Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/P5pYVn0X834wrd788KK7TSKoTQ8.roa
File:                     P5pYVn0X834wrd788KK7TSKoTQ8.roa (raw, json)
Hash identifier:          OFAaQlld8pzxU1nSx8BpAIsGvrfdufgg+rDGPYlkXDM=
Subject key identifier:   3F:9A:58:56:7D:17:F3:7E:30:AD:DE:FC:F0:A2:BB:4D:22:A8:4D:0F
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0A4A
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/P5pYVn0X834wrd788KK7TSKoTQ8.roa
Signing time:             Wed 29 Sep 2021 02:52:52 +0000
ROA not before:           Wed 29 Sep 2021 02:52:52 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24168
IP address blocks:        121.50.150.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2634 (0xa4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Sep 29 02:52:52 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=3F9A58567D17F37E30ADDEFCF0A2BB4D22A84D0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:01:09:3b:ab:76:f2:8c:9d:3d:ae:00:79:cc:
                    c4:c6:5e:ef:04:b1:01:91:04:2b:04:c0:d9:05:74:
                    82:0c:53:be:97:c1:28:d0:58:35:fe:75:e6:5d:70:
                    cc:4d:41:ab:bf:eb:e1:d5:ca:d8:16:f0:55:92:72:
                    d2:74:2d:e2:05:84:ea:87:0b:70:c1:14:be:8c:ca:
                    3e:2b:4a:a3:d0:28:7a:84:f9:ad:b9:c7:d0:1f:4f:
                    86:50:d0:cd:24:e0:a2:3f:16:9e:df:7c:1a:45:7f:
                    47:67:dc:d9:a4:b3:3a:90:1a:48:8d:42:37:ac:47:
                    7c:c2:8a:65:23:11:1f:b6:d8:7f:0c:1f:6a:f8:f3:
                    6f:af:f0:c3:5b:63:7b:07:db:7d:f4:4d:59:61:45:
                    10:0b:07:b8:7d:ae:f3:41:73:95:43:4c:78:a7:d5:
                    92:e7:f5:de:58:55:ca:22:38:ce:21:8c:37:bc:ad:
                    d1:ca:2f:c9:f2:01:a0:41:da:47:ea:45:17:3c:2a:
                    f3:ac:13:fc:e5:f2:c4:1e:60:1c:4c:98:0b:a6:0b:
                    57:0e:f8:a5:3a:d8:95:8f:2f:41:39:d8:6e:05:98:
                    f6:76:f6:50:a0:81:7b:a6:aa:c4:62:59:68:b3:5e:
                    78:d7:d3:30:f6:b2:66:83:b5:3d:1b:4b:c8:a2:34:
                    fb:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:9A:58:56:7D:17:F3:7E:30:AD:DE:FC:F0:A2:BB:4D:22:A8:4D:0F
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/P5pYVn0X834wrd788KK7TSKoTQ8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.50.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:2c:75:8b:60:94:bb:ec:49:7b:66:df:bf:05:60:ba:63:fc:
         3a:3d:ce:d4:99:26:2f:b5:4b:c0:f5:ab:59:01:d1:7c:2c:61:
         e4:11:59:4c:81:9b:f3:29:08:07:0b:b5:3c:60:37:c9:03:ac:
         38:c6:de:30:5c:ba:f2:5b:9d:79:52:a1:1e:13:97:c5:cb:95:
         45:1e:45:c7:ad:e1:e7:db:ed:34:50:08:d2:98:4d:b9:69:c6:
         a2:9b:db:f3:bb:a0:be:3a:e4:bc:83:28:45:c5:73:76:d1:ab:
         ab:12:ed:0c:d7:d7:1e:fe:dd:2a:60:60:62:06:7a:52:cd:99:
         7a:9e:3e:8e:de:ad:71:30:37:4e:2b:dc:0b:46:64:ca:69:0f:
         e3:e3:03:2e:a5:7d:6f:0d:63:66:50:05:ed:40:e9:1c:f7:2f:
         0d:6c:62:7a:a4:db:27:0b:46:ad:5d:f1:91:d4:65:12:1f:7c:
         80:06:64:bf:2c:82:9f:18:80:fd:31:ed:b2:5a:b4:17:fa:67:
         51:90:f4:43:c2:25:d5:f2:25:bf:65:7f:95:5a:63:65:ad:48:
         5e:bd:a4:8f:b4:16:90:0a:dd:32:8d:fa:c0:09:ee:9d:3a:40:
         c1:48:6f:4b:14:eb:3c:68:0f:17:ca:f7:93:2b:3a:d3:61:34:
         3b:d4:1d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----