Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/W_Rhu5yrU6-dhCbG9ax2a4JgQxc.roa
File:                     W_Rhu5yrU6-dhCbG9ax2a4JgQxc.roa (raw, json)
Hash identifier:          zArvIcUYtEPI5jmCy2QxOXcYmNNrNz8a1czBb6VsHVY=
Subject key identifier:   5B:F4:61:BB:9C:AB:53:AF:9D:84:26:C6:F5:AC:76:6B:82:60:43:17
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0979
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/W_Rhu5yrU6-dhCbG9ax2a4JgQxc.roa
Signing time:             Sun 07 Feb 2021 13:05:38 +0000
ROA not before:           Sun 07 Feb 2021 13:05:38 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18424
IP address blocks:        121.50.147.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2425 (0x979)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Feb  7 13:05:38 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=5BF461BB9CAB53AF9D8426C6F5AC766B82604317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:43:61:de:8a:99:33:09:71:79:ad:67:3c:d2:
                    bd:36:14:35:01:aa:2e:d5:ef:71:f1:54:b0:d0:ef:
                    bc:cb:eb:40:75:e3:97:2a:d7:10:5b:97:38:ce:9b:
                    b4:25:10:65:29:cf:8d:56:8e:2b:ca:fa:0a:67:56:
                    2f:e7:19:af:a2:7b:e4:33:de:ab:2b:c9:bf:65:de:
                    ba:32:d3:02:9b:85:38:37:56:94:99:e6:75:8f:31:
                    c0:c4:27:3c:dc:c2:dd:b5:88:4d:df:83:e3:b3:22:
                    8e:3d:75:5f:97:67:81:46:dc:31:63:b3:5c:86:9a:
                    d1:c1:c0:05:e5:3c:1d:66:4e:8e:58:e3:40:24:38:
                    f2:46:6d:02:b0:d5:a9:1a:dd:d3:83:52:43:bf:14:
                    51:a2:de:83:fe:40:2f:ec:05:31:2d:0c:df:f6:3c:
                    de:71:8c:3b:f6:64:d3:3f:a7:7d:dc:9b:90:a0:5d:
                    ef:32:c5:40:88:e5:95:2e:d0:fd:82:38:33:51:3a:
                    5c:49:28:bf:db:c6:a9:b9:98:fe:5d:d2:56:3b:0c:
                    b1:eb:46:2d:d4:14:23:c2:d8:8b:89:6e:b4:ed:cd:
                    a3:d3:4e:da:2f:15:b2:f4:f3:a4:c2:bb:9d:d6:02:
                    c9:75:e0:a1:c4:ea:cf:41:83:2f:b1:35:1a:e2:79:
                    81:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F4:61:BB:9C:AB:53:AF:9D:84:26:C6:F5:AC:76:6B:82:60:43:17
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/W_Rhu5yrU6-dhCbG9ax2a4JgQxc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.50.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:ad:f4:e6:dc:3c:19:53:4d:ed:75:58:c2:6a:f3:98:a4:f5:
         a1:5c:38:16:be:a4:25:3b:08:ce:af:b9:05:a4:0c:45:ec:83:
         96:bc:ed:51:3c:e0:5a:35:b0:6e:84:dc:d2:f1:30:8e:31:1f:
         7e:66:f7:f9:67:4a:8e:e2:58:f9:30:c5:97:e2:d8:c4:6f:03:
         63:02:ca:1c:37:15:d9:4c:32:f2:3b:f0:49:3d:c0:62:ae:72:
         9c:40:84:1d:69:1a:8e:ec:3f:a3:f7:1c:59:6e:62:1d:fb:7b:
         10:25:ac:bf:35:6b:0a:44:e2:9f:ad:2b:4e:32:00:48:b9:74:
         79:09:32:26:e5:79:6b:c6:30:26:62:98:ea:cf:5b:32:e5:b0:
         66:e1:2a:5d:b8:7f:43:00:d9:0d:75:ab:6e:32:83:74:fb:bc:
         2f:fc:27:3c:c7:8e:68:28:f2:38:76:46:7d:62:fc:cd:15:3a:
         94:95:eb:29:27:e3:f3:6c:25:ce:d9:a6:ea:18:db:7f:1f:b6:
         ad:24:07:a8:90:a8:93:5d:ae:57:e0:08:7d:ff:21:44:f3:ee:
         74:60:32:53:1c:f5:2a:50:3a:67:5e:73:da:b5:dc:03:f7:29:
         05:75:a1:e5:72:77:6f:4b:0a:e8:2a:d6:c1:2a:55:47:f9:bd:
         6c:7c:90:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----