Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/G3bCSBHomMrWqpIDwjry-qNKAHQ.roa
File:                     G3bCSBHomMrWqpIDwjry-qNKAHQ.roa (raw, json)
Hash identifier:          KJJHainhhU+Na5Han7P9+FY4C2/9QOs8tlE47o4vwBI=
Subject key identifier:   1B:76:C2:48:11:E8:98:CA:D6:AA:92:03:C2:3A:F2:FA:A3:4A:00:74
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0A3D
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/G3bCSBHomMrWqpIDwjry-qNKAHQ.roa
Signing time:             Wed 29 Sep 2021 02:52:49 +0000
ROA not before:           Wed 29 Sep 2021 02:52:49 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     18424
IP address blocks:        121.50.151.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2621 (0xa3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Sep 29 02:52:49 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=1B76C24811E898CAD6AA9203C23AF2FAA34A0074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:89:21:bc:88:e5:92:16:ca:f9:9c:80:84:52:
                    42:b3:7c:81:3f:07:e5:de:37:64:32:5a:fd:01:1f:
                    31:8e:fa:37:f1:ea:79:c5:3d:fd:9d:86:d5:5c:f3:
                    b3:97:3d:3d:74:59:7c:e9:fb:5d:1e:8d:3f:ef:d0:
                    e4:d5:4f:7f:a4:75:f6:26:66:13:90:c6:e9:15:f9:
                    b0:d9:8f:f2:60:0b:7f:f2:9a:1b:fe:19:3b:35:53:
                    8d:b8:86:61:9c:0b:db:2d:f4:64:ef:25:51:ba:2b:
                    1e:e4:82:a7:d6:27:d2:d9:7f:c6:cc:14:74:ce:cf:
                    21:4d:8a:4a:e3:5d:cd:46:36:0c:43:70:51:35:10:
                    06:79:a2:0f:25:31:9b:f7:e6:e6:09:8a:af:4f:1b:
                    6c:8b:0c:94:1c:0a:e1:87:3e:a8:19:5b:bc:3a:ec:
                    97:b3:57:4f:a2:90:5a:1f:d4:ce:be:d6:62:28:31:
                    47:a4:aa:66:77:53:b4:e6:a2:76:87:42:50:11:d7:
                    4d:2d:ea:39:75:fa:c0:76:66:8b:02:e0:ff:3a:ab:
                    92:69:fd:0c:f4:c8:5b:97:99:1e:43:cf:53:61:08:
                    ff:0e:77:ae:a9:e4:24:d2:30:9b:dd:a9:cc:82:e0:
                    54:38:43:10:8b:c5:d0:b7:18:be:62:10:64:86:34:
                    1b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:76:C2:48:11:E8:98:CA:D6:AA:92:03:C2:3A:F2:FA:A3:4A:00:74
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/G3bCSBHomMrWqpIDwjry-qNKAHQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.50.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:e3:4e:e1:06:36:98:80:4c:e8:23:64:74:46:ac:d1:87:66:
         3a:b7:db:5b:fc:19:eb:63:8d:cd:83:34:ca:9b:58:02:0e:23:
         e1:75:0e:74:8e:8b:ba:70:fb:95:4d:d3:45:fd:25:70:fe:bb:
         8d:11:a1:57:f1:60:1b:c2:5e:e4:12:a8:6c:c3:1e:74:52:bf:
         a0:e0:2a:f8:c8:8d:86:45:8d:ec:f1:32:3a:65:c7:d7:ba:f0:
         e6:7f:6e:0b:74:9c:03:c8:e2:98:4a:23:cb:b8:17:e1:15:5a:
         d3:9e:66:5c:98:5b:06:ce:34:fa:50:b9:de:f7:5b:04:2c:fc:
         1b:c5:d7:8c:59:96:12:1f:23:8d:04:c2:87:db:57:c6:b5:e9:
         8d:0b:78:f7:ab:60:90:08:d8:99:65:3f:20:9c:24:13:aa:0b:
         0c:d9:35:9f:04:4d:99:5a:7a:dc:96:84:c9:c5:8b:24:8d:af:
         5d:d9:59:53:e3:e8:c9:02:f8:e1:0e:08:07:f9:f2:41:df:eb:
         58:48:52:cb:36:40:b2:29:77:ec:2a:91:ff:d9:e3:f3:d9:93:
         02:47:60:0d:12:ef:33:de:65:e8:91:50:5b:62:bb:d1:76:17:
         31:a7:52:d8:2b:db:14:64:33:0e:0f:0f:97:6e:18:0c:92:40:
         db:03:ca:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----