Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/bkd0CX8qaMkp7BpEUqkuE2dfMV0.roa
File:                     bkd0CX8qaMkp7BpEUqkuE2dfMV0.roa (raw, json)
Hash identifier:          YFyfdUKjpzJtD/w3Ayx3KzGyaXS1zZFSpXBk7IDifPM=
Subject key identifier:   6E:47:74:09:7F:2A:68:C9:29:EC:1A:44:52:A9:2E:13:67:5F:31:5D
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0A42
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/bkd0CX8qaMkp7BpEUqkuE2dfMV0.roa
Signing time:             Wed 29 Sep 2021 02:52:50 +0000
ROA not before:           Wed 29 Sep 2021 02:52:50 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     18424
IP address blocks:        121.50.146.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2626 (0xa42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Sep 29 02:52:50 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=6E4774097F2A68C929EC1A4452A92E13675F315D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8a:42:67:e4:58:8f:15:5a:71:40:6c:bb:9f:
                    6e:4e:b2:24:fa:9b:15:05:3e:39:b6:38:a5:3f:0d:
                    6f:d4:cb:84:09:1a:98:ed:68:4b:91:8c:f8:ee:da:
                    af:53:1c:02:c4:53:9e:a9:f8:92:42:55:ef:97:b8:
                    77:eb:18:ef:d8:4d:13:38:da:b9:db:26:45:20:97:
                    cb:9d:2c:09:d3:6a:4f:ba:1c:d4:c7:10:42:9a:2a:
                    10:40:ac:2e:5b:04:3f:0c:0d:2f:99:c3:fc:be:2e:
                    41:08:16:d2:54:33:cc:ea:87:a1:e7:46:02:34:19:
                    9c:16:f7:58:49:5b:4a:0d:f2:c0:b8:ee:b4:92:d9:
                    68:24:de:75:85:26:78:33:98:96:84:89:88:d1:bc:
                    25:b8:f4:fd:48:b7:5f:35:e2:b8:81:41:fd:93:51:
                    82:ee:6e:48:f9:cb:52:79:be:ae:5c:df:fd:2c:d6:
                    70:34:61:9a:80:61:78:ba:00:bc:fa:89:bb:be:f4:
                    08:1e:fb:fd:a1:f2:d6:fc:a7:c0:f0:a4:47:a8:ad:
                    71:19:6a:b5:bb:87:e5:da:d5:cc:fc:b0:a9:03:19:
                    37:4d:ac:6c:a2:77:66:ff:47:7b:28:a4:a9:81:f7:
                    8c:ee:42:a9:f9:f3:b0:0d:6e:8d:53:8e:99:db:38:
                    62:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:47:74:09:7F:2A:68:C9:29:EC:1A:44:52:A9:2E:13:67:5F:31:5D
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/bkd0CX8qaMkp7BpEUqkuE2dfMV0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.50.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:78:de:b9:45:b1:91:dd:0d:a0:98:4a:82:35:24:3b:83:04:
         ce:23:98:c6:48:ad:31:d8:a8:2e:1e:0a:e2:0b:3f:5d:2d:52:
         8a:8b:40:7b:9c:84:02:49:ec:93:be:90:25:36:a2:07:7e:b0:
         d6:90:b4:ac:ea:77:1b:85:fd:46:92:9e:cd:39:b1:57:ed:3c:
         40:f2:31:5d:e9:f9:e5:4b:00:ad:c9:d9:e9:f9:71:91:ac:e7:
         74:23:2a:f7:b4:6d:69:1b:46:e9:f0:9f:17:17:6b:3c:6b:bb:
         07:23:e5:b0:1d:6d:63:74:e1:a7:9a:5c:0d:37:55:90:dc:49:
         e2:4b:0d:99:58:9d:16:4a:f3:35:69:54:cf:c5:0d:93:38:bd:
         83:5e:0c:e5:73:ba:7f:51:76:3a:8f:c8:61:e2:dc:1f:92:e1:
         42:9c:de:31:83:8e:e8:57:93:18:1c:14:9e:3f:d4:db:25:c1:
         20:d6:eb:af:03:8f:d0:f6:47:95:61:e5:b2:df:f8:29:12:49:
         cc:ad:4a:4a:d1:e9:a1:ba:75:f6:0e:2c:ab:d0:05:0c:fa:c9:
         02:8b:44:70:b7:a3:c9:67:b8:80:9c:ed:6f:9d:73:4a:5f:02:
         d6:be:ca:51:2c:d7:a2:25:a2:ff:c2:5c:2a:8d:ed:d5:53:7d:
         c4:6d:07:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----