Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/uJycNaka4LrBjxiX7zaXcUBUfmY.roa
File:                     uJycNaka4LrBjxiX7zaXcUBUfmY.roa (raw, json)
Hash identifier:          zNykEb53tvG8FK41wwoBU6lTrfdQ4xMas9tEgLfiJsU=
Subject key identifier:   B8:9C:9C:35:A9:1A:E0:BA:C1:8F:18:97:EF:36:97:71:40:54:7E:66
Certificate issuer:       /CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Certificate serial:       0797
Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/uJycNaka4LrBjxiX7zaXcUBUfmY.roa
Signing time:             Tue 29 Sep 2020 09:59:30 +0000
ROA not before:           Tue 29 Sep 2020 09:59:30 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18429
IP address blocks:        123.50.61.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1943 (0x797)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
        Validity
            Not Before: Sep 29 09:59:30 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=B89C9C35A91AE0BAC18F1897EF36977140547E66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:fd:a8:cf:e1:9a:84:fe:77:58:8b:2f:07:de:
                    db:8d:4b:e4:f4:a6:cb:cf:36:0b:3a:69:40:fe:6e:
                    6c:f9:24:7c:db:98:85:7d:e1:71:76:d1:ba:c6:10:
                    e7:38:20:7a:cf:d6:0d:0d:0f:fc:f0:87:87:1e:a3:
                    67:7e:cf:25:bc:de:05:b8:c1:56:c2:00:f5:a9:bb:
                    b1:96:ae:50:6c:f7:bf:42:37:66:80:ec:56:91:49:
                    b3:02:3d:9b:7d:32:e8:9e:4e:ef:2c:ef:ed:f4:2f:
                    25:d8:28:41:bd:6f:e7:43:5a:eb:40:d5:aa:58:a6:
                    00:60:c5:57:bb:70:9e:01:49:e2:d7:d5:77:5a:08:
                    c8:e7:f4:2c:02:62:ea:34:bc:7a:cc:42:0d:8d:90:
                    d1:a2:96:b9:e0:79:ac:11:0e:03:3b:c5:67:ce:24:
                    e4:21:8b:44:f8:da:d0:e4:25:4d:0c:3f:d3:7b:cf:
                    ac:9c:29:28:a3:63:48:54:db:75:a1:59:02:f4:f6:
                    5e:a6:cf:c0:04:eb:ba:b0:ec:fc:35:f9:d7:17:53:
                    fd:ac:44:36:4f:11:75:8a:62:a2:a5:49:93:ed:b5:
                    56:73:db:1a:e3:95:a6:e8:db:09:bf:e9:99:41:5d:
                    c9:f0:e8:2f:a1:9b:2b:cc:ac:a8:51:ee:f6:dd:d2:
                    d9:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:9C:9C:35:A9:1A:E0:BA:C1:8F:18:97:EF:36:97:71:40:54:7E:66
            X509v3 Authority Key Identifier:
                keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/uJycNaka4LrBjxiX7zaXcUBUfmY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.50.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:9a:39:28:92:0f:76:86:cc:b0:2d:6c:cc:7d:bf:2c:21:62:
         25:c9:7e:44:de:a3:46:0c:65:65:61:1c:69:05:fd:3d:5f:f3:
         29:93:c3:24:2e:08:ab:63:4b:a0:2f:68:5c:5f:16:6d:4e:19:
         69:52:94:a5:8e:03:16:59:2e:7d:47:d1:59:c5:ed:73:b7:22:
         55:e0:cd:35:06:11:c0:83:99:5b:19:04:1a:ee:45:99:cb:75:
         8e:19:e6:9c:e4:e3:6b:4d:71:8f:a6:f3:89:fe:8d:1a:13:35:
         84:a2:b3:f0:cb:42:ed:bf:47:b9:76:f2:02:2f:e2:6c:26:03:
         e9:10:76:b2:e7:30:2e:fe:33:d6:9c:c9:e5:23:23:1b:60:b3:
         f9:5a:dc:4e:1c:7e:f8:a1:c1:1a:d7:96:e2:1d:bb:6d:4a:8d:
         62:0c:8f:a8:32:4f:f2:49:ec:32:fb:5e:ff:d5:5c:e6:f6:52:
         b0:1d:f0:80:60:e6:b4:f9:1c:cf:7b:0d:33:e4:c8:c0:ac:13:
         25:2c:4d:4b:a9:ec:99:e5:32:d7:21:1f:3c:d7:b1:5f:51:ed:
         5d:2c:f8:2b:7d:2e:74:ba:42:e9:45:7a:ad:99:a6:4b:6f:77:
         bc:96:a4:c9:8a:e0:92:f6:db:6c:04:01:a6:76:cc:da:9d:63:
         78:70:3f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----