Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/Q9C3pGUJ-sqvR0R7nOQMI2Zw7_U.roa
File:                     Q9C3pGUJ-sqvR0R7nOQMI2Zw7_U.roa (raw, json)
Hash identifier:          DtS/0xN47l44C9xD2Ds1e6j5SKIMeDASTJQRGPnU4Qs=
Subject key identifier:   43:D0:B7:A4:65:09:FA:CA:AF:47:44:7B:9C:E4:0C:23:66:70:EF:F5
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0A3F
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/Q9C3pGUJ-sqvR0R7nOQMI2Zw7_U.roa
Signing time:             Wed 29 Sep 2021 02:52:49 +0000
ROA not before:           Wed 29 Sep 2021 02:52:49 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     18424
IP address blocks:        121.50.150.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2623 (0xa3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Sep 29 02:52:49 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=43D0B7A46509FACAAF47447B9CE40C236670EFF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:b9:3e:61:34:f1:12:2f:59:08:4e:7f:43:75:
                    ce:02:9b:9d:8c:2e:68:05:48:af:6b:00:cc:1b:41:
                    18:9b:d1:b8:ee:89:3c:05:d2:23:da:d5:3d:ea:4e:
                    4b:d4:2b:fa:7d:9e:7c:1b:05:c9:3a:54:07:52:6b:
                    7d:7d:c6:f2:41:18:05:7d:72:89:a0:3b:6e:bf:d9:
                    06:5e:07:27:b3:d2:ea:dd:47:9f:4a:d7:6a:c3:d5:
                    51:12:85:6b:55:79:96:52:bd:f4:f8:a1:c9:6b:26:
                    ae:ad:27:03:7b:8c:c1:eb:df:fa:62:65:cf:00:af:
                    e0:88:cf:45:d9:31:e4:7c:b7:9f:1e:5c:73:6e:1c:
                    d6:43:de:1a:99:89:e9:a2:c6:b0:bb:b8:0c:15:9c:
                    26:c5:38:be:ea:b3:6b:8d:e2:90:ac:e3:bb:5d:55:
                    0e:6b:58:58:e3:1b:99:3f:b5:f7:b1:56:3d:0e:c8:
                    de:bf:0e:17:61:73:c1:ed:67:70:8b:a2:ba:b7:99:
                    01:84:1d:4b:b4:13:0e:c2:78:07:75:09:56:69:7d:
                    ae:36:8d:07:e0:1b:4e:dd:c1:85:70:ef:31:3f:dd:
                    09:29:2a:b6:66:48:4e:bc:2e:61:d9:e0:2d:61:93:
                    f6:b3:a3:fc:23:a1:bf:fc:f0:7f:64:a3:5d:40:3d:
                    b3:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:D0:B7:A4:65:09:FA:CA:AF:47:44:7B:9C:E4:0C:23:66:70:EF:F5
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/Q9C3pGUJ-sqvR0R7nOQMI2Zw7_U.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.50.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:0b:bf:12:40:5d:13:1c:13:41:c5:cd:3c:63:0f:80:31:ef:
         15:71:96:06:dc:c0:79:2d:ec:d5:12:e8:26:de:d6:27:5f:7c:
         b9:bb:51:b1:c6:e2:63:1a:87:1f:eb:2f:67:b0:83:32:6e:e4:
         45:6f:58:0a:47:2b:f0:69:a9:ca:8b:90:be:5d:8f:dc:5c:70:
         ef:32:d8:78:a9:f7:ae:f1:25:11:a5:74:ee:a1:50:26:b1:f2:
         e8:05:4c:a8:a5:13:6a:b3:c6:1b:0c:5a:ef:1f:e8:ed:16:98:
         de:c2:8a:9c:56:94:b9:52:01:d5:54:a8:a6:31:30:ae:27:21:
         be:3e:2f:85:e6:7d:ef:a9:53:f2:55:a6:1f:00:26:b2:b0:f5:
         81:7c:50:d0:84:71:aa:ba:40:f7:58:e3:e1:e0:41:8a:ba:f2:
         19:1b:0c:c5:05:67:bd:4c:9b:d3:d4:b6:c2:a1:85:ac:e4:3f:
         00:3d:f8:ef:b1:a2:78:0b:96:c8:72:03:2a:55:6e:25:d1:02:
         ce:8f:65:59:bd:8a:5c:36:1c:05:10:e7:f7:f2:98:db:bf:b8:
         3a:dc:7c:a7:e1:5f:0b:56:f8:09:89:f4:e8:9b:5a:82:d8:7e:
         ed:8c:bc:5d:90:61:44:9d:03:a3:c3:8e:8d:4c:7e:80:ae:3a:
         ea:d5:45:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----