Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/uktcKQap-HRMOnzoXiem83rJIM4.roa
File:                     uktcKQap-HRMOnzoXiem83rJIM4.roa (raw, json)
Hash identifier:          EKvAeXCtyqE5k5K41yJw9US0OMjz6f1PrA5sPm/LfvY=
Subject key identifier:   BA:4B:5C:29:06:A9:F8:74:4C:3A:7C:E8:5E:27:A6:F3:7A:C9:20:CE
Certificate issuer:       /CN=87A4AFD9E7FC1FED4F9545DE41CE4413DACB0E05
Certificate serial:       0966
Authority key identifier: 87:A4:AF:D9:E7:FC:1F:ED:4F:95:45:DE:41:CE:44:13:DA:CB:0E:05
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/uktcKQap-HRMOnzoXiem83rJIM4.roa
Signing time:             Wed 29 Sep 2021 02:42:52 +0000
ROA not before:           Wed 29 Sep 2021 02:42:52 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     131149
IP address blocks:        103.17.8.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2406 (0x966)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87A4AFD9E7FC1FED4F9545DE41CE4413DACB0E05
        Validity
            Not Before: Sep 29 02:42:52 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=BA4B5C2906A9F8744C3A7CE85E27A6F37AC920CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f8:b7:2b:33:45:a8:9f:8b:d3:3a:57:b8:5e:
                    23:b9:76:dd:a2:fe:65:6e:79:b9:59:09:7b:a7:e2:
                    dd:dc:71:4a:74:40:ff:fe:f8:45:79:79:cd:66:04:
                    be:52:fa:0d:ee:6b:0e:55:ab:93:c6:1b:3a:8b:d3:
                    01:55:03:b2:2b:2c:fa:dc:2d:5d:87:6f:1c:2a:d6:
                    49:53:4f:c2:68:fc:e4:f8:a2:37:8e:27:2f:2e:5a:
                    ac:f5:91:1f:c8:ec:2f:b9:b6:4c:31:78:e8:d7:79:
                    9c:66:b1:bc:18:33:78:59:6c:8c:b6:b1:f8:7e:58:
                    05:b7:9d:1d:a8:ae:9e:a1:5b:15:23:67:c5:c7:94:
                    90:bd:46:e5:13:d6:76:e6:be:48:84:af:c7:11:cb:
                    3c:ef:5b:ae:88:3a:7a:30:da:8d:07:b5:52:5e:c2:
                    10:01:d9:fc:97:95:9d:4b:53:a3:97:70:30:a2:a8:
                    e4:c1:76:ff:21:7d:00:f2:d2:18:48:17:a2:6b:97:
                    0d:c8:35:f6:be:5d:4e:4b:5f:79:ab:4d:26:14:3c:
                    a7:b0:50:db:52:74:a8:7e:4b:5a:92:07:06:52:76:
                    a7:d9:51:39:19:39:40:ad:f8:62:5d:1c:ad:af:94:
                    fd:9a:30:2a:45:68:2d:53:90:6a:2a:6b:a9:b8:b7:
                    17:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:4B:5C:29:06:A9:F8:74:4C:3A:7C:E8:5E:27:A6:F3:7A:C9:20:CE
            X509v3 Authority Key Identifier:
                keyid:87:A4:AF:D9:E7:FC:1F:ED:4F:95:45:DE:41:CE:44:13:DA:CB:0E:05

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/uktcKQap-HRMOnzoXiem83rJIM4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.17.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:da:27:cf:4a:6b:37:2d:c2:8e:f1:0e:65:f1:1b:95:d4:79:
         ef:91:33:ae:33:85:be:32:53:97:3b:41:89:8e:ff:4e:99:9f:
         66:c1:27:8b:da:26:25:f7:7f:42:10:18:e5:b7:31:ca:a3:a8:
         ca:3e:b7:6f:28:d6:de:f3:d2:cd:6d:b8:30:f5:c0:48:bf:22:
         89:97:cb:cb:da:ee:ad:1e:d3:c4:c4:37:d9:bd:e4:bf:ce:82:
         b8:03:08:29:c5:78:59:f1:b9:bd:d8:12:0c:4e:f0:51:4a:72:
         15:a3:62:2e:49:12:5e:c5:35:3b:e1:fe:60:4e:07:2e:78:34:
         3c:33:e9:55:9f:f1:b2:76:67:67:16:f9:88:5a:a0:bc:43:c5:
         d3:8d:25:08:d5:1b:1c:22:b2:c5:25:9b:b3:7a:89:8d:73:25:
         d9:83:1a:7b:fb:2d:21:86:21:03:24:bd:2d:24:fc:25:f8:73:
         f9:8b:1a:08:a5:27:50:c0:d8:af:97:4d:cf:ad:57:cf:5c:7a:
         1b:f3:44:e2:4e:78:7d:e7:92:8d:52:ed:1c:a0:56:2c:b4:d4:
         14:b5:e1:2a:4a:9b:81:9e:ee:b2:f1:6f:18:ee:35:71:28:48:
         e1:2d:f6:4a:55:ee:36:13:f0:8d:ef:5f:55:79:ce:e1:24:ec:
         84:c3:6d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----