Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/VwWBguNxSujVEnZCgrpPCkF-Bto.roa
File:                     VwWBguNxSujVEnZCgrpPCkF-Bto.roa (raw, json)
Hash identifier:          57M8uoQDZzwXy4oGjU86SLzgnc34+tTKR1akDSj6Df0=
Subject key identifier:   57:05:81:82:E3:71:4A:E8:D5:12:76:42:82:BA:4F:0A:41:7E:06:DA
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0A3E
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/VwWBguNxSujVEnZCgrpPCkF-Bto.roa
Signing time:             Wed 29 Sep 2021 02:52:49 +0000
ROA not before:           Wed 29 Sep 2021 02:52:49 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     18424
IP address blocks:        121.50.147.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2622 (0xa3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Sep 29 02:52:49 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=57058182E3714AE8D512764282BA4F0A417E06DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e4:4a:1a:87:5a:96:7f:ca:09:89:ac:60:8f:
                    0e:96:60:66:57:ce:c7:d7:a5:52:cf:86:fd:54:2e:
                    55:54:ac:70:05:f4:42:8a:67:71:7b:17:83:11:80:
                    6d:25:dc:56:eb:9b:90:6f:41:0d:83:21:12:75:1d:
                    9e:af:16:a7:39:b9:ae:08:b6:f1:25:ec:d6:80:ab:
                    7e:a3:58:52:6b:e5:44:27:34:05:5c:99:5c:1d:b0:
                    08:34:40:10:3c:45:57:9f:d8:42:e7:8e:07:b0:43:
                    9a:04:eb:f0:d8:c6:34:4b:ee:87:d9:7d:cd:76:8a:
                    60:29:d5:6c:a0:a1:d5:d2:14:d9:84:b1:43:2a:07:
                    88:5f:e9:87:54:a9:db:1a:d0:bf:5e:e8:7a:2b:3f:
                    68:91:15:8f:b5:98:29:63:dd:80:fc:10:b0:ec:03:
                    7c:58:38:60:ac:06:3e:03:6e:fe:42:c8:97:40:18:
                    a3:49:ee:6b:68:df:53:f7:5a:b7:7a:83:54:6c:21:
                    af:41:87:bc:28:b3:b4:d8:7b:47:4f:73:ce:18:f0:
                    8f:db:4b:8f:71:c5:6f:f9:e4:ec:53:b0:e7:71:3a:
                    8d:3e:68:7e:f9:b6:4f:73:30:57:e7:fe:7d:d1:0a:
                    1b:10:09:8a:d0:7c:a3:43:dc:21:eb:25:35:e8:83:
                    85:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:05:81:82:E3:71:4A:E8:D5:12:76:42:82:BA:4F:0A:41:7E:06:DA
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/VwWBguNxSujVEnZCgrpPCkF-Bto.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.50.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:f1:8f:f4:5e:6c:12:64:f5:73:1c:50:1a:f7:81:7a:53:c2:
         e4:b8:57:64:20:2f:cd:5b:6c:c4:8a:f2:af:ec:5e:54:54:06:
         f4:b7:66:23:5b:de:6d:6b:e3:a8:69:9c:7d:cb:cb:d4:e8:f7:
         47:a1:b6:2b:31:a3:52:9e:ca:64:64:95:ae:3c:15:3e:a6:8a:
         ab:f9:c0:9c:0d:e5:c6:84:77:ed:f9:81:81:ac:38:8e:c8:da:
         49:1c:83:65:5c:4a:9c:90:80:5d:c0:72:b9:22:7f:e6:0b:3f:
         4d:ed:45:f1:97:9c:c7:b3:2f:89:11:6e:31:41:d9:6c:63:08:
         d4:13:18:e7:f5:df:81:18:a8:8b:36:c4:78:82:c8:a3:56:10:
         78:4e:e8:03:db:95:50:07:e1:99:f9:5d:40:3a:71:42:99:2d:
         81:dd:5c:f7:b0:9e:36:a1:82:53:f3:20:24:91:a1:2f:20:bf:
         ec:98:99:bf:1f:4b:57:4c:8a:fc:d4:ff:e5:11:ba:44:83:e3:
         3b:14:07:c4:c7:9c:fb:23:c1:e2:53:24:75:bf:22:ac:b4:5f:
         4d:2d:17:96:c8:aa:50:be:d8:51:00:b1:cb:df:25:14:70:f1:
         b5:d6:1e:e1:00:56:4e:fa:9d:b2:04:bd:a5:57:a3:3c:bc:4b:
         b7:be:e0:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----