Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DWINS/n5AkVFUs1L53RR0fIvsE-zr0VzM.roa
File:                     n5AkVFUs1L53RR0fIvsE-zr0VzM.roa (raw, json)
Hash identifier:          22DFuHokXIbDsM03ACWctnVIDY1BFADUCEP32/s+jJI=
Subject key identifier:   9F:90:24:54:55:2C:D4:BE:77:45:1D:1F:22:FB:04:FB:3A:F4:57:33
Certificate issuer:       /CN=615F9BD98CC70E8836D01A9481C19C5C2D45D791
Certificate serial:       08B9
Authority key identifier: 61:5F:9B:D9:8C:C7:0E:88:36:D0:1A:94:81:C1:9C:5C:2D:45:D7:91
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/YV-b2YzHDog20BqUgcGcXC1F15E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/n5AkVFUs1L53RR0fIvsE-zr0VzM.roa
Signing time:             Sun 07 Feb 2021 12:34:59 +0000
ROA not before:           Sun 07 Feb 2021 12:34:59 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     17416
IP address blocks:        211.78.80.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2233 (0x8b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615F9BD98CC70E8836D01A9481C19C5C2D45D791
        Validity
            Not Before: Feb  7 12:34:59 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=9F902454552CD4BE77451D1F22FB04FB3AF45733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c3:23:f5:c5:6b:81:d9:9a:dd:1e:ec:da:bc:
                    2e:92:7f:05:0e:ca:6e:70:c6:f7:98:da:60:92:62:
                    60:87:ad:52:5f:25:2e:36:16:26:e6:14:61:98:1d:
                    37:24:86:23:bf:c3:de:c2:35:3a:b6:18:bc:97:b1:
                    49:a4:d2:3c:ba:ba:0c:8a:87:53:54:cf:63:2c:da:
                    74:ce:83:ba:66:c6:34:9e:e5:e2:ef:c4:84:86:89:
                    5c:99:d7:69:b7:7d:d7:b6:87:59:ca:9c:f5:13:71:
                    cf:39:e5:86:40:5b:e8:88:6f:c1:33:de:48:03:9a:
                    d0:e6:5f:bc:9f:7d:53:f0:1a:1c:c0:27:ba:e3:f2:
                    ce:4b:d0:49:00:23:a9:9c:d2:35:ae:8f:0e:fc:0f:
                    53:3a:ff:2b:b9:08:0d:f1:58:d8:50:73:26:4a:29:
                    6a:2b:eb:9c:29:db:e0:0f:10:56:ed:e4:44:08:fa:
                    e7:3d:2a:f7:12:d7:e3:4c:17:a2:35:25:23:fd:f2:
                    a7:98:85:31:bf:42:55:70:8b:33:9c:36:96:4a:d6:
                    43:1f:fc:64:67:67:48:4e:6b:4e:32:dd:f5:fd:92:
                    e5:0f:52:39:60:42:c0:7f:06:4a:20:bf:5f:34:40:
                    22:c9:27:94:08:a7:9d:b0:ab:d7:f4:fb:2a:35:b1:
                    09:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:90:24:54:55:2C:D4:BE:77:45:1D:1F:22:FB:04:FB:3A:F4:57:33
            X509v3 Authority Key Identifier:
                keyid:61:5F:9B:D9:8C:C7:0E:88:36:D0:1A:94:81:C1:9C:5C:2D:45:D7:91

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/YV-b2YzHDog20BqUgcGcXC1F15E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YV-b2YzHDog20BqUgcGcXC1F15E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/n5AkVFUs1L53RR0fIvsE-zr0VzM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.78.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         24:9a:a3:d7:98:04:c4:00:21:bd:b8:87:82:b7:85:2b:2f:17:
         b3:19:60:23:0f:a4:99:1e:77:c6:5f:8a:1e:f8:50:b7:bd:82:
         d1:81:e9:91:d0:cb:c4:5e:9d:5e:82:7e:ff:26:75:fb:6e:de:
         b7:7f:2b:65:ea:da:5d:ca:03:84:6e:ff:d8:6d:3b:0f:99:d9:
         a4:45:be:55:9a:b2:c3:6a:4b:3e:56:b7:a6:d4:17:87:c6:93:
         3d:ed:12:5f:a8:87:55:5d:63:72:92:59:79:10:30:51:c1:93:
         99:7a:f2:29:9b:a5:a1:20:23:ce:ba:e9:23:67:9b:93:b3:55:
         b0:91:0e:7c:94:20:c9:94:cb:c0:ab:54:5a:b7:fc:7f:e1:67:
         11:f0:5a:89:1d:f8:a1:06:46:c8:9a:30:2a:7f:5a:e1:3b:7f:
         50:da:0a:0a:41:82:b9:8a:f1:f3:05:69:e3:19:f6:3a:c5:25:
         64:db:02:2b:b8:7e:31:3a:23:cd:dd:d1:8c:48:bd:6a:e5:d2:
         9a:12:5c:89:29:a7:aa:65:e4:13:74:e7:2a:a6:57:ce:5f:cd:
         46:ae:70:7f:9f:ae:b3:66:d3:c2:8f:fe:d2:60:1f:46:71:ec:
         f9:e1:5c:b6:f8:da:75:2f:74:98:0f:d1:d0:a9:11:dd:41:ea:
         71:80:db:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----