Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/9kekIWSuADAPSm3xvuhNC10QfoQ.roa
File:                     9kekIWSuADAPSm3xvuhNC10QfoQ.roa (raw, json)
Hash identifier:          Z4B4G1yUljg5DpJQlR9kkKMSOP00CLDATp0qhZ73GMI=
Subject key identifier:   F6:47:A4:21:64:AE:00:30:0F:4A:6D:F1:BE:E8:4D:0B:5D:10:7E:84
Certificate issuer:       /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial:       0E40
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/9kekIWSuADAPSm3xvuhNC10QfoQ.roa
Signing time:             Wed 29 Sep 2021 02:40:09 +0000
ROA not before:           Wed 29 Sep 2021 02:40:09 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     24154
IP address blocks:        2404:0:5000::/36 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3648 (0xe40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
        Validity
            Not Before: Sep 29 02:40:09 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=F647A42164AE00300F4A6DF1BEE84D0B5D107E84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a2:26:62:2e:7d:ac:66:ee:e8:70:8e:51:cc:
                    4b:cd:89:8b:75:5f:bb:6e:ee:e5:fd:a3:b2:60:21:
                    a3:60:6e:9a:b5:8d:57:96:96:50:b3:39:ba:fb:92:
                    ed:0d:da:3b:f3:9b:bb:a8:41:6b:4a:19:a5:7d:27:
                    51:74:f6:52:62:56:1f:7c:37:51:a0:99:70:ca:94:
                    33:b9:3d:7e:ef:9f:45:66:82:5b:d2:9f:10:be:51:
                    35:2c:fa:f4:0f:0b:d8:52:fc:3c:78:89:b5:a6:c7:
                    93:72:dc:e6:70:f9:ce:cf:75:fe:02:43:4a:73:aa:
                    03:e8:95:b8:46:76:ce:70:d1:2e:af:a6:e7:55:f8:
                    ef:b1:8e:ca:46:f3:05:d6:78:dc:0c:68:77:66:b5:
                    e3:39:2d:b1:c3:d2:a2:15:1a:99:b3:45:8d:f5:ea:
                    ff:1f:fe:9e:42:d6:ab:76:e6:c1:ab:4e:96:6b:ea:
                    fa:cb:ac:21:41:fd:1c:d8:6b:bf:ad:4c:56:c5:b2:
                    c5:4a:cc:bc:75:f7:cf:0a:5a:bd:51:d5:e2:f3:c0:
                    98:04:7c:d0:6c:59:c3:b8:3f:0d:17:27:e7:c4:b2:
                    3b:fc:55:9c:5d:b3:1d:94:37:57:71:d9:e6:df:83:
                    4b:a2:20:3a:ff:25:96:19:b8:97:01:46:5d:1c:99:
                    4b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:47:A4:21:64:AE:00:30:0F:4A:6D:F1:BE:E8:4D:0B:5D:10:7E:84
            X509v3 Authority Key Identifier:
                keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/9kekIWSuADAPSm3xvuhNC10QfoQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:0:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         97:85:8d:86:4b:e2:58:13:6d:a4:6b:b7:47:cb:9d:ab:38:a4:
         2b:ec:1f:d3:51:91:07:7e:33:54:5f:35:cd:a6:d6:5d:f5:df:
         83:47:aa:4c:b3:d3:55:1f:cc:8b:f1:46:cb:02:5e:f9:1f:7a:
         bd:d0:2e:6e:dc:f0:93:dd:2e:69:45:20:4b:bf:b6:b1:83:08:
         9a:da:8d:51:6b:c9:ef:43:99:d1:dd:85:8e:0b:da:54:2a:95:
         6d:7a:d6:57:be:91:1f:84:47:8e:a6:5b:2c:6d:a5:13:e9:6f:
         f8:a5:20:00:66:3d:ac:55:36:fa:1b:0a:64:95:bc:83:5d:08:
         75:16:c0:6f:78:24:33:5b:70:1b:6f:8a:70:30:d9:6c:56:34:
         96:8c:aa:a8:f4:b7:ec:ee:92:a7:dd:05:b4:80:c5:b3:da:2b:
         a4:70:e1:60:9b:3f:ab:75:8d:2d:11:0e:96:a1:1b:69:fc:77:
         00:4b:9c:e0:07:b9:b0:b1:e0:66:be:d8:b5:f6:f4:d1:c9:45:
         1b:84:1e:0e:5b:b4:78:51:87:26:94:b9:6f:d1:2e:6c:14:d3:
         ca:ae:90:e5:a3:3b:af:10:ba:4c:bf:83:5e:8c:84:ca:fb:76:
         3f:21:dd:a4:7e:fc:c1:b2:1d:44:86:2f:56:21:94:45:ce:ef:
         d6:74:e4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----