Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/eWjkqPTYGO0cWOWy-j1BTzwEO9s.roa
File:                     eWjkqPTYGO0cWOWy-j1BTzwEO9s.roa (raw, json)
Hash identifier:          OtAprUC9Ai101pz8ne/rdxlYbI9sTtarI0aUZJw6/2I=
Subject key identifier:   79:68:E4:A8:F4:D8:18:ED:1C:58:E5:B2:FA:3D:41:4F:3C:04:3B:DB
Certificate issuer:       /CN=57A994BD60555145CB6452DC6A980FC851136BDA
Certificate serial:       07
Authority key identifier: 57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/eWjkqPTYGO0cWOWy-j1BTzwEO9s.roa
Signing time:             Wed 07 Oct 2020 03:16:13 +0000
ROA not before:           Wed 07 Oct 2020 03:16:13 +0000
ROA not after:            Tue 05 Oct 2021 04:04:36 +0000
asID:                     204185
IP address blocks:        2406:8dc0:4185::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A994BD60555145CB6452DC6A980FC851136BDA
        Validity
            Not Before: Oct  7 03:16:13 2020 GMT
            Not After : Oct  5 04:04:36 2021 GMT
        Subject: CN=7968E4A8F4D818ED1C58E5B2FA3D414F3C043BDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:93:10:97:22:0b:f1:26:98:e5:80:9e:bf:2b:
                    63:1f:a2:d8:72:b0:63:56:91:ee:2e:d0:40:ee:ed:
                    79:12:e3:8c:16:35:0a:2c:a2:a6:b2:51:82:7b:84:
                    eb:4f:4a:f2:fd:5d:a3:59:5c:b1:77:77:3c:7d:1e:
                    71:d3:fd:62:79:9b:69:97:7f:5e:bd:b9:f8:cc:9c:
                    65:8f:4a:78:eb:a5:97:c8:a0:45:b7:9c:be:3f:d3:
                    02:aa:39:d5:75:c3:56:02:22:66:a7:ae:29:37:35:
                    d4:6b:3f:43:09:9c:21:14:62:d3:1f:7a:68:20:a1:
                    4f:eb:0c:7d:99:8a:6d:45:7f:89:b9:ea:9f:a8:57:
                    7b:b9:a5:a3:45:2a:eb:7a:25:30:b6:54:9c:22:e4:
                    c8:3a:81:bd:30:15:24:0c:d9:4b:a6:14:05:32:36:
                    63:68:76:de:c9:8d:a1:90:39:66:1f:94:7f:8e:9d:
                    01:b1:10:79:2b:7c:a9:5c:c7:e9:13:76:a9:b4:a1:
                    37:5f:63:63:23:09:7c:fb:24:fd:f5:06:03:f0:66:
                    9c:c0:03:fa:e2:06:75:5c:d8:28:58:48:82:87:90:
                    3d:f2:26:8d:b4:3d:4c:39:a9:03:41:97:a3:8b:6c:
                    14:0e:8f:71:77:5d:1d:a3:b7:27:c7:ae:54:92:ed:
                    e7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:68:E4:A8:F4:D8:18:ED:1C:58:E5:B2:FA:3D:41:4F:3C:04:3B:DB
            X509v3 Authority Key Identifier:
                keyid:57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/eWjkqPTYGO0cWOWy-j1BTzwEO9s.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:8dc0:4185::/48

    Signature Algorithm: sha256WithRSAEncryption
         ad:53:7a:42:62:8b:84:22:06:25:d0:a9:ff:a3:b3:42:bc:1d:
         1d:a0:83:45:f8:a1:0d:9d:f0:c2:c3:e3:c7:de:eb:c6:70:39:
         9e:98:3f:44:9e:b9:b0:84:5e:87:46:50:c4:80:5a:2b:6f:0c:
         ad:e2:a8:7e:44:4b:5d:45:ce:26:2e:f5:52:01:c5:6d:6b:72:
         3e:45:08:3f:1b:24:aa:9c:45:d8:f3:1c:ef:65:6d:d6:20:e7:
         31:74:c0:7e:41:46:3c:30:49:1d:a8:86:96:fa:d9:95:1a:18:
         e2:7e:3b:91:dc:c9:b2:93:5c:35:20:3b:3f:91:29:03:c4:98:
         bb:5d:31:38:94:f9:1d:39:bb:e5:07:32:59:a9:1e:08:ba:2c:
         9e:f3:21:ed:57:54:02:2b:26:60:87:c6:72:8b:a3:ae:3b:e2:
         39:a5:10:70:b5:74:2f:5c:cf:82:01:0a:3a:27:19:3f:4c:98:
         c2:b6:35:3c:fa:a4:1a:1a:02:8a:cd:52:18:00:36:75:7f:96:
         2b:51:38:f0:9d:1a:df:6e:e3:0b:65:91:37:c2:e6:de:46:74:
         b8:47:fc:44:fc:60:41:ce:58:5f:7c:c7:d3:5b:ed:dd:d5:06:
         a1:c3:95:de:fe:51:ed:81:b9:b3:ed:37:40:46:d6:fe:b2:00:
         f5:7a:9c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----