Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/7cn3fR9Q-QNmqTtt2lila-GwLqk.roa
File:                     7cn3fR9Q-QNmqTtt2lila-GwLqk.roa (raw, json)
Hash identifier:          47wZDaZqA6pDKo7/MDUOly29JgY7M8gKAAek7Th8Mjk=
Subject key identifier:   ED:C9:F7:7D:1F:50:F9:03:66:A9:3B:6D:DA:58:A5:6B:E1:B0:2E:A9
Certificate issuer:       /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial:       0AE6
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/7cn3fR9Q-QNmqTtt2lila-GwLqk.roa
Signing time:             Thu 16 Dec 2021 06:33:42 +0000
ROA not before:           Thu 16 Dec 2021 06:33:42 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     17809
IP address blocks:        113.61.160.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2790 (0xae6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
        Validity
            Not Before: Dec 16 06:33:42 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=EDC9F77D1F50F90366A93B6DDA58A56BE1B02EA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:17:0e:82:df:a9:65:09:5f:13:9c:e5:8f:15:
                    b4:a3:a3:9c:04:da:fd:dd:5f:59:dc:a6:bf:85:aa:
                    fc:34:ea:85:5d:c3:89:3b:6a:73:7d:ed:6a:b1:13:
                    c8:00:a3:f7:b4:06:e8:a9:23:d7:45:2c:2b:01:58:
                    af:cd:79:8c:f2:9e:d6:cd:3a:52:f4:c7:e8:88:7a:
                    81:8d:4b:37:c9:26:06:39:ad:7e:85:f7:17:36:e1:
                    95:0b:98:2d:85:51:22:74:1f:f9:aa:ab:b7:7d:bb:
                    f9:74:0b:40:f3:05:d3:0c:89:fe:7c:c2:df:7c:5a:
                    f8:c3:b1:06:4c:eb:14:a0:82:cf:a7:71:62:da:e9:
                    f4:86:cb:3b:66:a0:85:c5:ee:d6:2f:ff:b0:85:e7:
                    d4:49:8b:9e:82:50:ed:7b:a5:25:cf:77:4f:bd:c9:
                    19:ff:a6:aa:da:14:ab:c7:05:31:5f:4e:73:51:f0:
                    b3:75:1d:3a:be:f7:14:bd:c2:6b:d0:79:2e:ed:e3:
                    b8:a5:98:c4:26:50:9f:d7:ce:8a:1b:21:2f:6c:5a:
                    d6:ab:be:df:55:ba:bb:c0:e2:31:73:55:86:9a:2c:
                    b5:87:f7:59:c0:cb:9f:69:82:ff:c5:3e:16:a9:8b:
                    df:9a:cb:48:ed:5b:20:95:e2:17:1e:a8:e1:35:6f:
                    cf:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:C9:F7:7D:1F:50:F9:03:66:A9:3B:6D:DA:58:A5:6B:E1:B0:2E:A9
            X509v3 Authority Key Identifier:
                keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/7cn3fR9Q-QNmqTtt2lila-GwLqk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.61.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         03:b2:78:20:02:3c:a3:3c:3c:6a:c2:25:2b:09:03:f8:d9:ec:
         cf:04:a7:31:75:e2:f5:b2:66:0f:d0:ad:6a:7b:b4:db:65:3b:
         b7:b5:78:72:b4:31:1a:0a:05:5f:a3:28:3a:c8:9d:a1:78:fb:
         52:bf:4b:2f:82:00:8f:b4:65:60:76:81:1e:f9:de:9c:2d:ad:
         01:06:40:a5:81:2f:8c:84:74:ec:5c:28:a6:a3:e6:64:b0:95:
         dd:16:04:40:97:f0:79:a8:1d:8b:89:98:0f:80:37:4c:92:95:
         2e:0d:08:45:1f:39:eb:c2:b8:f8:60:74:84:f0:88:a1:9f:70:
         6d:bb:b9:d1:fe:37:1e:cc:0d:46:82:74:3a:12:e8:98:c7:91:
         e3:78:b9:2c:8a:78:3e:47:f1:17:88:43:5c:43:ee:4a:10:82:
         2e:fd:b0:44:42:9f:8b:fd:a3:44:b7:b4:4e:03:c6:5b:21:49:
         08:d1:86:91:bf:7b:f7:47:0c:2b:a9:97:72:4b:f7:9d:93:7f:
         d4:8e:3d:58:2c:b5:22:6f:36:bd:8b:9d:e2:fb:f4:ab:d9:0e:
         f9:7c:01:fd:4a:db:57:8d:70:9f:51:a7:03:fa:3b:2f:8d:69:
         2c:af:9c:a2:b1:d6:1d:59:04:2d:f1:f9:cb:e7:4e:b0:42:ef:
         30:e8:cf:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----