Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/G_Xiz0be1r6c7WRlumgnQvJn_RY.roa
File:                     G_Xiz0be1r6c7WRlumgnQvJn_RY.roa (raw, json)
Hash identifier:          Ts1RwtXOTtQJDCGOSaf8kA6d7bKrmvJt/+6exoNEhEA=
Subject key identifier:   1B:F5:E2:CF:46:DE:D6:BE:9C:ED:64:65:BA:68:27:42:F2:67:FD:16
Certificate issuer:       /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Certificate serial:       09C1
Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/G_Xiz0be1r6c7WRlumgnQvJn_RY.roa
Signing time:             Wed 29 Sep 2021 02:36:45 +0000
ROA not before:           Wed 29 Sep 2021 02:36:45 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9244
IP address blocks:        61.56.84.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2497 (0x9c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
        Validity
            Not Before: Sep 29 02:36:45 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=1BF5E2CF46DED6BE9CED6465BA682742F267FD16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:6b:d3:34:b8:86:c4:65:96:9b:46:2b:39:46:
                    93:df:c6:07:5b:4f:1a:3c:ce:b8:24:d1:55:7c:42:
                    71:68:41:00:15:65:4c:80:99:2c:e8:97:28:2f:c5:
                    90:0c:4c:35:c0:e5:49:87:e4:3b:b4:40:b8:9e:2b:
                    06:cc:cb:d1:0d:81:d2:8a:00:c1:5c:fa:21:d9:b5:
                    d5:34:6c:8f:7f:70:f9:f7:b2:c0:f3:8c:ea:e9:77:
                    4c:70:02:ad:0f:75:21:ad:8f:a7:d1:b5:4a:a2:d0:
                    8f:26:b6:95:42:d0:8a:8e:0c:61:77:e8:ed:17:ed:
                    a8:66:fa:83:49:f5:92:50:77:17:67:00:a9:a2:a0:
                    65:42:44:8d:d4:45:00:1c:73:58:31:5d:cc:4c:78:
                    55:1f:7e:59:50:f3:4f:28:a8:8e:f2:05:a5:1a:46:
                    c1:a8:8c:7a:24:e2:4b:a8:94:44:2a:b2:69:0b:a9:
                    86:3d:8a:37:44:4c:68:36:df:3b:ec:07:c3:1f:70:
                    5b:65:1e:74:15:ad:33:a4:34:e3:76:2c:5a:38:ad:
                    4c:c8:30:d9:f7:46:ee:99:4c:1c:f7:61:69:20:f3:
                    65:bc:3c:0f:f5:b6:bc:79:6e:7e:bb:56:18:68:dc:
                    ef:03:a5:59:44:34:c1:07:b1:c0:fc:be:42:06:26:
                    8d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:F5:E2:CF:46:DE:D6:BE:9C:ED:64:65:BA:68:27:42:F2:67:FD:16
            X509v3 Authority Key Identifier:
                keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/G_Xiz0be1r6c7WRlumgnQvJn_RY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.56.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:9e:a2:31:c1:0a:60:a7:c4:70:0c:f5:ec:52:53:cd:cf:18:
         41:f0:1f:b9:e1:d9:c4:ed:29:49:56:07:1a:a6:69:39:87:9c:
         47:34:5c:5e:71:5b:55:8d:ed:7a:b0:ae:d1:ef:fe:27:f7:5b:
         06:15:e6:31:97:b2:72:f6:3a:49:f6:62:8d:6c:94:c0:19:c5:
         45:25:49:4e:4e:2f:7c:b0:e4:49:4b:5a:9d:92:40:c8:77:73:
         1c:69:7e:aa:a3:5d:e8:f6:fe:3a:c5:18:dd:c5:d5:43:bc:1e:
         e0:8b:fa:93:85:8b:af:7a:b2:3a:54:4e:0a:9b:25:c0:13:69:
         33:b6:61:dc:8a:1f:65:10:a3:09:69:db:9b:7d:be:9c:3a:45:
         97:7f:d4:60:1b:a2:f2:3a:e5:05:b9:9e:d1:7a:f2:65:98:41:
         e8:d3:b2:db:a8:71:59:5c:e8:3a:e2:53:86:bf:01:38:c3:4b:
         cf:3f:b2:1c:c5:4c:55:04:17:f7:02:e0:74:ad:65:f3:3f:82:
         56:23:70:07:11:26:72:ad:01:dd:25:aa:cd:18:5b:19:12:a2:
         29:2f:38:bc:b1:7d:74:4f:9d:82:cd:56:4d:d8:bc:72:32:8a:
         d3:8f:07:9c:db:78:34:da:96:7a:f3:e0:54:f4:7d:6d:c4:84:
         40:e2:64:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----