Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DWINS/m09gyaeKiMfDCEju1E3u-VovEO4.roa
File:                     m09gyaeKiMfDCEju1E3u-VovEO4.roa (raw, json)
Hash identifier:          eKuiMkNB8EQpB6o+6EVwhACz0Zu1LIdXK5LGyWQMEqA=
Subject key identifier:   9B:4F:60:C9:A7:8A:88:C7:C3:08:48:EE:D4:4D:EE:F9:5A:2F:10:EE
Certificate issuer:       /CN=615F9BD98CC70E8836D01A9481C19C5C2D45D791
Certificate serial:       0965
Authority key identifier: 61:5F:9B:D9:8C:C7:0E:88:36:D0:1A:94:81:C1:9C:5C:2D:45:D7:91
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/YV-b2YzHDog20BqUgcGcXC1F15E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/m09gyaeKiMfDCEju1E3u-VovEO4.roa
Signing time:             Wed 29 Sep 2021 02:40:53 +0000
ROA not before:           Wed 29 Sep 2021 02:40:53 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     17416
IP address blocks:        2405:4d00::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2405 (0x965)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615F9BD98CC70E8836D01A9481C19C5C2D45D791
        Validity
            Not Before: Sep 29 02:40:53 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=9B4F60C9A78A88C7C30848EED44DEEF95A2F10EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c8:d3:ca:d8:ba:0a:20:18:56:f6:98:06:47:
                    04:5e:b9:e4:c4:4d:52:24:ac:11:6f:bc:2d:14:cf:
                    83:ab:ca:97:09:d7:c5:09:73:b8:94:37:d9:f7:ee:
                    a7:8d:cb:f1:9b:91:5f:38:d5:f7:25:98:1a:d1:60:
                    e9:c9:5e:02:89:5d:a0:8a:db:4f:d4:05:04:15:45:
                    a9:6d:70:d5:ec:aa:c0:91:15:59:34:61:c7:46:ad:
                    30:09:ec:ca:17:40:dc:13:00:8d:75:ea:18:e7:d9:
                    98:7c:4e:93:1e:f6:87:ad:bf:ae:bd:e7:1c:71:b2:
                    bd:15:fb:ac:6d:02:b2:98:43:37:3e:0a:a1:71:9c:
                    00:f0:41:9c:83:91:b6:82:73:cb:b5:e8:28:59:b8:
                    01:2c:16:96:14:d4:dc:b2:c6:59:9e:a2:fa:56:94:
                    99:36:df:13:a9:ac:fa:b4:ae:95:eb:75:05:23:a9:
                    0d:33:81:51:76:d9:14:87:cb:e7:d8:fa:62:88:92:
                    83:ca:38:26:81:b5:2c:74:8c:f2:d6:00:7b:63:bf:
                    c5:9a:7a:c2:1a:22:71:1e:87:35:f9:b6:9b:8b:03:
                    dd:a1:52:62:7f:1b:87:90:70:03:16:4e:03:bc:b1:
                    f6:33:98:e2:cb:19:38:e0:c2:b7:7e:f0:39:d3:5e:
                    61:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:4F:60:C9:A7:8A:88:C7:C3:08:48:EE:D4:4D:EE:F9:5A:2F:10:EE
            X509v3 Authority Key Identifier:
                keyid:61:5F:9B:D9:8C:C7:0E:88:36:D0:1A:94:81:C1:9C:5C:2D:45:D7:91

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/YV-b2YzHDog20BqUgcGcXC1F15E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YV-b2YzHDog20BqUgcGcXC1F15E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/m09gyaeKiMfDCEju1E3u-VovEO4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:4d00::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:57:8a:19:fa:6a:19:0e:54:76:ef:8e:47:0c:cb:46:e9:b4:
         2f:fb:2b:8b:39:58:6b:eb:41:91:51:cb:23:17:ea:91:fe:33:
         91:f9:33:c3:c7:7f:36:7d:ba:47:98:b0:3a:3e:ed:04:9b:ec:
         38:18:a5:b5:e1:88:26:5f:a6:c8:26:9d:ad:5b:45:6b:2b:23:
         51:15:c4:f4:ad:d0:f2:5d:e8:2e:69:f8:1c:df:6d:dd:08:8c:
         c2:c6:ed:53:18:d9:b5:84:17:0d:52:47:de:32:52:47:3a:eb:
         2e:96:56:09:95:30:62:08:a3:f6:f3:5e:d4:46:e2:fc:34:7b:
         0c:38:8e:13:e4:96:2c:de:ad:5e:50:76:af:d1:20:a2:82:af:
         da:67:d7:a3:67:43:9e:80:4f:aa:e6:fd:3a:16:c1:14:fd:2f:
         92:e6:73:62:46:11:19:27:b5:0f:de:54:05:4c:c9:ea:0a:db:
         8b:70:be:f7:dd:3d:e9:ad:9e:ef:a4:9b:20:94:58:69:f6:4d:
         5e:2d:0a:36:7e:63:76:bf:83:04:2d:4c:b6:40:2e:da:d5:f0:
         85:f1:bd:ef:54:c1:4d:13:38:de:e9:35:7e:c4:09:3e:9d:97:
         7c:16:dd:ec:8b:15:e5:45:df:d5:e3:4b:ee:8b:5d:dd:d4:44:
         94:ee:52:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----