Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/6RvWsISyjOPwYxRdGWvZ-97hY8s.roa
File:                     6RvWsISyjOPwYxRdGWvZ-97hY8s.roa (raw, json)
Hash identifier:          ozi/dkstsCNa5mG3vh6ld4AzM+wK71TkKf2q9BFjNGQ=
Subject key identifier:   E9:1B:D6:B0:84:B2:8C:E3:F0:63:14:5D:19:6B:D9:FB:DE:E1:63:CB
Certificate issuer:       /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial:       0DDF
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/6RvWsISyjOPwYxRdGWvZ-97hY8s.roa
Signing time:             Wed 29 Sep 2021 02:39:39 +0000
ROA not before:           Wed 29 Sep 2021 02:39:39 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9311
IP address blocks:        210.201.74.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3551 (0xddf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
        Validity
            Not Before: Sep 29 02:39:39 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=E91BD6B084B28CE3F063145D196BD9FBDEE163CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:15:a2:f3:56:d7:45:07:06:6a:eb:c2:6b:4b:
                    75:9d:9a:f1:d9:48:22:29:5e:04:43:f7:52:f0:d7:
                    42:93:c1:1f:58:c7:fa:d6:ed:8c:55:1e:81:37:af:
                    9c:d2:91:c2:a5:1f:5b:57:70:2a:77:ea:7f:bc:e7:
                    2c:a9:ea:f0:fe:97:8c:6f:0f:87:c9:22:21:20:8d:
                    fb:c2:ab:df:6f:59:bc:6f:28:4d:96:ad:e5:4e:a4:
                    05:b7:24:d4:c7:2b:3d:b8:31:71:eb:34:ca:4c:71:
                    19:52:d7:c4:47:94:6f:30:27:89:a3:ea:a2:e7:78:
                    3b:31:0b:c0:09:d5:b0:fb:d4:ce:97:32:bc:79:e4:
                    ed:99:39:69:ba:8b:7d:b9:7f:52:5d:97:77:81:e7:
                    c6:79:85:70:3e:96:0b:01:c9:b4:ea:24:94:7d:89:
                    c0:60:de:fa:9a:c0:f3:01:df:ff:81:ee:f7:c5:b4:
                    dc:d4:f0:23:f7:ee:e0:1b:31:f8:81:66:18:e9:3c:
                    0a:8e:95:69:75:09:9f:e4:df:aa:4f:1d:4c:9f:60:
                    87:32:ae:3f:93:34:c1:9d:fc:97:66:be:df:49:35:
                    fb:ae:e2:3b:c6:29:85:79:12:79:c2:28:75:5b:f0:
                    ba:a5:8a:6a:92:b3:9a:fa:20:e1:82:80:e6:5f:9a:
                    53:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:1B:D6:B0:84:B2:8C:E3:F0:63:14:5D:19:6B:D9:FB:DE:E1:63:CB
            X509v3 Authority Key Identifier:
                keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/6RvWsISyjOPwYxRdGWvZ-97hY8s.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.201.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:ad:0f:3f:d5:a1:f1:fb:e1:a3:e6:f9:c3:c0:cf:0c:35:38:
         a7:d9:9d:0f:c0:77:56:b6:07:9a:04:cc:44:ba:fd:f0:87:7c:
         8d:26:74:8a:e5:c8:c1:91:d0:81:d3:1d:40:a3:22:4f:92:e9:
         42:07:98:29:1b:61:ff:2f:d6:37:a4:24:69:52:e7:d2:b1:e4:
         ee:31:fd:da:70:c0:49:06:eb:62:46:e3:21:0f:ca:b6:57:9c:
         a9:78:94:61:37:c6:e0:26:15:5c:61:1a:06:9f:ee:99:7e:bf:
         8d:cf:b1:1e:de:90:31:9d:11:3d:ee:9f:aa:fb:6d:28:b6:1a:
         28:49:fd:07:ec:88:d5:b0:34:68:c2:25:d7:35:d4:e7:62:c8:
         32:0f:23:72:81:46:ed:2c:eb:f1:7c:30:42:43:1f:d2:b5:ab:
         ad:0a:8c:ea:90:73:1c:7a:99:43:c0:f4:97:c7:af:58:6c:08:
         eb:86:dc:20:9f:30:49:7a:f2:bf:1b:ac:09:d5:a8:15:6a:07:
         19:7e:8a:0d:d0:b6:10:2b:3d:59:78:37:1e:f3:d6:f5:6b:58:
         0b:9c:6d:66:e9:6b:e6:30:d8:35:96:14:05:6b:14:23:c3:05:
         47:ef:a1:19:28:2d:97:c4:b0:b6:94:6f:a1:f7:0a:bb:47:8e:
         6b:86:15:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----