Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/AaN9tUYafMoOE5__xg0tghxk5WY.roa
File:                     AaN9tUYafMoOE5__xg0tghxk5WY.roa (raw, json)
Hash identifier:          Jx6LU+7XOkmMmrCrkuYcKqpgbJYEY9Hm52UOYEG/HhA=
Subject key identifier:   01:A3:7D:B5:46:1A:7C:CA:0E:13:9F:FF:C6:0D:2D:82:1C:64:E5:66
Certificate issuer:       /CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Certificate serial:       0785
Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/AaN9tUYafMoOE5__xg0tghxk5WY.roa
Signing time:             Tue 29 Sep 2020 09:59:25 +0000
ROA not before:           Tue 29 Sep 2020 09:59:25 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18429
IP address blocks:        27.147.24.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1925 (0x785)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
        Validity
            Not Before: Sep 29 09:59:25 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=01A37DB5461A7CCA0E139FFFC60D2D821C64E566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e5:df:d4:42:6a:79:66:cb:7e:06:07:2f:07:
                    05:07:01:1e:39:92:53:b6:38:6c:69:cd:20:ae:9c:
                    f9:f4:48:97:58:2b:27:13:0c:0d:a1:1b:89:19:85:
                    ff:d2:fb:f1:bd:6e:bc:13:aa:bb:0a:b7:e4:aa:d0:
                    5b:37:10:f1:d1:c8:30:73:f2:44:25:ee:b4:6d:e5:
                    01:4f:f3:7f:71:ae:6f:1d:3a:ec:a9:da:d1:10:21:
                    4e:07:16:f5:2f:97:23:99:ae:44:fd:96:2a:eb:b4:
                    8f:62:75:c6:97:7d:b6:01:9a:b1:10:ed:f4:9b:be:
                    8f:77:e8:f6:87:a7:d0:ff:4e:e5:60:d2:0e:6b:9c:
                    be:18:2d:ba:5f:33:97:bb:8a:b6:6a:15:be:3e:29:
                    ff:55:b6:45:37:c3:8d:cf:14:89:ec:e3:c2:70:27:
                    87:3e:2a:69:0e:34:ea:b2:81:49:fd:52:7e:79:dd:
                    27:2a:a5:57:14:0e:5f:9b:ac:88:8c:67:3b:7d:a2:
                    df:73:a7:95:11:2d:90:da:bb:d6:e4:06:93:45:10:
                    a0:37:37:72:63:17:5c:91:7a:d0:39:be:08:16:92:
                    79:a7:5c:79:49:c5:65:a3:64:ac:da:9a:ad:6b:4f:
                    3d:b0:95:c8:77:0b:48:99:a7:e9:d5:6b:02:b7:aa:
                    10:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:A3:7D:B5:46:1A:7C:CA:0E:13:9F:FF:C6:0D:2D:82:1C:64:E5:66
            X509v3 Authority Key Identifier:
                keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/AaN9tUYafMoOE5__xg0tghxk5WY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.147.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3f:dd:b3:15:27:60:7d:b4:78:64:07:6a:85:2a:aa:7f:7b:20:
         6a:68:d0:e5:e4:82:a4:fa:af:d9:0a:b1:08:95:66:a6:9d:eb:
         d7:91:b6:49:e2:cc:b6:e4:ee:25:1a:d6:f1:18:7a:19:3b:c8:
         2b:06:c9:cd:3c:55:87:32:56:51:d5:13:75:f8:a6:ee:34:c4:
         0d:2c:48:22:86:6f:ef:4c:f1:ba:92:91:82:01:77:99:ab:98:
         81:e8:0f:c0:f5:92:dc:a9:6a:6d:20:e1:f7:52:60:85:b9:ad:
         e6:08:1b:1a:a6:93:e9:58:3a:67:59:67:14:2f:93:27:3f:3b:
         36:6c:af:e8:f8:48:df:8a:d1:bb:47:66:81:9b:97:11:50:5d:
         c4:29:5f:19:c0:32:0f:61:cc:e9:39:45:02:90:0e:ef:6c:4d:
         bc:66:8d:69:07:33:b3:e2:a6:7c:65:f3:27:a9:2f:cf:9d:cc:
         d5:ea:52:34:21:09:5f:28:aa:f1:ff:cf:19:e6:7d:0a:9f:8b:
         7d:60:09:4c:1b:59:2a:51:df:63:60:73:bb:eb:a6:ac:b1:fd:
         1a:9a:5b:31:b5:82:d4:aa:db:f7:2a:de:7e:36:eb:64:cb:df:
         f2:6d:0b:c5:58:6c:05:72:24:8c:ff:94:6e:92:7b:e5:6b:ab:
         4a:6c:5a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----