Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/OsNRz96cetxIxb379yr30GujPVE.roa
File:                     OsNRz96cetxIxb379yr30GujPVE.roa (raw, json)
Hash identifier:          1GXpY09/cOCqOVxbT3E12PjLnpKd+1kRwv0to/HufgQ=
Subject key identifier:   3A:C3:51:CF:DE:9C:7A:DC:48:C5:BD:FB:F7:2A:F7:D0:6B:A3:3D:51
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0A3A
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/OsNRz96cetxIxb379yr30GujPVE.roa
Signing time:             Wed 29 Sep 2021 02:52:48 +0000
ROA not before:           Wed 29 Sep 2021 02:52:48 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     18424
IP address blocks:        103.30.44.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2618 (0xa3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Sep 29 02:52:48 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=3AC351CFDE9C7ADC48C5BDFBF72AF7D06BA33D51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c0:84:a6:3c:2f:8c:79:0b:b7:c4:60:bb:28:
                    04:69:18:b5:95:21:b3:25:a7:1b:f9:4d:80:87:a7:
                    b5:47:a6:53:74:db:85:da:f4:44:a0:87:0d:45:cc:
                    3f:b2:a0:4d:d8:ae:83:89:9c:3c:a6:50:8a:5f:a8:
                    c4:8b:d6:9e:11:62:2e:13:8e:39:62:fd:90:92:ea:
                    58:80:28:77:37:20:bf:e4:27:5e:aa:d8:40:86:53:
                    b5:4c:2d:bf:48:d3:76:d0:27:e9:c2:d9:d8:11:dc:
                    c9:9c:20:82:69:db:a7:30:ec:e4:ba:32:8f:94:a5:
                    07:2f:5f:f9:84:0f:09:e3:67:0d:5f:b0:10:d5:2b:
                    c4:d2:12:2b:e6:65:89:1e:95:38:76:0c:89:b0:bf:
                    8f:89:92:ce:e4:c8:32:9a:33:da:8a:9c:9a:07:59:
                    c7:9e:34:80:21:75:ee:e6:1e:6a:bc:7f:19:74:ee:
                    ef:5c:e2:2d:56:25:a3:c1:5f:22:10:88:f6:57:e9:
                    b0:9b:36:18:48:e0:20:2c:5c:7a:22:ec:55:91:0b:
                    d4:d7:8e:53:a3:c3:2d:7e:9d:b3:66:28:bc:fd:ed:
                    76:e5:50:ba:e5:a8:82:0b:cc:a1:20:e6:bf:88:3b:
                    50:86:c8:12:7c:3f:11:bb:32:e3:bf:b8:0f:05:d2:
                    e2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:C3:51:CF:DE:9C:7A:DC:48:C5:BD:FB:F7:2A:F7:D0:6B:A3:3D:51
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/OsNRz96cetxIxb379yr30GujPVE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bc:9d:4d:2e:f3:6e:7e:9e:9e:18:54:54:54:66:af:36:e6:af:
         c6:31:d3:98:57:6d:48:30:fe:61:b0:6d:37:b1:78:2e:5e:88:
         a2:9f:4c:7e:c3:48:b1:3f:dc:ab:95:82:1f:21:a7:7c:d6:cc:
         d9:cb:66:22:8b:8b:b7:5e:cd:28:e5:3d:16:b0:2f:e6:b6:c9:
         54:9c:8c:17:fc:64:53:53:22:36:a2:93:28:d6:fc:f8:37:16:
         39:07:e0:8e:92:78:58:99:9c:c6:48:46:0b:16:4f:91:c7:31:
         b3:3d:26:aa:6b:d5:59:95:31:bf:68:78:62:fd:3c:fc:d1:42:
         72:01:87:9a:f3:e7:47:e4:3a:2f:18:85:a2:2b:02:53:55:8f:
         13:dc:37:9a:f0:da:20:a1:13:dd:a2:e4:3e:e2:3e:67:b6:98:
         d4:c8:41:f3:a9:49:35:82:35:0f:58:29:0a:9a:b1:81:83:f5:
         66:93:6b:1c:3e:72:fd:d3:a6:ce:3b:3e:1e:bc:08:cf:af:6c:
         6f:6a:bf:65:04:f4:ed:25:34:62:ce:80:f2:bd:bc:ff:1c:5e:
         46:23:5f:df:35:73:58:4d:fe:51:92:1d:ae:0c:81:18:15:b4:
         7d:87:ff:5f:8c:03:3a:f1:49:01:e3:be:4f:9e:c8:c8:1c:e4:
         36:d4:ba:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----