Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/5h8CIFHW8Fp7oBri7QKMAEUuhOI.roa
File:                     5h8CIFHW8Fp7oBri7QKMAEUuhOI.roa (raw, json)
Hash identifier:          QBvKLLh8nxBUsLZ0Yz/a2Qqra3VsUlpcG+25zRmxMLw=
Subject key identifier:   E6:1F:02:20:51:D6:F0:5A:7B:A0:1A:E2:ED:02:8C:00:45:2E:84:E2
Certificate issuer:       /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial:       0E13
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/5h8CIFHW8Fp7oBri7QKMAEUuhOI.roa
Signing time:             Thu 29 Dec 2022 09:32:12 +0000
ROA not before:           Thu 29 Dec 2022 09:32:12 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     10133
IP address blocks:        2406:d400::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3603 (0xe13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
        Validity
            Not Before: Dec 29 09:32:12 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=E61F022051D6F05A7BA01AE2ED028C00452E84E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:65:2d:37:b0:5e:d1:2c:47:d0:ba:76:ef:02:
                    1f:8d:1f:e0:e5:cc:05:62:6d:44:68:26:1e:8b:ad:
                    05:0c:fd:6e:9d:b4:de:ea:23:83:9b:7f:f6:3f:43:
                    be:56:e2:13:19:d4:93:df:88:bb:eb:38:08:0e:64:
                    d8:f7:55:a8:08:10:bf:d9:1a:44:7d:fb:bb:87:6b:
                    4b:31:be:a5:d4:7c:92:b3:37:53:dc:ea:57:da:72:
                    51:fd:eb:7e:a6:fa:7f:15:31:cd:e4:9d:96:a1:cd:
                    6b:71:00:f0:dd:f0:7e:88:e6:c3:6e:15:6b:f2:88:
                    30:30:d2:1f:8a:f6:82:11:46:34:b6:fa:88:ee:95:
                    ad:68:0e:64:6a:c8:7d:99:2e:f5:e0:95:ff:0a:c5:
                    61:61:28:b2:3d:a8:f6:06:7a:ae:4b:8e:23:b6:00:
                    87:6a:87:9b:21:33:5a:b6:df:fc:ea:fa:21:01:26:
                    2c:b6:88:a1:5b:4e:17:0c:05:7a:05:08:4c:ce:9d:
                    2e:e5:0d:81:2b:72:48:c5:8b:bd:25:ae:d2:82:07:
                    85:53:87:52:99:ae:f2:dd:ac:f3:c7:d9:c6:09:e7:
                    2a:06:b9:4d:66:f6:f1:8f:63:ca:ec:9f:b8:0e:b7:
                    b7:7a:1e:93:5d:6c:4c:5a:1e:77:0d:d8:ef:e5:6c:
                    bf:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:1F:02:20:51:D6:F0:5A:7B:A0:1A:E2:ED:02:8C:00:45:2E:84:E2
            X509v3 Authority Key Identifier:
                keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/5h8CIFHW8Fp7oBri7QKMAEUuhOI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:d400::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:d4:76:d1:a0:a9:d8:f7:7d:0e:37:e5:2d:52:c4:78:a9:99:
         dc:77:9a:8b:9f:43:9c:f6:fb:6d:c7:6a:d7:46:f4:eb:8a:91:
         61:07:0b:d4:48:f5:f7:b9:cd:25:f7:e1:8a:7d:3c:90:66:68:
         77:12:ba:7f:fd:c2:32:9d:a7:14:da:47:d4:9e:e6:f4:73:c5:
         dd:22:44:b4:4b:30:48:52:f5:ed:66:e4:e9:6a:eb:7f:34:58:
         74:7b:fe:9a:11:51:ff:47:97:49:c4:87:8a:f7:4a:a9:55:22:
         97:76:4a:60:46:52:9b:41:47:6c:84:a6:1b:e0:36:a9:d1:ac:
         8b:ca:32:8d:2c:1a:d8:69:55:76:c0:31:db:ac:1e:35:62:f8:
         26:94:b3:0b:72:00:b1:20:ad:4e:d2:df:db:c7:bd:c6:8d:ab:
         75:33:e4:e1:88:42:8b:a8:a1:ae:62:2c:02:a1:7f:e5:2a:47:
         3f:8e:59:6e:5b:a9:9b:43:d4:2a:ad:2d:49:b9:29:d3:7d:bc:
         05:c2:4a:0b:77:8d:7a:5c:db:f8:20:fe:e5:5f:bb:8b:da:d9:
         62:95:1f:d9:a4:3a:4c:3e:bf:31:6a:8c:b5:bd:43:98:03:6d:
         e7:e1:32:fa:5d:bc:bf:f8:b5:f4:8f:70:a4:7d:0c:fb:d4:1d:
         a7:15:8b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----