Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/1WikGwWAk89Qhpk4Twkjkuvwk64.roa
File:                     1WikGwWAk89Qhpk4Twkjkuvwk64.roa (raw, json)
Hash identifier:          2n4aJ7V20TUa5CyFcWzxUbEW8opup/otwbbj8Gkwe2U=
Subject key identifier:   D5:68:A4:1B:05:80:93:CF:50:86:99:38:4F:09:23:92:EB:F0:93:AE
Certificate issuer:       /CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Certificate serial:       08F1
Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/1WikGwWAk89Qhpk4Twkjkuvwk64.roa
Signing time:             Sun 07 Feb 2021 12:44:53 +0000
ROA not before:           Sun 07 Feb 2021 12:44:53 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18429
IP address blocks:        27.147.0.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2289 (0x8f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
        Validity
            Not Before: Feb  7 12:44:53 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=D568A41B058093CF508699384F092392EBF093AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:36:f4:58:6d:58:7e:33:14:50:47:9f:65:de:
                    80:b7:61:1c:e0:d7:56:87:cf:65:f5:ba:d1:7e:1c:
                    2b:fe:95:64:4f:b5:c4:28:5c:51:82:d9:42:f3:8a:
                    b2:0e:08:47:cf:de:6c:9f:10:06:d6:5c:cb:72:76:
                    5f:ef:64:42:6a:1a:4d:9f:b0:fd:cd:80:d6:29:b4:
                    3c:2d:2d:90:8a:62:d8:18:3e:c8:9d:d0:c2:6a:3f:
                    f3:83:01:16:f2:1a:73:c2:ef:7c:f8:48:ae:1d:17:
                    e9:62:3a:65:1b:59:e2:0b:67:4c:55:c3:5b:af:7c:
                    78:82:8f:4c:05:45:e0:f6:70:ee:ea:d4:af:5c:5a:
                    1f:c3:42:fd:8f:2e:f2:e5:a0:f0:e6:10:82:9f:39:
                    95:fa:fc:33:f8:81:d2:85:f4:61:ea:6e:89:74:a2:
                    8c:c0:d7:59:59:f7:70:6f:1b:fd:02:7c:cc:fa:0c:
                    c7:74:39:30:db:07:c8:0b:0f:b0:b9:95:13:4d:c5:
                    a4:47:42:d2:2d:04:42:6e:13:4c:f9:a3:2f:7f:80:
                    19:3e:37:ff:74:8b:06:7b:b5:60:60:45:d6:50:57:
                    05:d1:ff:93:11:6a:12:01:23:a8:31:d5:b8:d9:87:
                    bd:55:b1:a1:19:d3:e9:7a:00:c4:ec:a3:4f:6a:9a:
                    e2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:68:A4:1B:05:80:93:CF:50:86:99:38:4F:09:23:92:EB:F0:93:AE
            X509v3 Authority Key Identifier:
                keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/1WikGwWAk89Qhpk4Twkjkuvwk64.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.147.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6f:fc:68:f3:33:8b:b4:f0:84:8c:26:97:5c:48:da:31:e7:d1:
         dc:4c:5b:a4:57:61:81:a8:97:09:56:29:10:3c:f9:e7:65:55:
         ce:a8:43:4e:79:b4:a3:ea:30:c0:1b:2d:b8:04:63:b0:e2:91:
         52:38:e8:43:a9:59:6b:80:34:92:7a:0a:b2:c1:eb:c5:5e:ec:
         81:d5:0d:da:1f:7f:8f:bb:b8:e2:42:6f:ae:0c:8f:0c:fb:db:
         70:90:f6:fc:4c:41:6b:d1:d5:6d:d5:b0:62:8b:f9:3f:ad:16:
         65:3a:7d:cb:61:4d:b0:3f:20:7a:b1:2f:57:00:fd:55:da:c8:
         c1:4c:4c:1e:a3:72:29:56:2b:d7:f6:74:b6:d6:13:f0:e8:f5:
         2a:ce:1e:f8:85:f4:11:8f:12:10:5b:3c:db:2c:bc:51:65:74:
         c6:04:a7:33:38:03:71:9e:f2:bd:54:1c:7a:8e:a1:47:39:df:
         42:5f:98:29:bb:08:48:ef:6f:25:10:5c:7e:5b:38:6a:69:7b:
         42:fd:dd:9b:5b:59:bf:68:54:dd:59:b7:7b:12:ae:ce:d3:f1:
         16:7f:09:23:e6:6c:99:4f:de:45:28:40:9d:73:fd:a0:aa:fe:
         25:5b:03:fe:da:0f:ed:a6:5f:74:19:cc:4e:c8:82:cc:c4:0f:
         db:49:fe:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----