Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/rPGmwHHTGCdJ0q3KEVh6Wcp5iFk.roa
File:                     rPGmwHHTGCdJ0q3KEVh6Wcp5iFk.roa (raw, json)
Hash identifier:          8h6dohL3eB5FdsN/sjf9c/F9y4RdQVo2CXQ5wR5N5+Y=
Subject key identifier:   AC:F1:A6:C0:71:D3:18:27:49:D2:AD:CA:11:58:7A:59:CA:79:88:59
Certificate issuer:       /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial:       08E1
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/rPGmwHHTGCdJ0q3KEVh6Wcp5iFk.roa
Signing time:             Tue 29 Sep 2020 10:01:12 +0000
ROA not before:           Tue 29 Sep 2020 10:01:12 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     7482
IP address blocks:        218.184.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2273 (0x8e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
        Validity
            Not Before: Sep 29 10:01:12 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=ACF1A6C071D3182749D2ADCA11587A59CA798859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:47:2c:42:55:59:cb:88:4a:ec:9f:3e:1a:f4:
                    e2:da:fc:3f:d7:a7:48:e4:cf:4e:03:cb:18:d3:e9:
                    e4:68:24:71:99:07:a9:7e:62:b0:f6:d6:b2:d7:40:
                    a5:aa:05:a2:26:15:e8:43:a5:a2:67:60:17:0a:66:
                    69:b4:20:05:61:59:d6:bf:0e:09:70:ad:0f:73:c6:
                    2c:4d:49:73:2d:c9:94:93:b8:40:49:2e:4f:a4:21:
                    2d:9f:5d:44:b4:89:fd:fb:40:b8:d8:45:75:be:a0:
                    42:1e:f5:6c:ee:c9:0e:25:db:4c:fb:8b:12:23:fd:
                    0a:ef:59:50:6c:ec:f5:4b:ca:0e:d8:23:b5:61:80:
                    a4:de:03:d3:67:f0:44:8a:3d:14:fc:4a:12:81:02:
                    fe:8d:f9:12:99:f9:a9:13:96:0e:7b:62:62:e7:82:
                    8d:0f:e0:7a:d5:43:1a:fe:35:a7:df:88:1c:fb:e5:
                    3b:02:d7:76:c6:56:43:5f:1a:5c:70:ad:d5:57:ef:
                    5a:5b:fb:d0:0e:1e:6b:36:4f:4c:94:da:ea:a9:81:
                    2b:32:1e:89:5f:1e:7c:8d:90:94:72:9d:89:22:26:
                    e8:df:1a:41:42:32:ac:ea:3b:b2:a0:0a:1b:07:45:
                    59:28:6a:9c:61:0f:da:7b:56:93:d1:c0:f9:c3:19:
                    1e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:F1:A6:C0:71:D3:18:27:49:D2:AD:CA:11:58:7A:59:CA:79:88:59
            X509v3 Authority Key Identifier:
                keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/rPGmwHHTGCdJ0q3KEVh6Wcp5iFk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.184.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3c:e6:35:d9:c0:3f:ba:32:5b:63:85:38:d4:3c:db:4e:39:25:
         53:b9:97:b0:93:a1:b9:ec:34:79:88:b4:97:1a:fd:95:5e:e3:
         2e:a3:6d:cc:2c:38:f3:e7:db:ff:74:44:23:c7:54:f3:ac:4e:
         11:50:f9:eb:07:8c:59:c0:f7:76:d5:3d:19:c7:e7:e1:6a:df:
         c1:e9:af:5a:01:31:4a:c9:a1:b7:e5:d9:29:d4:61:68:db:60:
         2a:1c:94:98:47:fe:47:bd:d4:8a:2c:a1:e6:28:4c:2a:74:52:
         a8:15:7c:bf:51:96:24:6a:ca:3b:c9:75:62:ca:c9:51:7c:01:
         0d:20:cd:1b:79:12:99:25:df:f2:24:1d:d6:35:db:87:fc:33:
         64:45:10:38:65:d3:1a:f4:a0:67:6f:fb:97:ad:9b:10:29:43:
         e0:5d:ac:18:54:96:c3:88:e9:32:ed:1f:2b:01:16:85:3f:2a:
         b0:4b:cc:c2:1b:69:ed:ea:cc:b6:72:04:5b:25:c7:e1:ce:70:
         87:e7:bf:3d:ca:64:5c:86:fb:3e:58:77:0b:cf:76:9c:1c:bf:
         3b:73:47:7e:0d:bd:8e:92:46:50:ea:e0:8b:d4:50:bd:54:cb:
         66:dd:39:ec:d8:44:ce:d9:43:95:ae:b6:e0:d9:74:cf:42:7c:
         ae:83:31:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----