Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/9IIPSI9c_7QGQoRhH81O-I1AhH0.roa
File:                     9IIPSI9c_7QGQoRhH81O-I1AhH0.roa (raw, json)
Hash identifier:          D4HSNZoDwHTLHQLx9Tgit5QSLXe4a8i3FD5kiyQaiOE=
Subject key identifier:   F4:82:0F:48:8F:5C:FF:B4:06:42:84:61:1F:CD:4E:F8:8D:40:84:7D
Certificate issuer:       /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Certificate serial:       08F5
Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/9IIPSI9c_7QGQoRhH81O-I1AhH0.roa
Signing time:             Sun 07 Feb 2021 11:55:35 +0000
ROA not before:           Sun 07 Feb 2021 11:55:35 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9244
IP address blocks:        210.67.96.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2293 (0x8f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
        Validity
            Not Before: Feb  7 11:55:35 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=F4820F488F5CFFB4064284611FCD4EF88D40847D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4f:40:5f:c6:82:3e:a3:6f:7e:90:85:ef:43:
                    f3:19:7a:83:5f:b4:e1:b8:61:52:82:ef:dd:b1:95:
                    a9:d0:25:ec:a6:d3:aa:0e:da:60:bb:28:ce:97:b1:
                    37:e2:66:b9:cd:18:90:94:93:c7:f2:83:b0:e3:03:
                    0f:21:2d:f0:c4:7c:ea:d6:86:1c:ec:4d:33:83:5b:
                    61:1e:7c:8a:14:59:dc:ce:10:05:f4:94:c7:c4:30:
                    d9:4f:0e:4b:9d:3d:48:46:7a:cb:f4:2d:e8:95:cd:
                    8e:55:28:9a:57:96:fb:24:32:df:51:64:35:ad:7d:
                    6a:d3:aa:f3:14:40:cc:93:0a:9a:bc:1b:e7:57:2a:
                    f1:49:54:8e:99:e0:80:90:13:5e:d7:4e:fe:64:2f:
                    92:06:15:a0:ea:39:35:34:f1:42:79:1c:f8:9f:c3:
                    84:32:8c:19:d4:e7:fb:14:a8:09:5e:2e:bd:b6:14:
                    d4:06:bd:65:b6:61:a8:88:d2:55:9b:d3:ee:1b:00:
                    bf:a2:1f:c0:e7:1d:18:69:48:97:96:98:86:20:16:
                    18:be:f1:67:10:0c:8f:13:dc:9e:42:74:b8:3d:91:
                    9a:8d:58:46:f7:19:88:3a:27:05:88:a8:e2:4b:3d:
                    4b:ff:82:79:91:1a:b0:d1:e0:a8:91:80:f0:a5:6a:
                    bd:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:82:0F:48:8F:5C:FF:B4:06:42:84:61:1F:CD:4E:F8:8D:40:84:7D
            X509v3 Authority Key Identifier:
                keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/9IIPSI9c_7QGQoRhH81O-I1AhH0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.67.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         71:6c:fc:7a:45:8e:af:67:3b:35:18:1e:a4:4d:4c:a9:b9:d8:
         8d:07:b4:dd:12:90:06:d5:9e:e7:e6:f6:98:58:12:90:62:e9:
         19:6d:ff:20:87:ac:b5:c3:cf:5d:f6:82:4f:f3:f2:32:30:31:
         0b:14:c9:fd:a1:9b:d9:14:c7:e0:76:e5:8f:cd:fd:59:ac:59:
         f2:bb:30:e2:e1:ab:a9:2d:ed:94:eb:f5:5f:c6:89:ec:ec:e3:
         a3:2a:88:2b:4a:12:93:fb:a7:6f:1f:e8:28:53:11:26:c6:67:
         50:fa:05:ee:19:6b:65:48:10:57:1a:fc:0c:6c:ed:d8:02:84:
         a8:64:20:0a:ba:ed:b4:46:49:d7:27:d5:ed:70:52:58:ae:53:
         e5:4d:4f:37:8d:62:6d:42:d8:f2:97:d5:07:1d:f4:a1:54:18:
         5d:93:78:11:d4:03:83:43:4f:0c:ca:d6:25:b7:44:8e:c5:27:
         62:19:99:d2:b1:c0:61:2f:9f:89:65:00:bd:a1:da:f8:56:c6:
         ae:c3:1c:cf:c8:90:a8:b7:aa:23:84:f3:34:11:74:1b:11:16:
         0d:93:00:ac:33:55:4b:59:5b:0d:70:b4:74:4e:8e:6d:36:f8:
         04:ab:c8:21:30:dd:df:84:11:22:e4:57:3b:89:2f:d6:dc:4a:
         9a:d9:35:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----