Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/qPEKEq8sAVIip-Vx7BPi1t6P9Y4.roa
File:                     qPEKEq8sAVIip-Vx7BPi1t6P9Y4.roa (raw, json)
Hash identifier:          vsewOb9O8lHdXILeUxtu21t6i+ePopaLtnrkmCSNfrk=
Subject key identifier:   A8:F1:0A:12:AF:2C:01:52:22:A7:E5:71:EC:13:E2:D6:DE:8F:F5:8E
Certificate issuer:       /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial:       080F
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/qPEKEq8sAVIip-Vx7BPi1t6P9Y4.roa
Signing time:             Tue 29 Sep 2020 09:58:17 +0000
ROA not before:           Tue 29 Sep 2020 09:58:17 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     17421
IP address blocks:        2001:b400::/32 maxlen: 64

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2063 (0x80f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
        Validity
            Not Before: Sep 29 09:58:17 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=A8F10A12AF2C015222A7E571EC13E2D6DE8FF58E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:59:32:c3:7e:13:fb:13:00:32:11:52:44:96:
                    69:c3:bc:3e:9a:20:9a:81:52:61:24:c5:d2:bc:08:
                    bd:d7:79:62:36:f4:a6:87:0f:18:87:9e:3b:9b:7a:
                    4c:2d:e5:85:2d:bf:09:aa:01:c8:87:be:85:a8:ac:
                    46:9e:9d:d0:b7:98:2e:2a:f4:ad:a3:9e:d9:8b:71:
                    e9:7d:21:e2:71:ab:43:b2:20:17:07:6d:a8:1d:3c:
                    88:f6:3a:b8:bc:c1:04:90:85:bb:64:a8:8f:38:ad:
                    54:b9:c9:97:fb:18:81:49:53:08:48:bf:8a:96:27:
                    47:33:6c:5b:9e:df:4b:5c:56:7e:c2:47:5b:14:1c:
                    cc:f6:9f:a8:b4:51:25:bc:d8:fc:63:19:24:b6:68:
                    e0:d5:f8:11:11:1d:24:cb:4f:c4:a7:3d:03:e5:05:
                    d6:ff:a1:4c:1d:6b:bc:64:8a:f3:68:2d:e1:31:d3:
                    c0:cc:ec:44:37:32:cc:fb:d2:22:19:78:a4:50:47:
                    68:7e:90:63:e5:60:c7:47:ff:d6:fd:73:f8:d6:51:
                    3a:aa:11:94:1d:35:f5:06:d3:68:7c:6f:6c:b9:d8:
                    21:43:c3:fc:63:5e:d1:16:6d:d3:da:6f:42:0b:64:
                    22:05:c9:53:36:37:29:4f:93:c0:19:5d:87:f8:75:
                    0e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:F1:0A:12:AF:2C:01:52:22:A7:E5:71:EC:13:E2:D6:DE:8F:F5:8E
            X509v3 Authority Key Identifier:
                keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/qPEKEq8sAVIip-Vx7BPi1t6P9Y4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:b400::/32

    Signature Algorithm: sha256WithRSAEncryption
         c3:51:70:b2:b7:04:e8:c4:15:9f:82:ab:6b:78:fa:b3:9c:66:
         fc:fc:f7:f7:ba:8d:09:ae:20:d0:b3:35:9f:0e:8d:34:4f:7d:
         e9:54:5a:e1:91:26:cc:fb:e3:21:95:f4:67:2c:09:d2:90:cc:
         ef:47:de:79:10:5d:f5:dc:53:f1:99:75:ec:4f:ae:e2:9a:70:
         11:86:39:43:35:1b:fe:f8:9f:02:44:3a:13:dc:2b:49:3a:6f:
         ad:96:5d:44:b4:8f:38:bb:b7:f0:6c:9b:81:a0:20:1e:99:d6:
         e1:e8:4d:63:0a:9c:6c:3d:98:d4:0d:7e:27:f0:f3:38:6b:4a:
         1f:1b:51:83:dc:74:fe:02:5b:6b:b7:f1:35:54:26:78:c7:4e:
         65:35:06:ec:27:93:d1:e7:4f:50:91:ff:b9:84:4a:c2:57:bf:
         31:b2:21:e5:6c:fc:d4:dc:ff:d3:8c:a0:7e:cb:ee:4c:55:88:
         fa:2a:43:83:ed:e7:8e:34:b6:66:7d:e5:c8:0a:a7:72:57:52:
         7b:47:3f:a0:c6:69:fa:d1:8d:17:44:45:ef:5b:a9:a6:55:32:
         a5:4a:8f:6a:16:5e:78:bf:d7:fe:a8:1c:80:e4:e3:57:51:83:
         55:f2:66:60:69:74:6f:42:7e:be:03:e0:77:22:5f:fe:82:eb:
         f1:21:aa:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----