Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/c9t_X531wwDSoblrpLProQH3ETQ.roa
File:                     c9t_X531wwDSoblrpLProQH3ETQ.roa (raw, json)
Hash identifier:          QTCj7J+tQZ9rd+5diAkAGSrPOZkigXmDuDqi4WKAaAw=
Subject key identifier:   73:DB:7F:5F:9D:F5:C3:00:D2:A1:B9:6B:A4:B3:EB:A1:01:F7:11:34
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0A44
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/c9t_X531wwDSoblrpLProQH3ETQ.roa
Signing time:             Wed 29 Sep 2021 02:52:51 +0000
ROA not before:           Wed 29 Sep 2021 02:52:51 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     18424
IP address blocks:        121.50.144.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2628 (0xa44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Sep 29 02:52:51 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=73DB7F5F9DF5C300D2A1B96BA4B3EBA101F71134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:81:ba:ef:53:c0:b6:8c:84:7a:f1:81:01:04:
                    55:bc:a0:c0:4e:ae:c2:89:b9:e8:19:24:ef:5d:a1:
                    06:7b:00:a2:a7:b6:c2:28:3c:54:d8:ea:7a:d3:33:
                    1e:0b:64:bb:96:6d:8e:6a:26:8e:36:12:5f:72:90:
                    84:a3:c7:e9:d5:0e:a3:42:aa:f1:18:65:a6:19:7a:
                    34:b3:13:2d:64:0e:d0:49:e4:a7:eb:d0:04:f6:18:
                    32:de:31:5d:71:d0:69:a2:af:f9:2c:4f:aa:6e:5a:
                    6c:01:3d:73:1d:0e:52:ee:e5:bb:22:13:0b:e0:f2:
                    23:26:ca:27:75:e2:4b:91:fe:cc:99:4e:6e:f9:99:
                    7d:60:30:e2:5e:22:71:3e:0b:43:ce:5f:bd:d6:1d:
                    91:ec:4f:ba:bc:62:bc:29:df:47:b5:56:49:5d:31:
                    77:3f:88:64:03:fa:b8:fb:14:4e:f2:f8:f0:46:71:
                    5a:20:b5:7a:00:a7:5f:13:79:72:b3:e6:4f:cd:6f:
                    db:b3:98:cf:d3:b2:f2:fb:f3:26:3e:c9:da:0b:31:
                    16:9d:1f:49:b3:38:f4:25:e6:71:c2:15:34:85:22:
                    90:e1:be:14:3f:b3:b9:7e:e7:84:ad:75:64:20:10:
                    bb:d9:97:5b:33:49:06:57:a1:37:50:63:d8:e0:58:
                    52:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:DB:7F:5F:9D:F5:C3:00:D2:A1:B9:6B:A4:B3:EB:A1:01:F7:11:34
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/c9t_X531wwDSoblrpLProQH3ETQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.50.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:01:4c:df:fc:d8:47:86:c1:29:8b:be:b3:ce:3e:b8:9c:02:
         dd:35:f0:52:46:e0:20:df:37:2f:f9:34:62:43:59:ec:7f:d1:
         46:8b:26:f1:4d:55:20:f4:b5:43:68:8e:c4:55:b6:2a:bc:8a:
         ff:ad:42:77:05:55:67:78:58:68:d0:da:8b:28:c8:2c:4d:8c:
         83:b4:59:e4:57:9e:c0:fb:bb:5a:b5:65:dd:6e:3b:b3:77:28:
         b0:1f:3a:c9:0c:43:f2:a8:b9:2d:d2:15:8c:b6:c8:6e:ed:83:
         cb:2f:35:e6:7b:83:49:1e:c8:66:92:83:f2:6c:f6:83:91:09:
         58:68:58:1a:3d:8e:ef:ef:73:6b:ac:a0:1d:7e:f0:dd:2a:ec:
         11:f6:62:75:fd:0b:08:9a:78:17:db:ac:2b:6c:fc:9e:d4:f5:
         b1:c9:a1:fc:2d:99:14:6e:fd:14:ff:09:fc:be:9c:64:aa:3e:
         8e:c8:3f:25:d6:b4:2e:52:f1:9a:d3:77:77:63:6e:91:07:2f:
         41:51:24:14:01:16:31:6c:a3:e0:58:ad:f4:77:b6:dc:fd:5d:
         fb:fc:7b:57:50:7e:6f:d6:e7:d4:ca:d9:98:55:eb:5a:90:98:
         a6:98:5d:e4:d4:44:fb:c8:b3:08:54:54:20:36:fe:68:5b:cc:
         ce:de:70:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----