Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/EfQAFJd8sD3YoTxDOyUKbgVhafM.roa
File:                     EfQAFJd8sD3YoTxDOyUKbgVhafM.roa (raw, json)
Hash identifier:          GTPNaoTwbrYgdbcp/wqNiZqPsnSJ1NXWwvvQ1b4uQAs=
Subject key identifier:   11:F4:00:14:97:7C:B0:3D:D8:A1:3C:43:3B:25:0A:6E:05:61:69:F3
Certificate issuer:       /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial:       0973
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/EfQAFJd8sD3YoTxDOyUKbgVhafM.roa
Signing time:             Tue 29 Sep 2020 10:01:51 +0000
ROA not before:           Tue 29 Sep 2020 10:01:51 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     7482
IP address blocks:        210.203.0.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2419 (0x973)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
        Validity
            Not Before: Sep 29 10:01:51 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=11F40014977CB03DD8A13C433B250A6E056169F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:23:d7:98:3f:8c:e7:24:87:bd:35:6a:fc:91:
                    84:95:33:e3:0f:d3:b3:66:c6:92:bd:f1:f1:ae:10:
                    33:6c:7d:f2:60:e1:81:ff:41:eb:fe:c5:5d:35:4f:
                    1e:2d:21:06:54:7b:e5:89:62:a0:72:ba:24:ad:2a:
                    0f:ea:e2:1d:f2:61:f3:2f:4e:c0:b7:0a:ed:2f:d9:
                    60:fc:15:3a:fc:a2:5e:48:cf:05:13:73:fb:69:6f:
                    87:10:d1:d8:a4:da:5f:9a:ab:58:5c:f8:ea:0b:37:
                    5e:b8:19:07:16:d8:e7:37:37:4a:25:d5:1b:70:18:
                    bd:9b:81:0c:c9:21:2e:08:c4:cc:9f:b8:5c:61:28:
                    8b:54:38:00:fe:a9:93:c8:fd:f4:bf:2b:04:aa:b1:
                    22:ef:5b:59:cd:cb:70:ab:03:5b:12:4d:b1:8e:c8:
                    35:d5:bd:5a:16:19:1c:68:50:fa:8b:53:70:ba:a3:
                    46:e6:f0:26:ff:63:37:e3:10:5b:74:f9:30:95:e8:
                    f8:81:65:2f:a9:9e:ae:c3:65:47:1e:61:5e:9b:40:
                    da:cd:cc:d6:dd:48:44:74:32:50:c8:54:6b:60:11:
                    65:5e:3c:24:dd:54:f4:74:35:56:05:97:0e:0b:f7:
                    74:53:53:b3:8a:00:72:fc:52:8e:a3:56:31:d1:31:
                    1c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:F4:00:14:97:7C:B0:3D:D8:A1:3C:43:3B:25:0A:6E:05:61:69:F3
            X509v3 Authority Key Identifier:
                keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/EfQAFJd8sD3YoTxDOyUKbgVhafM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.203.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         a2:ec:8c:1d:ab:f4:e4:60:13:eb:0e:60:1f:41:d1:28:85:1a:
         3c:ac:0a:f4:60:53:1b:ac:22:29:18:65:09:40:e7:8c:3e:42:
         54:b7:62:98:d4:8a:e5:d3:73:26:45:23:1d:b1:bb:0a:88:7c:
         25:c6:99:37:a3:61:e9:aa:0d:15:50:fa:fe:0a:a7:9a:6d:fb:
         4a:f3:f8:a1:fb:fe:c9:55:83:12:c3:e8:66:3b:a5:b2:67:76:
         94:cc:1d:b5:27:32:6d:f2:70:95:fc:31:eb:a9:92:8f:d3:fc:
         e9:b6:02:11:61:db:ee:6f:56:d1:b3:65:fa:8f:9e:ab:54:88:
         f2:f5:6d:29:65:36:3b:4e:51:6b:3a:38:98:64:c6:77:68:60:
         d3:85:e8:3d:b0:42:31:be:7a:cf:70:79:e9:7d:e0:d9:68:a3:
         3e:8a:59:86:39:2f:d5:2b:dc:f8:59:94:59:53:68:86:70:a0:
         3a:a1:b7:fa:26:1d:66:02:4e:db:66:12:42:df:33:4f:e7:43:
         ca:48:2d:d0:9d:17:19:0f:95:14:e1:ad:3b:e1:7f:2f:06:c8:
         b9:f1:78:c2:4f:af:48:6c:10:d5:80:7c:70:be:53:d4:e4:79:
         4b:42:3a:16:df:20:9f:5b:ad:45:a5:8d:b0:36:1e:03:8c:1e:
         28:00:c5:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----