Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/9McQQn1wjdJXZjt8qNBrw3llWUI.roa
File:                     9McQQn1wjdJXZjt8qNBrw3llWUI.roa (raw, json)
Hash identifier:          Ezs2QoyAbwHxQMB8VQ/yHKsWkNtufmWkVRvje5QhMX0=
Subject key identifier:   F4:C7:10:42:7D:70:8D:D2:57:66:3B:7C:A8:D0:6B:C3:79:65:59:42
Certificate issuer:       /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial:       08DC
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/9McQQn1wjdJXZjt8qNBrw3llWUI.roa
Signing time:             Wed 18 Nov 2020 08:00:39 +0000
ROA not before:           Wed 18 Nov 2020 08:00:39 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18046
IP address blocks:        119.15.224.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2268 (0x8dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
        Validity
            Not Before: Nov 18 08:00:39 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=F4C710427D708DD257663B7CA8D06BC379655942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:97:e1:11:a3:a6:93:f9:54:35:1f:43:d8:5f:
                    9f:4d:b6:65:fb:06:88:e0:54:1c:ec:0f:c4:20:02:
                    cd:ed:49:16:a5:22:5f:9a:00:b5:72:c6:a6:9b:04:
                    73:a8:a5:3d:ba:56:b4:6b:1b:47:77:d3:54:20:35:
                    2e:0b:a4:87:d6:7f:6b:76:0e:92:7f:32:26:15:72:
                    61:6e:67:82:3d:84:37:c6:c2:56:d4:d2:68:10:9d:
                    f7:2a:9c:65:6c:68:7d:40:79:01:78:9f:f0:81:64:
                    c8:b8:f3:73:ff:7d:90:c9:64:45:98:b7:5c:80:8d:
                    96:e6:bc:9f:13:ae:65:6a:05:17:03:ec:9e:31:48:
                    f5:50:ed:6f:a4:72:aa:29:ad:89:d8:48:36:b8:cd:
                    b1:40:68:0c:60:9d:2c:da:38:66:8b:4a:0f:9f:91:
                    79:09:e6:55:b9:db:7e:aa:a8:8e:bb:05:28:92:0e:
                    fd:d4:8b:b4:03:1b:3a:b0:89:b8:c9:65:68:2c:d9:
                    3a:a2:bb:d1:7a:93:14:0d:f3:91:5b:45:43:d8:fc:
                    c6:b7:a5:a2:82:a8:b4:a7:96:1b:8c:5a:88:b4:6a:
                    83:19:6e:de:d1:67:4a:b2:20:7f:a3:2c:c8:b7:2e:
                    61:55:06:a7:3a:75:6b:a2:6f:9c:a1:48:5e:0c:0e:
                    a9:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:C7:10:42:7D:70:8D:D2:57:66:3B:7C:A8:D0:6B:C3:79:65:59:42
            X509v3 Authority Key Identifier:
                keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/9McQQn1wjdJXZjt8qNBrw3llWUI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.15.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1b:e2:d1:fc:cf:5d:21:04:0c:52:ca:a9:8a:5f:59:aa:f8:b3:
         a1:d2:d9:61:97:73:de:9a:31:4b:09:7c:5f:6f:2b:e9:4b:6b:
         53:e3:5c:ef:ff:c3:f3:bc:37:77:ca:4f:5e:ba:00:78:8b:c6:
         ae:6d:16:b8:96:8c:14:1c:5f:26:53:be:6d:49:54:af:01:5d:
         17:9e:0d:2c:a6:79:34:91:c5:93:65:76:fd:f2:37:7c:49:9f:
         a6:b9:4a:e1:c7:1f:22:ac:d4:7a:dc:c2:ea:82:3b:03:b4:05:
         8b:2f:e2:3b:21:4d:f9:42:74:6f:3b:d7:66:ed:49:e4:5f:1f:
         d6:5a:e6:73:27:a2:ca:7b:90:6a:ad:c2:aa:77:2d:6d:f3:72:
         58:0b:3a:01:cc:9c:91:6f:42:60:fa:f0:d1:44:cb:60:11:09:
         12:30:5c:8c:4f:b2:bf:ec:4e:4b:4a:6d:2c:69:e6:60:5c:aa:
         95:98:7c:08:7e:fa:ec:01:63:fd:81:06:23:8f:df:77:b9:07:
         df:78:fe:57:e8:90:c2:8c:8d:5c:69:93:15:f7:26:e1:46:b4:
         ca:91:6f:24:c3:70:60:19:66:97:b4:51:50:5c:f5:70:38:68:
         c0:9e:4a:22:41:ca:c0:9c:1f:af:4b:74:bb:12:78:2e:9d:80:
         60:d5:6b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----