Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/-YNZ4cmzKIp3N_miCgtz-nZtyTQ.roa
File:                     -YNZ4cmzKIp3N_miCgtz-nZtyTQ.roa (raw, json)
Hash identifier:          i4MxHO3wWhlqJx+fw+v4Ki1DX4vjq3RNubvbM/XQeTo=
Subject key identifier:   F9:83:59:E1:C9:B3:28:8A:77:37:F9:A2:0A:0B:73:FA:76:6D:C9:34
Certificate issuer:       /CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B
Certificate serial:       0962
Authority key identifier: 6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/-YNZ4cmzKIp3N_miCgtz-nZtyTQ.roa
Signing time:             Wed 29 Sep 2021 02:52:38 +0000
ROA not before:           Wed 29 Sep 2021 02:52:38 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9924
IP address blocks:        61.60.240.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2402 (0x962)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B
        Validity
            Not Before: Sep 29 02:52:38 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=F98359E1C9B3288A7737F9A20A0B73FA766DC934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:32:8d:4f:04:be:22:b9:5a:c5:89:0f:13:38:
                    5c:9d:6c:4d:06:30:52:fa:8d:c4:2e:a9:3e:7f:72:
                    bf:a2:83:cf:2e:82:8f:89:68:79:e3:11:94:17:15:
                    39:e6:67:dc:d5:9f:0c:16:da:9a:5c:b2:91:e5:05:
                    3c:9a:51:9f:75:2d:af:8c:17:ed:30:80:26:5a:e5:
                    d3:aa:2c:34:cf:b8:99:63:ca:c1:96:ae:f2:eb:52:
                    7c:61:66:b9:df:9b:81:fb:6b:46:3b:73:d2:bd:b2:
                    71:49:3c:c6:d3:b1:04:30:51:fb:f9:8c:fa:ab:83:
                    ba:86:eb:19:be:38:0a:d2:89:a1:2b:00:cb:c7:ee:
                    69:c9:62:85:32:5c:0d:16:d9:90:e5:f3:99:fd:68:
                    43:a6:a0:2f:2c:31:df:1f:d4:22:42:e6:86:2f:16:
                    80:fa:5d:ff:0a:05:d0:95:ef:b5:ca:3b:b8:47:ab:
                    cb:9a:9d:aa:20:50:56:7c:8d:d2:58:13:ef:3b:b9:
                    17:51:0e:eb:5a:08:94:07:1b:bc:c3:9b:8f:2e:a9:
                    e3:81:0c:b1:2a:bc:48:64:ce:b3:ac:0a:f8:9e:7a:
                    13:cc:45:a3:67:7e:98:cc:c8:6f:cf:64:2c:8d:79:
                    e7:75:d9:1b:87:31:4a:ae:4e:b3:cd:1f:4f:98:c2:
                    2f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:83:59:E1:C9:B3:28:8A:77:37:F9:A2:0A:0B:73:FA:76:6D:C9:34
            X509v3 Authority Key Identifier:
                keyid:6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/-YNZ4cmzKIp3N_miCgtz-nZtyTQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.60.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         60:6d:0c:d1:4a:3e:18:4a:85:e3:99:e4:c9:32:bc:b1:b6:f3:
         c3:69:d0:e1:35:c4:55:5c:ff:28:25:b8:f3:6a:a9:18:8c:ff:
         8a:8a:65:33:a9:70:be:01:3a:45:fb:37:dc:f3:f3:d4:cc:eb:
         94:8d:58:a1:8a:60:98:ca:7f:0d:90:fa:f8:e7:e5:1b:2e:9f:
         9f:fd:b1:3e:24:3b:bd:23:1e:7e:40:1d:ef:15:07:85:ff:0c:
         38:0a:7d:e9:20:a3:21:8d:e4:2d:4c:28:da:b0:5f:eb:ed:b7:
         12:7f:f0:1d:66:a4:5d:44:77:92:d6:39:fd:82:c7:2a:3d:21:
         4d:18:2d:be:50:79:39:48:5b:11:63:01:37:19:52:c8:cd:3a:
         6b:7f:f2:7b:8a:2f:c3:80:22:0f:b2:0d:a8:9a:9f:df:76:5d:
         93:73:45:48:95:72:82:08:d4:de:6c:e3:e6:5d:e0:91:a7:3b:
         98:a2:27:bb:a0:b9:71:b0:c8:a4:8e:c7:0a:16:d1:90:e0:bd:
         69:35:51:5e:76:9c:fb:a4:bf:27:1f:df:7d:ad:57:3f:cb:dd:
         9c:99:ad:c1:ed:32:5f:74:8b:d7:d9:ae:09:95:52:b4:68:63:
         b9:f7:3c:50:ee:28:23:c3:16:d3:a9:22:bd:d6:07:da:d6:52:
         8e:08:13:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----