Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/wqjpneuV9AUlluK_LgrHF-TxgZM.roa
File:                     wqjpneuV9AUlluK_LgrHF-TxgZM.roa (raw, json)
Hash identifier:          bsl7gF3+Z4tylBz9ZdP8cdKxxbUDWNuMBomzlv8akE8=
Subject key identifier:   C2:A8:E9:9D:EB:95:F4:05:25:96:E2:BF:2E:0A:C7:17:E4:F1:81:93
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       078D
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/wqjpneuV9AUlluK_LgrHF-TxgZM.roa
Signing time:             Tue 29 Sep 2020 10:00:32 +0000
ROA not before:           Tue 29 Sep 2020 10:00:32 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24168
IP address blocks:        121.50.150.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1933 (0x78d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Sep 29 10:00:32 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=C2A8E99DEB95F4052596E2BF2E0AC717E4F18193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:87:47:18:1b:94:2f:d0:96:4d:4f:ff:3f:48:
                    f1:3b:21:c4:6a:26:06:62:01:fc:02:f9:81:29:6b:
                    45:c6:5e:1f:43:96:dc:96:5e:b6:9a:f4:ba:23:3a:
                    7b:62:7e:38:83:cd:44:21:0e:92:79:e6:f0:75:00:
                    35:bb:22:65:ba:6a:44:d2:d1:a7:56:3d:f7:97:b4:
                    25:c6:ad:52:6f:ad:44:3a:19:68:0b:91:a1:24:6f:
                    57:8a:17:ac:14:a6:47:bd:9a:1a:e8:b2:c4:df:56:
                    b1:e2:cc:ec:f5:f9:98:c0:6e:51:60:eb:3d:2b:78:
                    51:26:7f:8f:a9:66:b2:3c:d4:95:77:73:dd:cb:36:
                    2d:90:12:3e:70:f1:95:fa:ab:4b:1f:e7:59:e1:fd:
                    40:3a:ee:ec:bf:26:28:f6:2f:b5:98:90:21:f7:39:
                    d6:44:38:13:70:69:02:9f:23:99:a6:d9:37:ea:e0:
                    66:85:c7:b5:b7:c3:b0:41:2e:26:bd:cc:55:ae:7a:
                    62:a4:f4:e2:52:ec:30:6d:ec:53:b8:c5:29:e9:61:
                    a7:e7:ab:49:bb:7d:ce:6e:20:c6:ed:06:38:87:42:
                    c4:d4:53:94:6b:52:2c:81:4d:14:31:a2:04:80:49:
                    9e:d4:7f:4c:ba:c1:79:e7:2b:f1:b4:d2:2f:17:cf:
                    4f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:A8:E9:9D:EB:95:F4:05:25:96:E2:BF:2E:0A:C7:17:E4:F1:81:93
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/wqjpneuV9AUlluK_LgrHF-TxgZM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.50.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:15:f3:eb:e0:e5:17:e1:9c:b9:aa:fe:b7:b1:76:66:fe:a5:
         2a:93:f1:a4:5e:5d:91:42:f1:5a:cd:db:12:7f:c0:c0:74:28:
         ed:61:b1:ef:6c:98:bc:d6:e3:b0:d0:47:af:c3:4d:4f:5b:8f:
         74:5e:37:5b:53:d8:01:c5:cf:1b:21:05:82:03:7e:41:65:c4:
         81:cd:65:ed:06:95:1f:1a:c2:31:df:ab:7b:cd:f9:f5:7a:a0:
         5a:4f:d2:65:b7:3c:23:19:e8:b8:dc:5f:1c:e4:09:13:85:fb:
         f7:e5:60:c6:f6:eb:0c:f8:69:f9:a9:4a:64:86:0c:bd:7b:8e:
         a0:13:50:b9:b7:74:c0:1b:8f:f4:b7:83:3e:d4:78:a2:16:89:
         0b:35:c2:1b:44:a0:9e:c4:c5:59:40:9a:c7:04:99:fe:25:39:
         93:01:5b:65:5a:e8:b6:89:b9:cd:bc:87:77:92:b4:be:fe:9e:
         f7:b5:a7:fc:90:77:ea:f1:27:ed:d3:ee:b8:be:a5:70:f0:8e:
         72:5c:f5:32:1a:bd:90:ce:4e:f4:a9:35:8a:3e:20:c6:6d:16:
         51:75:42:49:72:3d:ee:68:b0:0b:5c:5b:00:ca:6e:bc:b9:73:
         3e:db:a1:ac:17:b2:2e:55:e7:fe:6a:94:ec:f7:85:18:69:fa:
         5a:60:09:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----