Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/XINYUN/FxvEyAv1Ja9l3iiV3NvOh9ZqtQU.roa
File:                     FxvEyAv1Ja9l3iiV3NvOh9ZqtQU.roa (raw, json)
Hash identifier:          w3ACrQJoOEaiN7i/fssmuZfNbRPke2irfCeo+uFnh6E=
Subject key identifier:   17:1B:C4:C8:0B:F5:25:AF:65:DE:28:95:DC:DB:CE:87:D6:6A:B5:05
Certificate issuer:       /CN=84F850C0651B699E190DC9D97CD1DE326C164EC5
Certificate serial:       0AB9
Authority key identifier: 84:F8:50:C0:65:1B:69:9E:19:0D:C9:D9:7C:D1:DE:32:6C:16:4E:C5
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/FxvEyAv1Ja9l3iiV3NvOh9ZqtQU.roa
Signing time:             Tue 29 Sep 2020 10:09:20 +0000
ROA not before:           Tue 29 Sep 2020 10:09:20 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     138145
IP address blocks:        103.133.154.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2745 (0xab9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84F850C0651B699E190DC9D97CD1DE326C164EC5
        Validity
            Not Before: Sep 29 10:09:20 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=171BC4C80BF525AF65DE2895DCDBCE87D66AB505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6e:25:dc:c1:23:78:ca:31:f4:32:b4:ec:54:
                    5f:6b:9c:53:78:18:58:42:5a:21:d4:02:99:16:e2:
                    98:ec:4d:a7:69:70:d4:7c:58:e2:6a:1c:f5:9a:40:
                    5b:fc:27:6c:aa:02:ac:bf:da:91:21:b6:0d:c8:8d:
                    01:b1:51:a8:7d:b7:8f:46:bd:69:46:ae:67:a3:05:
                    d6:3c:81:b9:a6:97:1b:0c:8f:f5:75:e1:c1:c9:52:
                    66:94:5b:89:83:4c:a7:df:46:c4:64:49:61:02:2d:
                    81:27:95:ac:fa:ff:94:50:c3:78:9b:54:6b:65:6e:
                    e1:13:3a:77:01:95:aa:42:fe:38:b5:8c:68:dc:d8:
                    40:99:fe:04:a7:10:59:f3:87:33:90:6f:7d:9d:c9:
                    99:8e:8e:19:38:cb:7d:87:f9:8b:a5:b9:77:4c:df:
                    d2:7f:f1:82:69:45:66:df:70:d6:a3:9e:22:5c:1a:
                    42:33:f8:18:62:16:6d:95:04:d6:9a:f4:a8:38:d0:
                    e6:d8:1d:00:53:89:f8:17:87:cf:d9:79:c5:bd:81:
                    59:a5:c1:07:23:e0:ae:8c:83:04:f1:29:7f:7d:51:
                    27:4b:9d:98:19:c9:e8:04:0a:b1:98:82:f7:31:68:
                    5f:2b:4d:f3:7c:29:1d:bd:dc:f5:f6:e9:ed:a7:33:
                    77:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:1B:C4:C8:0B:F5:25:AF:65:DE:28:95:DC:DB:CE:87:D6:6A:B5:05
            X509v3 Authority Key Identifier:
                keyid:84:F8:50:C0:65:1B:69:9E:19:0D:C9:D9:7C:D1:DE:32:6C:16:4E:C5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/hPhQwGUbaZ4ZDcnZfNHeMmwWTsU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XINYUN/FxvEyAv1Ja9l3iiV3NvOh9ZqtQU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.133.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:c5:96:96:b7:ef:73:2c:e4:2d:df:db:3d:0f:5a:9b:ed:f2:
         d9:31:1c:8d:58:99:30:d6:6a:31:62:cc:65:7e:d4:8a:53:b5:
         82:8b:cd:cb:c4:8c:1d:0d:c8:29:40:a5:5d:62:d9:0c:24:eb:
         33:e3:52:85:ae:e3:c6:f3:ea:c7:d7:62:3e:90:57:d8:7d:6a:
         48:9b:8f:3a:65:41:98:66:4d:83:4e:ad:17:9f:38:23:d4:72:
         37:5c:81:d1:39:8c:c5:45:f3:a1:82:44:b5:76:09:cf:f1:80:
         89:16:55:4c:2a:06:b1:7c:c5:0b:bb:58:9f:ff:ac:82:eb:13:
         eb:31:2b:f4:47:94:99:c6:a3:b6:83:b5:c4:75:01:03:b3:a4:
         c4:3b:2d:21:7a:fa:45:88:0b:80:f5:c6:ab:4d:5f:e4:98:a9:
         82:4e:7d:4f:ec:0e:5e:52:e5:96:ce:f6:5a:d5:9e:fd:32:39:
         0a:09:f7:c4:40:7f:56:43:d8:a3:47:b8:c3:b3:fd:f3:f7:1c:
         fc:aa:5a:63:56:45:2d:75:6a:9a:b0:31:1a:dc:91:c2:f5:1b:
         8e:59:fa:f1:fb:b8:06:66:8b:e5:f8:e1:30:c2:9c:05:41:71:
         8a:ab:a3:81:f3:c3:a1:cc:b6:42:79:b1:11:2b:72:89:8b:67:
         d7:3b:4c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----