47:5c:36:57:7c:d4:81:da:54:af:c2:3c:
                    d8:d3:a6:88:fa:86:47:46:54:a4:af:98:cc:12:51:
                    b3:49:93:01:88:bb:ef:c2:89:f3:f6:ca:7d:2e:02:
                    08:00:36:03:9e:0a:74:32:0c:5a:de:5e:c3:d1:00:
                    6a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:0A:5A:B5:2A:35:A9:A2:2A:91:76:30:2A:0C:39:41:93:51:F9:88
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/7gpatSo1qaIqkXYwKgw5QZNR-Yg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.50.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bc:51:db:d6:2a:c1:6d:c4:74:94:94:6e:3f:7c:7c:47:26:b0:
         44:9a:aa:46:dd:86:0b:82:14:b8:b6:13:3c:8c:93:fb:87:10:
         e0:8d:47:14:4b:bb:f7:81:af:aa:b2:4a:02:f7:72:59:9e:01:
         92:2d:75:61:02:8e:81:74:12:62:7f:ca:fd:bd:50:32:ca:9a:
         c0:c6:a1:28:0e:b2:75:67:21:21:d5:34:72:7a:c4:b6:48:99:
         82:03:cc:16:5a:05:85:e9:0c:d1:45:f1:34:a7:6c:40:39:bd:
         92:08:49:14:4e:4f:cd:27:22:5b:da:02:b1:47:e3:71:01:d8:
         a4:7c:02:b2:53:d7:16:13:89:e4:84:bb:41:dc:d0:29:d3:b1:
         f0:db:ea:35:66:83:4b:de:05:0a:80:03:1c:2f:dd:84:30:6a:
         6d:b3:c3:d1:c5:24:ec:a2:cf:fd:08:1c:ca:cc:be:be:16:58:
         f2:0c:38:14:f0:ee:cc:ea:49:19:ee:e9:35:19:e1:e6:18:39:
         c9:cc:62:73:4f:e4:05:fa:c0:22:a5:3c:cf:ac:0c:cb:41:60:
         d6:b0:4d:63:84:a3:66:68:d9:95:d3:2e:bb:b5:fc:6e:e5:d7:
         ae:c3:ff:44:6a:5c:be:76:c5:3d:6e:9a:1d:3d:b6:09:95:ff:
         b6:11:df:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----