Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/cHneEgOcNJqNeNaLKcEMFf5tsW8.roa
File:                     cHneEgOcNJqNeNaLKcEMFf5tsW8.roa (raw, json)
Hash identifier:          VyQVaKbpZ2mheFplyjnb6+/Ux0UA/HlaFzNqfvFUfHE=
Subject key identifier:   70:79:DE:12:03:9C:34:9A:8D:78:D6:8B:29:C1:0C:15:FE:6D:B1:6F
Certificate issuer:       /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial:       0875
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/cHneEgOcNJqNeNaLKcEMFf5tsW8.roa
Signing time:             Tue 29 Sep 2020 10:02:29 +0000
ROA not before:           Tue 29 Sep 2020 10:02:29 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     10133
IP address blocks:        2406:d400::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2165 (0x875)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
        Validity
            Not Before: Sep 29 10:02:29 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=7079DE12039C349A8D78D68B29C10C15FE6DB16F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c0:98:99:d3:42:a2:88:c7:0e:39:1e:65:67:
                    7c:71:bb:6a:f8:bf:5c:8e:69:50:36:a6:06:d2:c2:
                    32:22:d0:6c:dd:fd:9c:33:8f:4e:76:3f:ae:95:31:
                    e7:7a:44:77:d6:04:5c:85:aa:50:c2:a9:3b:70:d6:
                    77:f5:6d:bf:4d:67:bc:bc:07:c2:64:c6:a8:5e:0f:
                    f4:db:18:7d:07:bd:22:0f:c3:07:46:82:1d:8e:ce:
                    ba:9c:7b:f7:c3:77:9b:85:26:f5:eb:6a:7a:83:ab:
                    d9:86:c8:a0:f9:4f:d5:e2:e9:eb:d7:8b:67:b8:ab:
                    73:c3:c2:1f:47:89:9d:0b:2a:fe:b4:22:81:51:d2:
                    bd:86:30:7d:50:47:42:44:db:4e:5b:72:e0:d8:62:
                    d6:93:f0:b6:ab:7e:b8:2b:2d:06:b4:01:d9:ae:c6:
                    8c:03:3c:59:43:a3:79:60:5c:99:c1:95:04:42:8c:
                    5c:3f:9b:96:4b:52:2f:89:96:bc:d0:71:72:de:e2:
                    20:64:69:03:0b:ca:19:e3:41:ab:4c:15:ef:3c:af:
                    af:05:e7:93:97:23:bd:5c:c2:3f:4c:05:f4:51:91:
                    be:e0:67:68:be:be:92:3f:bb:51:b4:89:b0:cf:00:
                    5b:62:8a:a9:e9:e8:5d:46:df:e9:48:46:bf:23:9e:
                    1a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:79:DE:12:03:9C:34:9A:8D:78:D6:8B:29:C1:0C:15:FE:6D:B1:6F
            X509v3 Authority Key Identifier:
                keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/cHneEgOcNJqNeNaLKcEMFf5tsW8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:d400::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:15:1c:ff:19:34:8f:79:f3:fb:66:04:2e:85:d2:97:0c:a1:
         58:9e:4c:11:9a:6c:31:de:fb:bf:bd:8f:39:aa:d9:2d:25:14:
         81:44:c4:d8:3d:fe:7e:ee:b7:36:ae:c4:f8:0e:84:da:17:fc:
         18:59:81:57:db:33:d0:f8:66:71:9f:a9:90:c4:55:6b:7f:78:
         6c:b8:22:3d:1b:03:f0:06:32:18:30:89:76:a6:57:a5:cc:03:
         b6:99:44:a7:cf:d8:a6:34:26:b1:1c:3d:39:06:4c:e7:3c:67:
         b8:1e:8b:ef:d6:f1:ea:e2:29:4e:e8:cd:84:5f:a4:2d:db:76:
         ae:47:e9:a0:65:2f:1f:e1:6b:bc:d3:63:bc:5d:5d:43:65:39:
         03:14:08:54:18:1c:63:06:6e:40:e8:12:79:6e:77:ee:48:0d:
         12:44:1e:1e:34:e8:7d:82:ec:ce:20:0f:d6:f4:de:44:0c:5e:
         14:39:fe:46:19:4e:66:ed:20:89:53:70:7f:56:1c:09:4f:71:
         1f:b2:ac:17:02:33:c5:ca:78:84:4c:96:85:f5:30:85:ec:7c:
         ae:2f:62:d3:44:9f:c1:2f:21:68:6a:05:49:7b:57:dc:7a:cf:
         dd:49:06:ad:53:22:04:ff:b5:ae:f4:a5:15:ae:d9:a4:8f:0c:
         f8:ed:bd:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----