Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/8N-rvGN5vBL9G8iPbPCWmub6dnw.roa
File:                     8N-rvGN5vBL9G8iPbPCWmub6dnw.roa (raw, json)
Hash identifier:          qC0JRjoP+Qo+G4Hevv2NHXICjoxpO5EL0HFOhnvKt04=
Subject key identifier:   F0:DF:AB:BC:63:79:BC:12:FD:1B:C8:8F:6C:F0:96:9A:E6:FA:76:7C
Certificate issuer:       /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial:       0C94
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/8N-rvGN5vBL9G8iPbPCWmub6dnw.roa
Signing time:             Mon 25 Oct 2021 04:01:48 +0000
ROA not before:           Mon 25 Oct 2021 04:01:48 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     3462
IP address blocks:        220.128.80.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3220 (0xc94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
        Validity
            Not Before: Oct 25 04:01:48 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=F0DFABBC6379BC12FD1BC88F6CF0969AE6FA767C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:82:9d:9e:de:24:b8:a8:28:da:7a:60:92:00:
                    8c:30:e0:fc:a3:ef:0b:d7:03:53:03:31:e8:74:16:
                    b8:b7:09:1a:8a:53:dd:2a:3e:dd:37:9f:49:1b:f4:
                    8d:29:04:75:f4:4a:90:07:9f:34:69:83:01:59:85:
                    0b:9b:46:ed:07:0e:75:a6:44:8e:68:40:46:08:52:
                    e0:70:2a:fc:e9:be:3c:b6:b3:b9:8f:0f:c6:22:26:
                    98:a6:ef:a0:0f:f8:69:f1:ec:da:f7:f1:33:d8:e7:
                    c9:f4:99:70:10:c1:90:f5:dd:33:f1:2d:bd:86:d7:
                    36:86:3b:db:e3:b7:45:b1:2d:cb:13:ae:51:3b:5a:
                    ea:a0:9b:d4:a2:5a:93:a7:69:15:51:8d:ac:ea:14:
                    aa:9e:c9:54:bd:f5:f9:b0:41:19:c4:8d:35:25:46:
                    5c:b3:25:f6:26:8d:a3:d9:3a:7c:54:ae:9c:bf:31:
                    ca:87:bc:6f:ff:cc:3e:db:ce:65:92:02:33:60:de:
                    ba:eb:c8:b6:9d:d3:36:6f:b4:1e:de:80:6c:f2:40:
                    b2:e9:e7:6e:46:34:e8:91:a5:64:c6:f2:22:4e:6e:
                    a1:1d:60:8d:68:b5:8b:76:1b:d0:1c:d6:e6:f2:73:
                    56:63:bd:23:bc:3e:ce:29:b2:67:91:7f:04:03:41:
                    32:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:DF:AB:BC:63:79:BC:12:FD:1B:C8:8F:6C:F0:96:9A:E6:FA:76:7C
            X509v3 Authority Key Identifier:
                keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/8N-rvGN5vBL9G8iPbPCWmub6dnw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.128.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:03:48:26:0e:b9:fe:de:05:b8:8c:7a:e6:da:e0:99:89:54:
         84:55:b8:f9:11:07:e1:5f:ca:f8:70:c8:a3:df:a5:b3:df:91:
         bf:19:b8:85:7d:4d:e8:71:9e:7d:a1:14:61:d2:cb:c1:96:b5:
         eb:d7:6b:ac:df:a6:27:93:64:35:54:3c:52:19:98:4e:a1:f0:
         cd:7a:e7:fb:bb:77:77:ae:8e:52:ba:92:a8:94:05:46:c2:0a:
         31:d4:f0:34:ac:33:c4:5b:31:8f:d2:50:ef:80:05:6e:bc:cd:
         23:6d:8c:b0:22:c5:bc:da:d0:02:19:ef:7d:02:63:43:86:13:
         fb:41:b3:87:06:dc:2e:71:9d:70:0e:95:62:71:b0:2e:c2:94:
         d1:ae:2e:b6:60:d8:16:c6:db:ae:c8:27:8d:c3:ff:7b:e4:d3:
         ca:a0:7a:52:18:42:2a:a1:4a:26:b2:dc:1c:03:e3:a6:f3:32:
         12:50:d0:c6:d0:eb:c5:86:15:64:d1:f0:10:47:cf:90:22:d6:
         80:09:2e:f5:ea:5f:79:ad:6e:31:14:c0:4c:00:80:6a:1f:15:
         06:bf:16:b5:40:63:8c:b9:d8:54:83:71:f2:6c:0b:af:b9:88:
         54:5d:3b:70:2a:f1:d1:42:9a:46:34:43:a4:cd:b4:b5:ff:62:
         f7:2a:3b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----