Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/0uiYVkhTyBioeqXZxpOOQb1uylk.roa
File:                     0uiYVkhTyBioeqXZxpOOQb1uylk.roa (raw, json)
Hash identifier:          bk1eLSVJa86W0o5+4CSvgLBt91sdfVfPX9rbJSCeFUE=
Subject key identifier:   D2:E8:98:56:48:53:C8:18:A8:7A:A5:D9:C6:93:8E:41:BD:6E:CA:59
Certificate issuer:       /CN=2855973672B1EED71760C0942C27FD5F7569019C
Certificate serial:       0789
Authority key identifier: 28:55:97:36:72:B1:EE:D7:17:60:C0:94:2C:27:FD:5F:75:69:01:9C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/0uiYVkhTyBioeqXZxpOOQb1uylk.roa
Signing time:             Tue 29 Sep 2020 09:59:42 +0000
ROA not before:           Tue 29 Sep 2020 09:59:42 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18046
IP address blocks:        101.0.224.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1929 (0x789)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2855973672B1EED71760C0942C27FD5F7569019C
        Validity
            Not Before: Sep 29 09:59:42 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=D2E898564853C818A87AA5D9C6938E41BD6ECA59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:67:b5:e5:df:ad:fd:57:84:c0:6e:72:56:04:
                    5e:a8:96:9f:0f:89:02:90:10:86:82:54:4a:77:d2:
                    2e:a9:62:af:14:07:d2:ee:74:6f:30:2f:22:1d:67:
                    0f:e9:78:81:ae:e6:04:18:ea:2b:09:53:0c:af:19:
                    2c:18:f7:f2:bd:8c:be:c7:f2:0f:69:31:3d:47:b9:
                    a5:eb:bf:37:ff:c5:4a:00:49:ef:e1:a7:c9:09:5b:
                    f8:09:91:10:49:cb:21:26:66:38:da:e5:55:04:27:
                    b7:d1:9c:28:4d:32:01:4d:08:1a:b1:40:71:5e:90:
                    3c:03:ac:bf:11:f8:0a:f2:59:27:89:04:a2:81:2d:
                    9b:e4:22:fd:29:d4:2a:81:d5:6d:83:26:59:76:3c:
                    b9:b5:b3:fe:30:5a:b0:52:a7:d7:a4:33:30:66:a6:
                    43:f2:6f:69:cf:8f:ce:65:39:e1:95:a8:a8:fe:a6:
                    77:5e:7f:b3:8c:7f:30:a1:32:29:63:17:62:00:d0:
                    bb:af:44:f5:87:13:62:93:5c:dc:f6:b4:ab:57:c5:
                    07:2b:9d:63:3d:7d:fd:90:90:f2:9d:d9:24:dd:11:
                    e2:f1:e5:f3:0b:3e:3b:af:f9:e1:94:06:8f:d4:8b:
                    65:df:cc:1d:45:0f:8e:29:17:8a:6a:b4:47:d0:ee:
                    70:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:E8:98:56:48:53:C8:18:A8:7A:A5:D9:C6:93:8E:41:BD:6E:CA:59
            X509v3 Authority Key Identifier:
                keyid:28:55:97:36:72:B1:EE:D7:17:60:C0:94:2C:27:FD:5F:75:69:01:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/KFWXNnKx7tcXYMCULCf9X3VpAZw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/0uiYVkhTyBioeqXZxpOOQb1uylk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.0.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3d:2e:09:d0:28:f8:63:8a:12:b3:9c:af:fd:24:9b:65:a5:54:
         d1:f9:d4:07:68:18:6b:d2:15:f0:b2:03:4e:24:01:34:4e:ad:
         01:41:f2:5f:80:03:4c:84:5f:27:ef:62:32:12:12:a5:36:30:
         83:be:83:93:c2:15:60:9a:7d:85:df:db:ae:f2:87:0b:37:78:
         24:2c:6b:ed:02:65:7b:e2:2a:2c:22:04:52:32:a8:4e:b7:11:
         5e:ec:61:69:df:0d:0b:8e:7a:a3:15:fe:de:38:4f:66:5f:d5:
         8a:b9:82:24:7c:ef:38:02:76:f8:5a:4d:b3:6e:56:09:c2:e2:
         58:8a:59:74:87:df:a8:e3:c8:4e:53:1d:11:bf:97:81:f2:df:
         1b:50:d2:5c:91:05:47:e4:4c:e0:5a:7a:9a:56:72:f5:67:7a:
         06:14:c4:c4:d9:89:ca:15:4e:08:23:8d:76:f8:13:30:fd:61:
         f5:2d:98:68:2d:bd:02:db:ed:90:1f:ce:f4:a7:a3:a3:b8:0e:
         bd:27:0b:b8:3f:0b:55:7d:5d:bd:74:fe:f8:4c:55:8e:f1:81:
         eb:cd:7d:66:e0:da:78:ce:a0:ef:5c:0a:55:8b:3d:cf:11:31:
         39:e8:94:e3:0d:70:c5:0f:47:6c:64:4c:aa:8e:0d:c9:8d:49:
         d4:2d:bf:01
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----