Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/2NXIwmqXsDTJZcr2afeTE57VVTI.roa
File:                     2NXIwmqXsDTJZcr2afeTE57VVTI.roa (raw, json)
Hash identifier:          1A4cAQIP+xJy2tYqWGkI3Z38cNLVSQdo4auGkZu5b1k=
Subject key identifier:   D8:D5:C8:C2:6A:97:B0:34:C9:65:CA:F6:69:F7:93:13:9E:D5:55:32
Certificate issuer:       /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial:       0A46
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/2NXIwmqXsDTJZcr2afeTE57VVTI.roa
Signing time:             Sun 07 Feb 2021 11:37:17 +0000
ROA not before:           Sun 07 Feb 2021 11:37:17 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     54994
IP address blocks:        202.39.156.0/26 maxlen: 26

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2630 (0xa46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
        Validity
            Not Before: Feb  7 11:37:17 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=D8D5C8C26A97B034C965CAF669F793139ED55532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f2:0f:cd:61:2c:5a:2f:6e:6d:fa:0a:3e:41:
                    3d:84:bb:96:f2:b0:a5:2f:8b:6c:58:9a:72:be:86:
                    7c:ab:4a:0e:38:2a:7d:0b:c5:01:ae:83:e1:80:c2:
                    84:ba:85:5d:2a:29:f5:ab:f1:f6:f2:74:0f:9a:de:
                    37:b4:1c:5d:b0:6c:f5:70:d8:83:ff:ec:6b:70:8e:
                    32:0b:cf:5c:4e:29:b5:95:6b:d4:28:7c:f5:c3:24:
                    30:45:e6:e1:bc:b9:4e:32:8f:1d:4b:7b:19:d6:82:
                    ad:fc:98:73:a8:10:e0:56:a4:a4:42:21:67:cd:df:
                    14:36:18:08:c4:f6:b2:e2:32:d4:cd:55:cc:70:86:
                    36:00:8e:67:d1:0d:1e:5d:08:95:04:f4:3c:e9:17:
                    8f:71:21:d9:e0:d1:8b:19:e2:a0:d8:b4:a9:25:05:
                    3c:6a:ab:9e:df:57:b1:17:e4:74:fa:ce:74:b4:ea:
                    84:9b:5b:ab:33:19:4b:05:8f:07:a9:bb:14:e9:7f:
                    51:56:d9:25:a8:a6:2b:20:d2:35:23:68:66:62:50:
                    bd:a0:cc:9b:8c:a0:85:ee:fc:30:c8:c6:80:bf:c1:
                    51:7e:58:6a:5c:68:1f:42:cb:49:a9:1e:35:d7:14:
                    b1:89:c6:79:cf:b2:78:42:80:87:0b:86:6b:7f:f1:
                    6e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:D5:C8:C2:6A:97:B0:34:C9:65:CA:F6:69:F7:93:13:9E:D5:55:32
            X509v3 Authority Key Identifier:
                keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/2NXIwmqXsDTJZcr2afeTE57VVTI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.39.156.0/26

    Signature Algorithm: sha256WithRSAEncryption
         9b:ff:17:3e:10:2a:9a:63:84:aa:8b:94:b4:33:1d:56:bf:34:
         a1:f5:84:9c:94:18:fb:e0:12:ca:1a:e8:60:83:cb:32:9a:5d:
         cd:e4:50:57:54:46:fe:64:2a:81:ea:7d:a2:21:db:a5:34:25:
         d1:32:59:9c:9b:c2:da:5c:94:97:90:88:fc:65:45:fe:8f:18:
         7c:7f:a4:dc:d7:2a:0a:4f:75:0e:aa:70:5f:b1:de:5c:be:ea:
         6d:60:82:8f:2a:b2:33:77:e6:30:d5:bd:92:ef:ba:fe:82:09:
         79:76:60:98:40:92:9c:b6:d9:a1:da:c7:d9:ca:49:b5:6f:20:
         29:5c:bd:9a:63:78:45:f0:00:47:f4:cd:fb:a9:2e:a4:ba:c5:
         f1:6b:c8:63:22:d8:cc:19:f1:cd:43:9d:ac:a0:99:0c:80:c2:
         f4:4e:28:b6:fb:f4:70:34:99:b2:31:ce:1b:7f:24:41:af:cf:
         c4:8e:43:f7:c1:76:ff:d6:28:3a:54:4c:1f:d0:a5:60:47:5c:
         2b:f5:08:3a:92:03:1b:1d:39:4a:bc:b9:a6:6b:20:91:86:a9:
         81:9c:7a:35:2a:bc:84:18:9e:17:bd:7e:f5:37:82:9a:7c:fe:
         3f:42:e2:c1:e5:27:36:8f:a7:5a:91:97:f6:35:11:b7:1c:10:
         b2:fc:3f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----