Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/bsX2AOQBwngnu1f5y-HSsKvij_Q.roa
File:                     bsX2AOQBwngnu1f5y-HSsKvij_Q.roa (raw, json)
Hash identifier:          t4U4DNvWSb5dCrx4I/Cm4av+Vy7NdvtVJ222wUk9mac=
Subject key identifier:   6E:C5:F6:00:E4:01:C2:78:27:BB:57:F9:CB:E1:D2:B0:AB:E2:8F:F4
Certificate issuer:       /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial:       0977
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/bsX2AOQBwngnu1f5y-HSsKvij_Q.roa
Signing time:             Tue 29 Sep 2020 10:01:52 +0000
ROA not before:           Tue 29 Sep 2020 10:01:52 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     7482
IP address blocks:        124.219.0.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2423 (0x977)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
        Validity
            Not Before: Sep 29 10:01:52 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=6EC5F600E401C27827BB57F9CBE1D2B0ABE28FF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b2:15:ac:8e:02:e3:01:03:91:e7:54:c9:85:
                    59:47:54:87:07:fc:71:fb:42:79:b8:7a:fd:de:fd:
                    12:e9:d7:97:8a:90:52:37:18:1a:68:90:a6:09:79:
                    16:45:9b:ef:79:68:77:75:56:bc:9b:0f:1f:54:9c:
                    c0:5c:fb:74:6e:71:88:94:b2:10:46:d6:16:e5:f7:
                    99:b6:2b:15:55:64:3c:79:1b:1e:c7:c6:8d:55:fe:
                    da:e6:e7:ed:bf:0f:5f:b9:74:b3:05:9d:24:fe:07:
                    c7:f7:19:55:ea:7f:78:c4:fe:e6:38:3c:8e:f8:43:
                    82:52:a7:9a:a2:78:69:c0:22:b4:92:e6:5c:a7:1d:
                    ba:e9:bd:b2:a6:70:14:68:63:3e:00:72:4a:27:79:
                    d6:c4:13:f0:8a:63:85:bf:0d:df:ff:37:8d:db:46:
                    69:0b:fa:ff:f1:75:36:1c:9f:1b:73:6a:af:b1:a6:
                    79:45:49:64:0e:79:76:bd:1a:d7:a5:12:2a:fa:0d:
                    3b:4d:fd:2d:ca:66:cc:f2:33:06:87:0b:37:35:0d:
                    10:d2:65:3e:b1:33:77:4e:7b:04:2a:40:45:28:96:
                    db:1e:00:a6:f1:4a:21:97:34:0a:81:06:a3:ab:28:
                    29:4a:db:80:d3:89:73:cf:86:40:03:52:71:7e:49:
                    18:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:C5:F6:00:E4:01:C2:78:27:BB:57:F9:CB:E1:D2:B0:AB:E2:8F:F4
            X509v3 Authority Key Identifier:
                keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/bsX2AOQBwngnu1f5y-HSsKvij_Q.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.219.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         3b:9b:97:13:63:f5:78:7c:25:9c:9d:c9:df:39:04:e1:61:12:
         f6:59:76:ef:b8:5b:5b:c0:0e:80:54:d3:d9:ae:4a:1e:ab:72:
         d2:c8:d1:ab:97:64:59:30:d4:a6:a8:26:bb:33:0f:b2:a1:17:
         15:96:02:a0:d1:3a:10:0a:be:b1:3a:c6:23:de:fb:e7:fe:55:
         64:5c:c1:3a:d8:6f:ef:1f:87:7d:35:27:88:a5:a6:a1:be:27:
         21:ca:2f:ee:13:1e:c1:bb:85:78:db:9a:a6:3f:b1:02:07:db:
         7f:4f:8a:e5:e3:fd:6f:1b:81:02:e2:07:a5:d0:11:f7:40:7d:
         30:3e:b4:c4:6a:8b:1a:dd:42:55:de:90:58:7a:fc:f1:f0:89:
         4c:69:30:b5:8f:f7:2a:c7:bd:27:9a:3c:84:bc:8d:db:72:fc:
         4d:8e:23:62:dc:b3:c9:b9:2e:6e:65:7c:52:d7:39:f2:2d:75:
         98:59:01:ae:51:b4:95:1d:49:da:cc:2a:cb:fd:74:88:91:e3:
         7e:6c:f9:91:fd:1a:95:8e:9c:65:e3:6f:8f:f1:7f:53:12:b1:
         70:31:30:75:ab:45:b5:0c:34:a4:d3:3f:99:d5:53:72:c6:1a:
         0f:78:04:c0:ae:90:6c:69:a7:b3:dd:91:42:d1:f5:92:66:53:
         2c:1c:d2:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----