Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/jRXzwF1e6pmBO11i8m_W2aKLI5I.roa
File:                     jRXzwF1e6pmBO11i8m_W2aKLI5I.roa (raw, json)
Hash identifier:          xeqpG58LvemMuItqqMVSSiCF4YLlcRAm8HdscLsDD/g=
Subject key identifier:   8D:15:F3:C0:5D:5E:EA:99:81:3B:5D:62:F2:6F:D6:D9:A2:8B:23:92
Certificate issuer:       /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Certificate serial:       09BF
Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/jRXzwF1e6pmBO11i8m_W2aKLI5I.roa
Signing time:             Wed 29 Sep 2021 02:36:45 +0000
ROA not before:           Wed 29 Sep 2021 02:36:45 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     9244
IP address blocks:        61.56.88.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2495 (0x9bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
        Validity
            Not Before: Sep 29 02:36:45 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=8D15F3C05D5EEA99813B5D62F26FD6D9A28B2392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8f:3e:c1:a6:7a:7e:11:94:0a:76:a4:ab:bf:
                    57:e4:9d:a5:ba:a6:aa:af:d1:cb:ab:39:ea:03:e3:
                    a9:76:00:5b:5c:3d:4b:7f:2d:f6:f3:ff:cc:72:fe:
                    e5:ac:60:4d:6e:c0:37:4a:ec:e3:6f:0a:12:8c:74:
                    16:2b:a8:f9:57:62:d0:94:99:5e:e2:df:e5:cd:fb:
                    fe:e2:d8:f2:4f:0a:20:05:76:b2:30:ae:00:d5:ce:
                    14:06:ed:9c:67:81:1f:32:62:49:9b:2d:46:b4:c4:
                    55:f8:3e:cc:0a:b7:18:6d:ac:d4:8b:df:a4:04:7d:
                    4e:49:e9:75:9a:1a:3a:00:30:47:86:16:f0:b2:29:
                    51:8e:97:19:e6:62:3e:92:ba:bb:f5:fc:e4:cf:c3:
                    8d:2b:2f:08:1b:94:2f:85:c2:c8:82:d8:92:d3:c1:
                    6a:3c:fc:af:3b:39:ce:be:0e:44:5d:94:1e:dd:61:
                    f1:2a:27:b3:70:ca:16:cd:0a:08:ca:09:da:4c:08:
                    a9:47:f0:1b:c7:83:53:5e:7d:9f:b8:10:7b:24:15:
                    fb:7b:87:5d:d4:01:77:ad:7e:7b:8e:54:68:c0:5b:
                    85:66:05:09:eb:4e:37:c1:ee:21:34:c8:65:b2:d4:
                    f3:ce:22:32:c2:f2:5a:6d:02:e8:ac:e5:cb:3f:b9:
                    eb:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:15:F3:C0:5D:5E:EA:99:81:3B:5D:62:F2:6F:D6:D9:A2:8B:23:92
            X509v3 Authority Key Identifier:
                keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/jRXzwF1e6pmBO11i8m_W2aKLI5I.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.56.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ab:78:4b:d3:7b:60:4a:68:f8:f6:31:3a:cc:28:fc:12:08:f7:
         7a:a9:b3:36:35:59:9b:9a:b7:da:04:21:c5:fd:e6:2c:9f:ae:
         1d:b8:e1:9b:4d:ba:c9:18:c7:e5:d1:7a:3b:71:e9:6d:b1:3a:
         40:7d:68:d8:10:1f:ba:cd:cf:89:5d:64:e8:7f:af:59:b5:4d:
         b6:8a:c7:b1:21:8b:5f:ea:2a:4f:50:da:19:4c:d9:09:d4:d9:
         3a:c3:31:1e:37:cd:ea:96:11:54:bb:14:12:8c:f9:14:06:1a:
         15:d0:b1:e6:1a:b8:12:ae:c5:4a:43:49:e1:30:da:db:52:77:
         2a:22:ed:88:6f:58:2a:e8:67:1b:5e:31:43:00:de:d1:32:61:
         d1:d8:fe:ac:1e:b6:0b:b5:e7:9f:95:a5:d2:0f:63:92:95:9a:
         94:28:76:b3:4d:28:de:84:50:0f:83:bc:a9:d2:18:88:aa:9f:
         0b:3c:fd:b8:f5:07:1a:4a:18:65:80:ab:fa:1f:f0:ee:61:50:
         64:b3:64:54:6d:2f:23:6b:d7:48:8b:ca:74:2c:cc:57:d9:cd:
         85:be:71:6b:ca:ca:40:93:f6:69:35:06:d5:a6:47:f9:70:87:
         92:be:f2:bd:24:96:79:90:89:46:a0:c9:b6:8f:ca:9a:cd:20:
         cf:7d:22:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----