Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/q_rQuNw0DHQrsLZejgHGjHzKL54.roa
File:                     q_rQuNw0DHQrsLZejgHGjHzKL54.roa (raw, json)
Hash identifier:          cgWNixMv3gQYUi6+eZCSkGVHBOrqJVTt6BTbUW855hA=
Subject key identifier:   AB:FA:D0:B8:DC:34:0C:74:2B:B0:B6:5E:8E:01:C6:8C:7C:CA:2F:9E
Certificate issuer:       /CN=B56C9B2E3A040879CFD00FE74D697FB0465CF27A
Certificate serial:       0CCC
Authority key identifier: B5:6C:9B:2E:3A:04:08:79:CF:D0:0F:E7:4D:69:7F:B0:46:5C:F2:7A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/tWybLjoECHnP0A_nTWl_sEZc8no.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/q_rQuNw0DHQrsLZejgHGjHzKL54.roa
Signing time:             Wed 29 Sep 2021 02:53:03 +0000
ROA not before:           Wed 29 Sep 2021 02:53:03 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     131662
IP address blocks:        103.135.18.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3276 (0xccc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B56C9B2E3A040879CFD00FE74D697FB0465CF27A
        Validity
            Not Before: Sep 29 02:53:03 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=ABFAD0B8DC340C742BB0B65E8E01C68C7CCA2F9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0d:bc:dd:71:b8:2b:33:3a:88:4b:be:0e:4d:
                    5f:cf:7a:96:bf:e8:b0:ff:2c:3b:bf:17:5e:fb:fb:
                    1c:c6:5b:df:e0:1e:21:27:36:b8:9e:f2:38:b8:49:
                    d2:61:23:3c:3a:a0:ba:97:cd:40:3b:f6:aa:75:f1:
                    84:f7:39:b7:04:b3:23:35:58:ca:50:47:49:2b:7c:
                    b4:32:de:7e:29:4f:45:ef:c7:8b:e6:45:b3:be:ae:
                    79:6d:8a:2f:f8:da:0d:cb:6f:fa:ea:ea:89:90:bd:
                    a6:bd:c4:3d:43:3d:f9:28:ef:f1:a7:59:1f:05:ac:
                    39:d4:53:47:a6:95:5f:5d:28:0e:55:cf:58:81:3d:
                    e3:78:ea:94:e1:1b:f7:6d:6c:04:3c:2c:bc:05:e1:
                    5a:99:c0:df:4c:42:6c:19:b5:bb:17:6e:80:19:54:
                    ff:64:e9:7d:d8:ba:db:ac:60:d8:28:27:82:72:85:
                    55:0c:51:78:fa:17:83:e3:38:33:05:7f:29:3c:2a:
                    59:d6:d6:d4:92:41:ec:27:cd:e6:e1:a3:61:b1:98:
                    fa:80:c1:09:76:c7:83:24:2a:6b:f2:81:a0:43:50:
                    c3:85:c3:91:e7:72:64:2a:d6:73:83:b1:f8:10:ca:
                    53:2f:fc:c9:e9:e9:1e:31:d4:a7:94:f2:04:ba:9b:
                    c8:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:FA:D0:B8:DC:34:0C:74:2B:B0:B6:5E:8E:01:C6:8C:7C:CA:2F:9E
            X509v3 Authority Key Identifier:
                keyid:B5:6C:9B:2E:3A:04:08:79:CF:D0:0F:E7:4D:69:7F:B0:46:5C:F2:7A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/tWybLjoECHnP0A_nTWl_sEZc8no.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tWybLjoECHnP0A_nTWl_sEZc8no.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZHIYIN/q_rQuNw0DHQrsLZejgHGjHzKL54.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:58:43:1e:86:1d:9b:52:3b:bf:4a:16:fe:56:ad:e5:58:b1:
         c9:21:fa:18:53:a2:72:00:2d:41:18:15:70:a8:df:a9:39:34:
         51:6e:66:c9:96:0a:c9:1c:00:24:c1:12:5d:ec:c2:76:20:d9:
         83:1f:b2:ea:b6:bb:68:9f:ca:16:41:14:eb:f7:9c:00:4d:c8:
         b0:de:48:dc:f5:69:9a:6f:32:14:5f:0c:35:c7:58:a9:d1:3b:
         15:8e:e6:39:56:54:3f:06:88:c2:8e:f1:89:2f:f7:1e:e6:f0:
         07:cd:b3:f4:0a:55:0d:fe:46:7a:1b:14:64:6b:3c:d6:eb:a3:
         03:3d:41:15:f1:61:b4:48:bf:4a:ee:90:f3:f4:56:8d:fc:f0:
         d0:bd:33:2a:5a:a6:e9:9f:97:d7:bb:f0:66:fd:94:be:96:25:
         77:d9:35:7a:e4:f1:d2:b2:26:ff:57:90:e3:ec:13:41:41:9c:
         44:d0:22:8a:d8:4e:db:0c:c8:54:d7:f4:27:c8:f5:7b:a8:3a:
         fb:29:8a:ca:f6:7c:6e:ac:c1:8e:3d:37:f9:67:5b:c2:4e:5b:
         38:38:e6:c6:ce:1b:6e:e4:7c:76:27:3d:72:95:8b:73:fc:bc:
         7e:b4:b0:13:d5:12:a5:5b:af:d8:ad:11:cc:71:5c:dc:9a:a9:
         62:17:fe:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----