Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/aSbmvCgUpR4IeELXRwghckSKmoA.roa
File:                     aSbmvCgUpR4IeELXRwghckSKmoA.roa (raw, json)
Hash identifier:          dQOS6DyzXJGuctvX6tpAc0lYzgJZ4tCwKy1Whu7zWGY=
Subject key identifier:   69:26:E6:BC:28:14:A5:1E:08:78:42:D7:47:08:21:72:44:8A:9A:80
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0A41
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/aSbmvCgUpR4IeELXRwghckSKmoA.roa
Signing time:             Wed 29 Sep 2021 02:52:50 +0000
ROA not before:           Wed 29 Sep 2021 02:52:50 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     18424
IP address blocks:        121.50.148.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2625 (0xa41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Sep 29 02:52:50 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=6926E6BC2814A51E087842D747082172448A9A80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:01:c9:84:8f:9c:2a:8e:41:81:a9:14:6a:9e:
                    74:57:63:ca:26:80:21:65:fc:9b:b6:b5:56:1c:b9:
                    49:73:4d:00:99:15:a1:8a:ab:44:10:fb:3b:e5:0d:
                    13:89:6b:e0:9f:a3:0f:14:0e:00:67:3a:b9:1a:32:
                    10:8c:d5:da:85:2b:33:4b:00:6f:fc:c3:59:83:eb:
                    b7:47:bf:84:f2:93:75:d1:8b:fc:de:7e:bb:99:ce:
                    61:d4:63:ab:53:bd:cf:ac:3d:d2:b2:28:5a:c8:88:
                    d0:3a:77:c4:16:4d:f8:e9:9d:0d:0d:69:47:d6:28:
                    90:91:f3:77:3e:a3:72:d8:11:57:27:0c:58:8e:d4:
                    c9:3a:fa:a7:37:27:fc:f7:6c:31:f8:21:1d:0f:c1:
                    56:6c:23:37:ae:80:5c:61:5e:1d:e3:48:1a:65:0e:
                    87:f1:9b:d8:af:f4:19:2a:39:ba:a1:46:62:e0:a4:
                    6a:ef:28:64:74:fd:67:03:81:31:2b:70:b8:80:7d:
                    47:bc:e6:96:54:86:45:96:36:9e:0d:4b:59:c6:99:
                    73:5c:45:0c:bc:5d:a9:90:27:59:43:74:24:05:db:
                    95:11:85:da:1d:08:41:bc:f9:cb:b4:f4:17:e0:27:
                    35:db:c0:ef:ff:06:b2:80:5d:b7:da:f1:a2:10:71:
                    d2:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:26:E6:BC:28:14:A5:1E:08:78:42:D7:47:08:21:72:44:8A:9A:80
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/aSbmvCgUpR4IeELXRwghckSKmoA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.50.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:69:e7:3c:bd:7c:d0:7a:d3:cc:63:28:61:6e:22:fc:9a:f8:
         fa:22:74:b6:59:6f:52:82:74:5b:78:5e:92:ec:ad:d1:e0:79:
         63:00:9b:9d:44:9b:64:5a:41:2c:2c:04:f5:4c:5e:4a:28:2a:
         c1:88:22:ce:47:b8:2c:4f:1c:13:5c:cd:33:bc:53:17:39:66:
         b7:80:62:5d:89:01:34:99:c5:27:4f:5c:a0:16:a3:42:4b:43:
         33:23:df:0c:ee:fd:b3:0c:28:c2:9f:a2:a1:0a:8c:d2:51:61:
         35:fb:f2:73:45:f4:6d:de:27:98:b0:a7:ec:0a:12:1c:08:c9:
         93:9d:43:99:e3:d6:4f:3c:63:68:c5:84:72:3e:15:94:2d:cd:
         c8:31:ec:67:0e:b5:6d:78:ae:74:b6:64:07:53:ea:4d:14:06:
         9d:b6:f8:11:42:e1:f5:13:cb:5b:14:99:cc:2e:3f:94:d2:16:
         7b:0b:45:e4:23:d2:fb:1b:65:32:48:6d:f7:10:34:f4:f2:a0:
         04:53:d7:6e:cb:18:e0:eb:b2:96:80:8b:2d:e8:e7:80:62:21:
         3d:6b:e3:63:62:a7:0a:65:b9:47:bd:a9:6f:89:6d:ec:25:01:
         e8:71:a2:5b:2e:ca:13:d9:f0:23:e8:50:5e:38:e8:11:ef:7d:
         50:1c:7e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----