Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CENTROID/T6vAVptIIBxzFLue9dgk-X7-XnQ.roa
File:                     T6vAVptIIBxzFLue9dgk-X7-XnQ.roa (raw, json)
Hash identifier:          2UtG7At59NryvVoNd1Jf2RL0+WatbhRGHg3dsuZothE=
Subject key identifier:   4F:AB:C0:56:9B:48:20:1C:73:14:BB:9E:F5:D8:24:F9:7E:FE:5E:74
Certificate issuer:       /CN=795A91ED40AAA15B9ABCA21C205B36EC74949FC8
Certificate serial:       0733
Authority key identifier: 79:5A:91:ED:40:AA:A1:5B:9A:BC:A2:1C:20:5B:36:EC:74:94:9F:C8
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/eVqR7UCqoVuavKIcIFs27HSUn8g.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/T6vAVptIIBxzFLue9dgk-X7-XnQ.roa
Signing time:             Tue 29 Sep 2020 09:59:17 +0000
ROA not before:           Tue 29 Sep 2020 09:59:17 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131618
IP address blocks:        103.104.151.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1843 (0x733)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=795A91ED40AAA15B9ABCA21C205B36EC74949FC8
        Validity
            Not Before: Sep 29 09:59:17 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=4FABC0569B48201C7314BB9EF5D824F97EFE5E74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:82:8b:b6:e3:de:f7:52:f8:f0:d8:d7:de:42:
                    ca:16:db:a6:9b:8d:f2:91:6c:33:de:76:94:c8:92:
                    51:23:90:d5:cb:5b:2e:87:8b:e8:cd:72:87:ba:ff:
                    73:2d:37:b4:36:08:76:09:06:1c:2b:2b:3a:0b:5c:
                    87:13:08:49:70:50:d6:87:53:e4:b3:6d:c1:d7:27:
                    5f:c1:a4:f1:d8:53:c4:a5:2a:70:9a:ba:63:44:69:
                    17:58:3b:1e:6d:24:c9:c7:11:b7:f8:fb:f6:65:f1:
                    b6:40:0c:45:70:73:9e:27:1d:4e:c6:e9:1d:03:b9:
                    d6:9e:77:75:22:38:66:1e:61:3e:bd:33:3c:33:23:
                    13:23:65:cc:e2:f7:56:d8:fb:12:2b:6b:3f:d0:b0:
                    ae:46:21:c3:04:ec:b6:f2:38:aa:ff:1d:ae:46:5b:
                    0f:9f:22:a8:f3:3a:08:0a:52:7e:91:58:01:40:8e:
                    1b:2f:24:7a:3d:69:f4:f8:89:37:4f:98:5d:5d:73:
                    af:16:16:f2:7f:6f:8b:33:d6:6f:d2:e6:aa:05:f3:
                    14:dd:ab:e8:67:51:83:b9:a7:5a:f1:78:6f:39:3d:
                    29:f2:dd:e0:fb:81:b6:58:11:43:10:01:4f:e5:c9:
                    38:e9:cd:b0:be:7d:36:05:19:1f:df:d3:f2:09:34:
                    ee:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:AB:C0:56:9B:48:20:1C:73:14:BB:9E:F5:D8:24:F9:7E:FE:5E:74
            X509v3 Authority Key Identifier:
                keyid:79:5A:91:ED:40:AA:A1:5B:9A:BC:A2:1C:20:5B:36:EC:74:94:9F:C8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/eVqR7UCqoVuavKIcIFs27HSUn8g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/eVqR7UCqoVuavKIcIFs27HSUn8g.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CENTROID/T6vAVptIIBxzFLue9dgk-X7-XnQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.104.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:be:0c:22:cf:c7:76:4a:3f:bf:d8:63:cc:18:9d:71:3d:53:
         1b:3b:c2:aa:65:d6:7b:64:17:ed:47:b2:13:2a:c6:d4:49:85:
         54:5b:0e:cb:bd:d5:af:0e:02:88:2f:0e:00:54:07:75:3d:7b:
         08:66:75:e4:50:41:79:db:47:c2:92:d4:9c:a1:b4:d6:94:1a:
         6c:63:54:51:22:2f:e4:9c:c2:4e:b9:93:ec:c9:a7:c1:83:a5:
         3c:84:e2:e8:a3:80:2e:a1:7e:9b:9f:06:82:26:7b:cf:5a:a5:
         b3:19:e1:c8:e9:4d:44:05:ea:57:52:b9:75:fd:12:77:8c:4a:
         6d:85:69:4d:cf:dc:57:ed:f1:ca:a6:81:a0:9f:f3:a5:dc:db:
         64:26:95:c2:87:f3:13:be:6b:17:c9:a9:2f:69:9c:fd:eb:4b:
         d0:26:ed:ad:7e:19:cf:9e:f0:fc:78:90:cf:dd:e5:57:27:ff:
         5c:1f:9f:e5:f7:0e:99:69:b1:59:36:f2:e1:a2:c4:36:93:58:
         26:1f:59:e0:1b:f3:98:d4:6f:be:92:87:93:e2:af:2f:0b:b2:
         32:cc:16:c3:f4:54:9a:3a:24:09:4f:27:fc:64:53:a6:1d:a6:
         8a:eb:29:a5:41:d6:a4:a7:0b:0e:7e:ce:be:73:9a:84:f4:26:
         9c:6b:92:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----