Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/ZnobPvcBmlDsMv2bmV07bg2oPA0.roa
File:                     ZnobPvcBmlDsMv2bmV07bg2oPA0.roa (raw, json)
Hash identifier:          uvF6PyloycP6sWQAiNF+uI/4ZA6j05WFDn1sn8nJ3xM=
Subject key identifier:   66:7A:1B:3E:F7:01:9A:50:EC:32:FD:9B:99:5D:3B:6E:0D:A8:3C:0D
Certificate issuer:       /CN=C3FC116A3CCB105AB50DA417679B1F9C70A4BD97
Certificate serial:       FE
Authority key identifier: C3:FC:11:6A:3C:CB:10:5A:B5:0D:A4:17:67:9B:1F:9C:70:A4:BD:97
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/w_wRajzLEFq1DaQXZ5sfnHCkvZc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/ZnobPvcBmlDsMv2bmV07bg2oPA0.roa
Signing time:             Thu 23 Jun 2022 02:15:29 +0000
ROA not before:           Thu 23 Jun 2022 02:15:29 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38846
IP address blocks:        2407:a0c0::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 254 (0xfe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3FC116A3CCB105AB50DA417679B1F9C70A4BD97
        Validity
            Not Before: Jun 23 02:15:29 2022 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=667A1B3EF7019A50EC32FD9B995D3B6E0DA83C0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:eb:ce:d8:9d:7d:05:2d:b8:19:85:ba:f6:33:
                    8d:1d:ec:ba:65:84:70:59:22:dd:f4:9c:40:42:e5:
                    ce:13:e6:04:e9:e6:92:dc:85:c3:70:fa:61:bc:ca:
                    73:cd:1a:1f:60:06:ef:39:19:ba:4b:6b:e4:10:d0:
                    47:8f:fe:a0:52:94:56:39:8a:2b:53:53:79:ed:76:
                    ea:a5:f8:4b:ec:ac:50:ef:f1:c9:8a:9e:dc:a5:1c:
                    41:73:ed:9b:5a:bc:a7:5d:84:53:a5:66:cc:4e:04:
                    f4:21:05:26:0a:66:ef:f4:83:b5:6e:22:12:bf:68:
                    83:20:f4:f5:29:d4:bf:b7:c1:bd:51:79:48:a7:63:
                    39:87:0e:62:16:11:ed:6a:e4:1d:db:71:77:97:e5:
                    a1:12:46:2e:46:23:be:43:1f:35:a8:70:f6:a4:8d:
                    36:07:b2:fc:7f:65:43:e7:62:cf:23:ab:ad:d1:bb:
                    e3:15:00:8c:a2:f8:8d:4e:f4:09:4d:00:2b:78:8b:
                    8b:66:de:4c:5b:fc:30:63:fc:5a:4d:42:af:f1:06:
                    06:01:3d:2b:a8:15:d4:3c:89:34:51:62:b9:5a:fc:
                    e5:64:f2:98:eb:1f:2f:a9:e8:af:67:73:f9:7c:e9:
                    a5:ea:74:fb:d6:52:3f:b4:ca:4c:db:6d:99:40:a7:
                    6a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:7A:1B:3E:F7:01:9A:50:EC:32:FD:9B:99:5D:3B:6E:0D:A8:3C:0D
            X509v3 Authority Key Identifier:
                keyid:C3:FC:11:6A:3C:CB:10:5A:B5:0D:A4:17:67:9B:1F:9C:70:A4:BD:97

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/w_wRajzLEFq1DaQXZ5sfnHCkvZc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/w_wRajzLEFq1DaQXZ5sfnHCkvZc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/ZnobPvcBmlDsMv2bmV07bg2oPA0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:a0c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:61:fa:4d:c0:96:9b:8f:e4:8f:f4:16:69:07:3d:ad:6a:c7:
         03:66:5d:29:12:6a:01:fe:52:b6:76:6f:44:94:8f:00:d4:d3:
         60:ba:5b:7f:60:61:4f:6d:17:d6:ec:f8:43:2f:06:6b:5e:dd:
         92:b2:eb:40:2d:d7:2a:64:23:7f:8f:c5:c1:fb:2a:a2:15:d1:
         6c:3f:18:de:2e:8e:6a:dc:f1:7a:f8:79:c4:69:e5:47:16:35:
         04:3c:9f:ae:d2:b9:8e:d7:c3:f6:1c:81:66:46:b8:2a:73:5c:
         4d:d2:96:38:1e:91:19:bd:b5:48:84:ae:60:2f:d5:d5:bd:60:
         ec:69:98:4e:b3:c7:55:1b:bb:cc:6f:29:c2:eb:c3:5b:29:e6:
         08:00:92:44:a7:66:24:2e:b8:ad:2e:37:1f:22:05:b7:54:e3:
         92:14:2f:8e:75:ef:bd:6d:d7:0d:51:df:bc:7e:52:cf:22:d4:
         38:ab:38:86:02:ab:e3:91:0b:a8:14:bc:b6:be:19:a9:2a:2c:
         e9:81:1f:fe:07:8d:4a:c8:a2:32:21:95:39:1f:b3:8c:63:13:
         db:cb:f6:38:49:a4:ce:60:73:56:bb:7b:22:ea:24:6e:28:bf:
         9f:53:15:b6:ef:e6:24:9e:8d:2f:ac:35:ff:8d:28:95:56:e0:
         2c:14:e7:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----