Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/i6rSKEkLyP4-G0t1CdKUudK84eA.roa
File:                     i6rSKEkLyP4-G0t1CdKUudK84eA.roa (raw, json)
Hash identifier:          VqIUZkusHojjju82qarAN488jRvR8K72i6ub3tPRKt4=
Subject key identifier:   8B:AA:D2:28:49:0B:C8:FE:3E:1B:4B:75:09:D2:94:B9:D2:BC:E1:E0
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0793
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/i6rSKEkLyP4-G0t1CdKUudK84eA.roa
Signing time:             Tue 29 Sep 2020 10:00:34 +0000
ROA not before:           Tue 29 Sep 2020 10:00:34 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24168
IP address blocks:        121.50.145.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1939 (0x793)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Sep 29 10:00:34 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=8BAAD228490BC8FE3E1B4B7509D294B9D2BCE1E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ee:09:b0:fd:b7:e5:c1:36:ec:95:3f:77:63:
                    fd:68:f2:b7:06:64:28:ab:40:af:80:e0:c4:f1:3d:
                    c3:6d:94:ad:54:e9:2a:68:01:de:b4:43:f2:7d:91:
                    08:9e:ea:81:d1:ee:d2:49:5f:98:2e:03:01:52:02:
                    8d:ac:ab:f3:8b:28:34:02:c6:37:e1:04:6d:a5:2f:
                    19:a5:53:fc:b5:8e:2b:36:69:9d:d5:e4:dc:3c:8d:
                    e7:95:0d:16:23:b0:24:4d:f3:a6:8a:0c:ea:e0:10:
                    fd:94:24:aa:b6:6b:36:54:cf:f0:29:22:e2:51:8f:
                    c8:41:f6:75:28:ab:16:28:03:d1:c9:c9:56:b2:97:
                    65:f5:67:a4:fa:12:51:c5:d1:b2:75:52:48:55:70:
                    f8:b7:8c:e5:d7:81:ed:09:49:65:d6:a9:76:e8:ef:
                    c6:e2:71:b8:c8:f5:6b:7b:ec:85:3b:ef:9f:81:48:
                    af:5e:71:33:dd:ef:23:dd:28:4b:95:a8:49:51:a5:
                    aa:5a:d4:c1:24:f0:56:ac:b5:e7:16:fc:69:c3:84:
                    39:9e:1d:1c:88:4b:36:0f:0e:72:16:75:43:c6:98:
                    6c:56:29:3c:c0:55:3b:39:4a:04:48:67:c1:f0:65:
                    c1:59:39:91:47:df:30:34:8e:68:ba:0c:5e:33:fe:
                    b5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:AA:D2:28:49:0B:C8:FE:3E:1B:4B:75:09:D2:94:B9:D2:BC:E1:E0
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/i6rSKEkLyP4-G0t1CdKUudK84eA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.50.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:3c:84:25:12:12:3f:ba:38:e4:fd:80:7e:2e:75:82:ed:4a:
         d8:f0:fe:24:1e:43:0f:d1:ea:a0:a4:39:7b:f6:e4:af:7b:30:
         19:4b:fe:6e:9e:f6:df:bd:2b:15:93:09:0f:3f:05:eb:f8:32:
         83:5c:47:46:4c:1a:dd:68:69:4e:d8:32:e8:7a:50:07:ca:6a:
         18:16:76:1e:6c:bc:b7:15:41:25:64:1a:7c:42:51:82:37:ad:
         bf:4e:e6:fe:51:a8:a0:2b:fa:74:e9:de:fc:8d:96:b0:8d:cf:
         93:5e:28:54:d3:4b:6f:6a:fe:67:f6:06:5e:91:dd:70:af:8c:
         d6:2a:a9:4c:2f:6b:15:d9:37:a3:f0:70:5f:d4:3c:7d:d4:e8:
         b0:83:65:dc:21:77:9b:02:06:a2:ab:1a:44:70:b4:66:f7:e6:
         16:03:73:54:49:a5:ea:08:50:c0:ea:4e:ad:68:d3:65:3a:17:
         b3:10:f0:20:17:b9:5e:2e:5d:26:95:4e:ab:0b:97:f3:b9:7f:
         ab:cb:d9:de:2f:e4:91:1e:28:e2:be:3b:ff:6c:00:9b:8d:48:
         3b:e5:79:5d:4f:59:b6:4a:a4:92:0e:95:b5:18:f0:de:c3:3d:
         1c:bb:2c:e9:98:ae:b5:a1:94:39:cf:a4:95:a0:3c:c0:de:70:
         fa:fe:a2:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----