Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/_ir5iRE9fU2VDUndEdtGqGqT9vg.roa
File:                     _ir5iRE9fU2VDUndEdtGqGqT9vg.roa (raw, json)
Hash identifier:          Ktxoc7bzvusNiw1eFRoL47BZrHH7gKCIL3gwuI2U6+w=
Subject key identifier:   FE:2A:F9:89:11:3D:7D:4D:95:0D:49:DD:11:DB:46:A8:6A:93:F6:F8
Certificate issuer:       /CN=C3FC116A3CCB105AB50DA417679B1F9C70A4BD97
Certificate serial:       0137
Authority key identifier: C3:FC:11:6A:3C:CB:10:5A:B5:0D:A4:17:67:9B:1F:9C:70:A4:BD:97
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/w_wRajzLEFq1DaQXZ5sfnHCkvZc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/_ir5iRE9fU2VDUndEdtGqGqT9vg.roa
Signing time:             Thu 15 Sep 2022 02:40:44 +0000
ROA not before:           Thu 15 Sep 2022 02:40:44 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     38846
IP address blocks:        2407:a0c0::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 311 (0x137)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3FC116A3CCB105AB50DA417679B1F9C70A4BD97
        Validity
            Not Before: Sep 15 02:40:44 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=FE2AF989113D7D4D950D49DD11DB46A86A93F6F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:47:13:31:de:46:11:aa:3b:06:17:42:e7:c6:
                    92:ec:1e:a1:34:67:d4:15:c3:53:e2:00:a2:35:21:
                    9e:f4:b1:95:97:ef:9c:04:17:94:49:84:54:f2:e8:
                    1d:02:c0:35:1d:e7:d9:8b:8f:72:75:20:11:22:35:
                    fa:5c:5f:c4:fc:2a:ba:5f:71:b0:13:fb:66:ed:aa:
                    9f:b9:65:1e:fc:b4:17:59:62:81:ac:3a:6b:72:81:
                    0a:b3:11:0e:c9:9f:f2:e9:1e:f1:e6:24:13:de:f7:
                    a8:89:a7:3b:83:c8:f6:03:33:9e:b5:2c:ef:6a:53:
                    b2:c9:b0:86:9a:7a:52:66:e9:f4:cb:0d:af:9c:ce:
                    3d:0e:9f:86:ea:5e:1e:62:8f:dd:ff:a8:87:7e:e0:
                    5d:89:56:c7:67:ae:1c:82:5c:8a:3e:72:ef:0f:20:
                    2f:10:d4:54:77:21:72:7b:16:18:48:79:89:64:a3:
                    76:b1:49:52:4f:8b:fd:67:8f:0d:cc:34:3e:9c:e3:
                    00:6a:ca:85:20:37:b1:92:85:ba:35:ba:21:5c:1f:
                    f7:7c:bf:f0:ed:58:ad:ca:cd:36:ac:27:25:3b:5c:
                    80:47:7d:a8:e7:71:42:65:cd:f4:c8:0c:a7:29:2b:
                    c3:62:43:02:9b:43:1b:20:27:1b:1a:28:bf:7e:c3:
                    38:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:2A:F9:89:11:3D:7D:4D:95:0D:49:DD:11:DB:46:A8:6A:93:F6:F8
            X509v3 Authority Key Identifier:
                keyid:C3:FC:11:6A:3C:CB:10:5A:B5:0D:A4:17:67:9B:1F:9C:70:A4:BD:97

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/w_wRajzLEFq1DaQXZ5sfnHCkvZc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/w_wRajzLEFq1DaQXZ5sfnHCkvZc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WOLFNET/_ir5iRE9fU2VDUndEdtGqGqT9vg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:a0c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:32:d1:45:e0:7c:9c:cf:12:96:7f:86:e4:ec:cb:d3:58:7b:
         8f:a8:9f:09:a8:a6:66:df:11:a5:19:f3:4a:b0:32:e9:ad:91:
         c0:0e:6d:62:84:12:33:64:84:09:2a:46:af:59:b1:82:e0:2f:
         0f:9a:84:50:d1:ee:f3:33:74:6b:f2:f7:50:42:5f:b4:47:76:
         6c:a2:a1:1b:3d:24:46:34:00:6e:9e:2a:a8:d6:f0:f9:90:12:
         fa:04:84:a2:ea:b6:8c:c3:b0:ec:ee:ea:9d:19:cf:04:82:ff:
         c2:8c:ca:e0:18:4b:2b:f1:da:73:c3:1e:af:47:ca:f9:df:f8:
         23:5f:9b:f3:1c:6b:b6:d1:44:a2:89:24:ca:a3:18:2e:da:fd:
         a6:f2:6c:30:0c:99:55:1a:3d:25:7e:88:ad:f0:6c:1f:d7:e6:
         a5:8f:ac:cb:7e:98:d8:8d:5b:26:ba:76:bf:f2:41:27:bb:18:
         05:83:8f:51:08:de:b1:e5:0d:1c:65:25:5c:9e:ea:b4:48:fe:
         43:1e:53:b0:b3:c4:f4:b1:b9:0f:23:0f:2f:fb:e5:49:a8:65:
         de:7f:45:f1:6b:b3:f2:d8:97:8c:2c:f2:90:02:27:dc:80:f2:
         78:4d:a7:a4:8c:4c:18:ca:c2:fd:2b:49:25:d2:b3:d4:9f:04:
         a8:ac:41:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----