Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/Fr_ZODlII3oRX1pAEdcgQdo9nL4.roa
File:                     Fr_ZODlII3oRX1pAEdcgQdo9nL4.roa (raw, json)
Hash identifier:          3nStealuOdcL3psi7JavoBPnL5H+JndN3khdfifxbzs=
Subject key identifier:   16:BF:D9:38:39:48:23:7A:11:5F:5A:40:11:D7:20:41:DA:3D:9C:BE
Certificate issuer:       /CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B
Certificate serial:       08B5
Authority key identifier: 6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/Fr_ZODlII3oRX1pAEdcgQdo9nL4.roa
Signing time:             Sun 07 Feb 2021 11:44:50 +0000
ROA not before:           Sun 07 Feb 2021 11:44:50 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     4780
IP address blocks:        61.58.16.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2229 (0x8b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B
        Validity
            Not Before: Feb  7 11:44:50 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=16BFD9383948237A115F5A4011D72041DA3D9CBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:57:91:05:4a:f8:af:fa:ec:61:38:f6:73:36:
                    22:c2:cb:bd:9b:c2:a0:92:13:bc:c7:f6:d0:84:a4:
                    fd:86:fa:b6:91:86:3e:4c:a9:fc:f1:2a:3f:d5:29:
                    1e:ac:bd:cd:1d:55:00:75:a7:c1:5b:51:0c:fd:91:
                    22:12:93:bc:e2:42:a3:c5:73:02:cd:82:cf:43:e0:
                    51:b2:72:32:b9:35:12:dd:98:06:05:90:2b:83:4f:
                    ab:43:95:30:e3:91:e8:4f:c3:c0:56:18:0f:6a:9f:
                    dd:8a:7b:b2:20:a5:43:a5:52:1b:c8:f5:63:ca:3c:
                    d5:3f:cc:a8:3d:2e:32:03:55:e9:49:14:0c:32:7c:
                    1d:33:cf:d7:4b:28:93:a6:59:6f:5b:0a:bf:bf:57:
                    13:4d:4f:20:d7:ba:24:73:5e:78:06:e9:0b:57:cb:
                    63:cc:ab:c0:54:cb:94:14:ce:26:34:08:db:45:22:
                    de:db:58:c1:96:d7:72:bf:22:23:d5:ff:a2:4a:d6:
                    21:4d:dc:ab:61:72:73:64:27:a1:3c:a0:2c:19:7a:
                    18:b4:2d:f4:63:dd:df:9a:f5:1b:1c:b2:15:b0:a2:
                    58:36:9b:ae:10:95:31:31:17:11:fd:99:dc:e2:11:
                    a3:de:2f:14:99:77:aa:33:01:79:15:b2:7c:cd:37:
                    92:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:BF:D9:38:39:48:23:7A:11:5F:5A:40:11:D7:20:41:DA:3D:9C:BE
            X509v3 Authority Key Identifier:
                keyid:6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/Fr_ZODlII3oRX1pAEdcgQdo9nL4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.58.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b3:44:d0:31:1e:01:35:ac:69:e5:a8:52:0d:c3:93:ac:f3:10:
         fa:38:df:93:ca:57:65:7d:43:36:1b:f8:d3:00:bd:df:f7:b1:
         f3:e9:f2:00:25:5a:70:22:fc:d8:33:b5:f0:00:2e:fb:9d:df:
         2f:49:e0:a0:c3:83:26:1b:56:5c:db:fc:d4:8e:63:60:ea:84:
         ea:2e:99:50:87:05:d8:1a:3b:8b:74:d5:76:a4:f9:1d:9a:e8:
         de:d3:55:79:bd:86:b8:79:cb:f6:15:0e:b6:db:51:13:da:3b:
         59:28:bb:bb:10:6c:62:66:e7:fe:bc:f9:09:0a:d9:d1:98:5f:
         4e:53:74:7d:30:8d:8f:c7:89:39:eb:71:8a:8e:fa:17:13:8e:
         1b:cf:17:bd:56:a7:37:2f:81:c2:16:bf:85:30:d3:c0:22:59:
         da:e3:cf:04:f7:21:5a:3d:a9:ac:86:69:32:ab:e3:4a:77:79:
         61:6c:a0:c7:87:fd:d2:ec:28:92:55:33:b4:49:e4:ed:43:3c:
         6d:c4:2d:97:cf:32:0a:b9:c5:28:df:98:ea:b8:bc:02:18:3c:
         1b:4c:c3:df:26:b5:d3:dc:20:ef:5b:fe:9d:0d:1b:2a:9b:2d:
         0b:e7:53:7d:61:e8:4c:70:38:c1:b5:b4:a8:43:f8:90:c8:7f:
         58:98:f7:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----