Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/P7bxUpyM3z4cHuBW4Z7vuLIslDA.roa
File:                     P7bxUpyM3z4cHuBW4Z7vuLIslDA.roa (raw, json)
Hash identifier:          2raMcl7BpG0To187rlA7K03FSCzoAa6CmEHsTVV+gOU=
Subject key identifier:   3F:B6:F1:52:9C:8C:DF:3E:1C:1E:E0:56:E1:9E:EF:B8:B2:2C:94:30
Certificate issuer:       /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial:       0910
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/P7bxUpyM3z4cHuBW4Z7vuLIslDA.roa
Signing time:             Tue 24 Nov 2020 03:24:19 +0000
ROA not before:           Tue 24 Nov 2020 03:24:19 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     17809
IP address blocks:        2401:ab00::/32 maxlen: 36

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2320 (0x910)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
        Validity
            Not Before: Nov 24 03:24:19 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=3FB6F1529C8CDF3E1C1EE056E19EEFB8B22C9430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1f:3d:64:a5:37:72:2e:eb:61:91:ac:2a:44:
                    36:36:7f:e1:16:92:6c:57:12:63:aa:9d:3b:92:93:
                    76:a3:a0:2d:36:be:25:cc:36:5d:51:c7:0f:94:ae:
                    00:08:c9:13:06:ef:e7:64:8a:87:06:03:50:8a:b8:
                    74:a8:e1:7b:19:3c:bf:70:d0:69:da:ac:4b:05:83:
                    61:c0:05:df:3b:07:8b:76:88:19:c6:c0:18:d6:d8:
                    9c:08:1d:ef:85:ce:58:81:cd:8e:3e:1f:70:fc:54:
                    ef:fb:6e:b0:9f:76:57:02:f9:03:46:d0:2b:b7:f1:
                    1a:d2:e8:f0:2f:45:74:58:e4:ce:27:5e:e7:76:24:
                    ac:b4:57:35:0c:f8:34:7b:7e:7c:ca:82:b9:b6:4f:
                    34:4c:4d:fd:e2:c1:68:81:cf:f9:a1:3c:b6:fc:c3:
                    22:71:9a:c1:5b:ee:2d:2b:b0:ee:8f:be:1b:c5:44:
                    dd:84:a4:be:2d:de:87:c5:ef:9e:34:c8:3a:ff:06:
                    ac:ad:65:77:d6:58:73:3c:b4:69:a2:12:a8:13:47:
                    3b:42:84:80:66:c8:e0:9f:91:b5:86:49:19:69:7f:
                    06:8e:be:35:6f:e2:4d:68:cc:0e:6d:e8:88:ae:36:
                    03:f2:14:50:2c:40:d4:13:89:bf:34:cb:cf:68:c5:
                    f7:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:B6:F1:52:9C:8C:DF:3E:1C:1E:E0:56:E1:9E:EF:B8:B2:2C:94:30
            X509v3 Authority Key Identifier:
                keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/P7bxUpyM3z4cHuBW4Z7vuLIslDA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:ab00::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:b8:98:d3:05:a9:44:83:f2:ad:83:a8:40:41:fe:0f:f0:4c:
         2c:48:f7:91:2e:9c:c9:9f:33:08:92:e0:62:48:65:a4:4e:c2:
         26:1b:de:5c:71:f9:a2:b1:1c:f5:01:53:44:f8:00:fa:40:a8:
         0b:38:03:b6:88:c2:ab:02:73:ac:27:cc:58:f1:8c:76:1e:7a:
         fa:d0:32:68:48:a7:b1:9a:35:c7:f4:49:83:10:b8:66:53:cf:
         c7:25:00:c9:97:a6:be:4d:e6:dc:4f:a7:c6:30:ea:e5:f2:70:
         69:9a:41:53:d4:2f:e3:17:d4:f7:72:ba:bf:32:31:f5:47:8d:
         2a:fc:c7:7b:71:eb:b0:d9:6d:cd:84:60:bd:79:c5:96:fe:85:
         c3:63:ac:88:c3:47:f0:bd:e4:d0:b4:2b:bb:d4:f9:90:24:e1:
         a5:88:dd:5f:94:4c:78:87:ba:f3:62:51:b3:38:c4:ce:70:22:
         12:fc:98:11:5d:ed:7a:da:47:70:dc:8e:2e:9a:94:50:06:92:
         73:1f:40:d4:97:1d:ab:25:f7:a5:07:c9:b2:86:93:cc:6a:f6:
         35:18:6b:92:75:ec:2c:9a:81:be:f6:fd:b1:1a:5b:b7:5c:43:
         6f:c1:cb:6e:7c:ce:2b:89:9c:71:d0:52:2b:67:50:20:1f:d8:
         ed:84:8e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----