Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/UIyGWtETyGptFz8JxCZ9JDEoRcg.roa
File:                     UIyGWtETyGptFz8JxCZ9JDEoRcg.roa (raw, json)
Hash identifier:          DKUlHiftvh6Hv2DNAFr2QrWozEhj6eqBmHjldpClHqc=
Subject key identifier:   50:8C:86:5A:D1:13:C8:6A:6D:17:3F:09:C4:26:7D:24:31:28:45:C8
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       09A2
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/UIyGWtETyGptFz8JxCZ9JDEoRcg.roa
Signing time:             Fri 19 Feb 2021 02:54:47 +0000
ROA not before:           Fri 19 Feb 2021 02:54:47 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24168
IP address blocks:        121.50.144.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2466 (0x9a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Feb 19 02:54:47 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=508C865AD113C86A6D173F09C4267D24312845C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e0:fb:26:9f:bd:5a:6c:53:86:30:d7:fe:47:
                    f3:61:de:a2:e3:27:e1:05:27:34:31:d4:6d:ad:0a:
                    d1:a0:1c:62:87:ca:92:39:f0:9c:94:60:f0:de:1e:
                    9b:00:a8:55:4e:e0:2e:98:eb:72:44:12:91:2f:27:
                    62:98:84:df:31:84:d3:d2:70:50:93:47:b5:f8:df:
                    f3:55:c7:eb:81:97:61:1e:b1:43:fe:cd:d5:b7:23:
                    bb:cd:06:9a:07:b7:9a:d2:b8:93:41:35:79:29:d1:
                    a0:5d:ad:3e:72:67:7d:7d:c6:d4:ba:aa:7b:8f:bf:
                    06:96:d7:03:62:ad:15:70:0c:77:8c:d3:86:7c:5d:
                    8b:8d:4d:d8:e4:a0:60:b7:c9:f8:ec:51:8e:7c:af:
                    15:3e:91:17:0c:59:00:29:bb:fe:68:b8:f0:a5:d5:
                    a0:c6:d5:74:68:f3:14:e2:54:c2:42:6f:ad:59:b4:
                    3f:47:b7:90:d6:9a:df:12:0d:d8:40:6a:64:f8:87:
                    36:f4:d5:d2:94:67:80:a8:3e:91:cb:5a:19:c9:a2:
                    8b:f5:8f:e8:90:b8:e3:3f:a2:dc:b1:44:3c:9c:3e:
                    3c:93:bf:30:26:b5:4b:d2:5c:09:31:6a:f9:fa:33:
                    e3:4c:fb:fa:a9:0a:84:9f:85:f3:f5:cd:da:b2:6f:
                    25:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:8C:86:5A:D1:13:C8:6A:6D:17:3F:09:C4:26:7D:24:31:28:45:C8
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/UIyGWtETyGptFz8JxCZ9JDEoRcg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.50.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ac:b0:e1:70:5a:f9:76:d0:62:24:09:52:28:d7:14:68:e5:19:
         e3:6e:bf:43:1e:4b:93:83:7b:fc:12:d4:63:ed:98:b5:33:78:
         3e:7c:ff:33:a3:a7:4d:f2:95:14:5f:b5:26:68:2a:e4:d5:81:
         aa:59:83:29:fb:3b:45:a2:75:0e:01:35:b7:63:1e:5d:51:2f:
         60:45:9e:b4:e1:ed:2f:1c:80:fb:b2:d9:1e:4e:c7:8c:8b:ab:
         d2:3c:cd:95:c5:f9:5a:8e:d6:fa:ad:dc:42:e6:cd:fb:fd:03:
         c7:2c:09:4f:2d:26:d2:c7:6d:1d:da:40:cb:8d:e3:e1:41:75:
         81:7d:6e:d6:2a:ce:85:9c:84:6f:30:58:67:90:bc:2f:2a:29:
         67:b0:04:3e:8a:63:33:c7:61:91:20:98:ca:f6:cf:b6:46:b0:
         82:6e:7d:c1:ca:13:96:ee:b7:d0:9d:8d:e7:71:a4:68:0d:4d:
         17:68:96:cc:03:ef:f0:97:6f:14:8d:69:09:e6:6b:7e:10:13:
         9a:ea:5e:9f:40:76:d1:0b:af:ef:ce:14:0a:a8:68:3f:92:fd:
         14:1d:2a:17:59:fd:3f:2c:b5:3c:62:e2:63:19:c9:f0:6f:43:
         95:e1:04:6d:c9:4e:d6:32:37:52:56:bc:55:06:fc:46:96:7b:
         4f:9c:07:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----