Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/Gn-RKXLciCXRhcz43PcgrxBfZJY.roa
File:                     Gn-RKXLciCXRhcz43PcgrxBfZJY.roa (raw, json)
Hash identifier:          4D0WMFPMNTVUOC1ej45EdurfoF0ItPkNow0VkgaR9Lo=
Subject key identifier:   1A:7F:91:29:72:DC:88:25:D1:85:CC:F8:DC:F7:20:AF:10:5F:64:96
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0868
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/Gn-RKXLciCXRhcz43PcgrxBfZJY.roa
Signing time:             Wed 04 Nov 2020 08:39:34 +0000
ROA not before:           Wed 04 Nov 2020 08:39:34 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18424
IP address blocks:        121.50.148.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2152 (0x868)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Nov  4 08:39:34 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=1A7F912972DC8825D185CCF8DCF720AF105F6496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:22:0d:6a:bf:1d:66:35:48:42:17:91:d3:9f:
                    ad:28:2b:cc:3e:7b:86:cb:b2:46:79:7e:f9:f8:09:
                    ce:7a:44:6d:3c:69:21:be:50:85:c5:1b:62:11:f0:
                    c7:79:26:3f:be:b0:15:a7:f8:d0:32:c8:70:ed:d5:
                    46:ad:f5:14:e2:85:59:b2:cb:93:fd:70:65:01:58:
                    62:f8:39:5b:6f:f6:df:49:d5:ed:cc:30:a4:99:a5:
                    87:d1:e4:a7:9c:59:3e:ce:95:3a:90:25:a9:1e:1d:
                    4f:75:ef:7a:e0:ca:1b:df:3b:0c:24:36:a2:22:03:
                    f9:37:c6:ec:da:b1:63:a7:19:c2:0b:b7:27:05:84:
                    12:f7:b5:d8:6c:bf:e1:f7:c8:3e:18:f8:c2:51:da:
                    f6:71:04:b9:44:51:ab:9f:62:62:6b:4d:b8:53:df:
                    cb:2e:23:c5:c1:4f:2c:8e:41:c4:5f:07:f6:11:41:
                    85:7a:68:12:12:f3:9c:5f:9c:1c:ec:a6:eb:dd:41:
                    72:7e:e0:5d:c3:79:33:41:57:62:32:24:45:62:59:
                    7e:ff:51:3d:fb:0c:e3:83:fa:1a:8a:b2:2a:f7:08:
                    81:3f:43:94:01:b0:37:cc:3a:d7:73:97:4e:fb:cd:
                    e0:06:b3:c8:9d:87:0c:8e:91:6c:f4:7d:f9:be:19:
                    08:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:7F:91:29:72:DC:88:25:D1:85:CC:F8:DC:F7:20:AF:10:5F:64:96
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/Gn-RKXLciCXRhcz43PcgrxBfZJY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.50.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:ad:c3:b0:63:f6:52:6a:57:20:41:ff:37:e8:6e:97:b8:41:
         29:5e:b6:b1:3f:ad:5c:77:a8:db:9f:53:84:45:94:28:64:60:
         a2:55:c0:aa:e3:e6:7f:d0:30:ae:24:9f:bc:5e:75:7b:e0:ad:
         c1:22:8b:14:19:1a:93:29:6d:17:1f:81:e5:9a:1c:d3:65:4f:
         ab:d9:97:02:81:e1:c2:d6:b7:f2:53:1a:7f:32:cd:fa:50:25:
         c2:4c:1b:67:c9:67:ce:01:c6:c1:03:dd:83:64:7a:3c:94:70:
         9a:88:1f:59:1a:ef:9e:76:23:01:96:4e:a6:3c:72:02:ee:ff:
         c7:95:02:39:d7:fc:a5:5c:40:d5:82:f0:6c:52:25:0d:f5:60:
         63:ba:d5:fa:b4:61:be:20:35:9f:e0:f3:65:8b:99:36:18:ff:
         9f:bf:0e:5f:f6:b3:e0:c3:2a:27:2d:a3:f5:4e:0c:16:2e:51:
         18:69:3d:97:0a:8c:6f:c6:3c:2e:81:ee:62:a7:9c:c3:1e:6c:
         81:d9:db:80:6e:8a:9f:9c:9f:93:39:0a:38:cb:b8:2c:d9:ee:
         85:83:80:98:ba:54:17:1a:c7:5c:7e:c6:b8:df:7d:c1:42:24:
         0b:00:4f:7c:73:26:aa:d9:ac:18:44:e1:67:5c:2a:ee:92:c3:
         de:00:0b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----