Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/XEaZpwRau2uhD_IdZRoKMgs8Rcs.roa
File:                     XEaZpwRau2uhD_IdZRoKMgs8Rcs.roa (raw, json)
Hash identifier:          3pM1pL7a8yc3JcKPAxJDTSNc2eg7xGtqEyua5FHPpQ4=
Subject key identifier:   5C:46:99:A7:04:5A:BB:6B:A1:0F:F2:1D:65:1A:0A:32:0B:3C:45:CB
Certificate issuer:       /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Certificate serial:       0799
Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/XEaZpwRau2uhD_IdZRoKMgs8Rcs.roa
Signing time:             Tue 29 Sep 2020 10:03:13 +0000
ROA not before:           Tue 29 Sep 2020 10:03:13 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9244
IP address blocks:        113.21.188.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1945 (0x799)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
        Validity
            Not Before: Sep 29 10:03:13 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=5C4699A7045ABB6BA10FF21D651A0A320B3C45CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:38:aa:88:77:51:47:15:c1:11:5c:12:c8:45:
                    0b:51:80:b4:0e:21:79:36:97:1e:7c:9e:74:b3:19:
                    6b:ba:bb:80:91:48:af:bc:06:40:ac:c1:50:ba:ee:
                    5c:ea:b2:07:aa:3d:58:c0:d0:a8:51:81:ca:a1:15:
                    c3:86:08:29:b2:e8:4e:82:06:a8:b6:b3:cb:7b:57:
                    10:43:f8:78:52:25:f6:1d:e2:53:85:97:1d:82:6d:
                    46:31:e4:44:a3:9d:35:8c:58:8a:ea:85:50:0c:73:
                    a0:e3:0d:eb:88:c0:52:a0:16:41:8e:44:8a:d0:8b:
                    10:65:29:ec:c9:c2:95:83:b1:99:ed:96:d6:9f:7d:
                    17:57:fa:58:2e:8d:78:2a:04:bf:0d:f8:a2:8f:a7:
                    6d:bc:91:e0:af:5e:04:12:d7:be:76:c5:2d:48:d4:
                    1c:f7:e2:4f:c0:79:53:91:fd:90:d0:96:c5:53:80:
                    b1:87:f6:b3:98:75:85:2e:97:0c:a4:86:c4:5e:35:
                    73:f1:1f:03:fb:ac:9d:1b:bc:9a:f7:b2:1c:90:f1:
                    72:9c:7e:c9:68:e0:bd:49:50:e7:be:68:38:99:78:
                    3a:c4:47:b3:20:6b:bf:a0:e5:db:3e:fb:6b:ad:6e:
                    b4:c8:b6:1b:6f:b9:b6:43:1b:e5:a9:bc:d2:1b:e9:
                    c1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:46:99:A7:04:5A:BB:6B:A1:0F:F2:1D:65:1A:0A:32:0B:3C:45:CB
            X509v3 Authority Key Identifier:
                keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/XEaZpwRau2uhD_IdZRoKMgs8Rcs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.21.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:96:49:22:25:64:02:68:fc:e3:0f:88:84:c1:45:6f:7a:00:
         4e:68:c9:08:e7:cc:9f:4b:f3:04:c8:ca:a4:17:0f:f0:13:9f:
         c0:94:c9:52:ea:91:3a:c8:88:7b:bf:cf:18:d5:37:e3:8e:64:
         09:c3:c7:5a:43:55:5f:04:d6:4d:2c:8b:d5:7f:2b:3d:cd:fa:
         4b:e6:6c:70:79:ed:85:ae:14:2d:ea:8d:d7:9c:6b:f0:52:11:
         19:1e:57:f3:68:bc:5f:b0:fc:58:bd:cd:fa:16:9c:a9:55:09:
         f2:18:c1:2c:12:81:8f:0c:83:d5:d9:4f:94:f3:25:31:b9:f0:
         b7:7b:7e:42:a5:d8:38:9f:2e:91:ae:0d:46:9f:f3:e6:22:ae:
         d7:73:14:44:fb:fa:e7:ed:e4:d3:13:ce:ae:1d:f3:13:ab:c1:
         05:6c:b1:a0:35:52:c5:73:65:59:f5:11:ca:82:39:81:82:de:
         6a:10:16:59:61:e1:45:22:5f:9d:79:04:a0:de:5a:05:1b:f0:
         23:de:53:d1:c5:35:d8:02:6c:27:d3:1a:44:7b:a6:18:69:dc:
         53:de:21:02:06:26:3e:b9:c2:7b:06:87:b6:b4:83:f5:c9:2a:
         3f:a0:d3:2e:6a:8e:58:97:02:24:e2:dd:1f:1a:10:e7:c7:14:
         e4:86:e0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----