Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/WZYT6_fhpOkVRHSN5SmzxtSisVU.roa
File:                     WZYT6_fhpOkVRHSN5SmzxtSisVU.roa (raw, json)
Hash identifier:          4kYWYIJHXm3OpLN/1o880TYbyXtmPb4hPEjn38c6q+k=
Subject key identifier:   59:96:13:EB:F7:E1:A4:E9:15:44:74:8D:E5:29:B3:C6:D4:A2:B1:55
Certificate issuer:       /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial:       08DA
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/WZYT6_fhpOkVRHSN5SmzxtSisVU.roa
Signing time:             Wed 18 Nov 2020 08:00:04 +0000
ROA not before:           Wed 18 Nov 2020 08:00:04 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18046
IP address blocks:        119.15.208.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2266 (0x8da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
        Validity
            Not Before: Nov 18 08:00:04 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=599613EBF7E1A4E91544748DE529B3C6D4A2B155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:45:b2:95:c9:ba:24:2e:eb:93:15:d0:92:fd:
                    d0:8a:51:aa:d0:54:36:85:d7:ed:a1:8e:40:e5:39:
                    0a:45:7b:3a:4d:bd:a0:f7:7b:e7:66:c3:db:e2:f6:
                    7a:73:6b:d1:4c:ee:11:f9:d5:97:3a:ff:0f:62:81:
                    df:27:61:20:ac:ae:e3:c2:92:55:fb:a7:f7:f7:c7:
                    97:81:cc:18:d2:4a:4e:1a:f4:d5:9b:fa:bf:8f:46:
                    04:1b:ca:09:90:e1:7f:0d:b8:58:71:c2:9c:8c:87:
                    37:e7:00:38:8e:cf:e2:0b:e6:01:1f:18:f0:45:49:
                    db:91:cd:2c:35:e3:21:c0:90:10:5e:5c:60:34:19:
                    6a:4d:78:92:4b:25:65:88:53:b4:e4:51:74:34:2f:
                    dc:b3:45:b3:68:1f:b3:aa:18:83:86:bd:9c:fb:2d:
                    d3:a9:97:6b:b6:f8:36:3a:47:5a:53:cc:77:eb:2e:
                    38:f9:98:ae:6c:34:a4:4a:cc:9c:e6:58:f5:46:14:
                    0b:fc:2e:cf:71:58:4e:16:3f:73:bf:8e:79:15:68:
                    d3:4b:e7:8b:8d:42:27:7e:42:6f:52:5d:d0:b9:34:
                    3b:15:de:d5:ad:9b:86:e6:d2:ce:bd:f0:65:99:dc:
                    70:88:b8:45:c8:b3:06:51:1a:62:c3:b0:bb:3f:b4:
                    b9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:96:13:EB:F7:E1:A4:E9:15:44:74:8D:E5:29:B3:C6:D4:A2:B1:55
            X509v3 Authority Key Identifier:
                keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/WZYT6_fhpOkVRHSN5SmzxtSisVU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.15.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         42:89:41:78:4d:85:ff:51:24:a4:7b:6a:a4:77:0e:e5:12:bf:
         72:4a:ef:77:de:96:40:21:7d:76:b2:e9:1f:6f:83:60:4d:89:
         87:b9:1d:90:8a:fc:d2:b3:2f:bb:46:ed:ef:a2:d5:eb:a4:21:
         68:b9:5d:16:18:f7:6f:f7:40:2f:67:3e:e6:a1:4b:3e:66:38:
         67:95:cf:73:94:d9:6c:a6:58:0e:7a:bb:7c:3b:77:75:77:19:
         ee:85:0c:7a:b1:43:09:68:43:97:34:c9:57:d4:47:84:7a:3c:
         36:fa:41:c0:89:4a:26:65:37:54:93:20:f4:12:60:ae:bd:1d:
         ce:83:a4:3c:70:ed:7b:59:16:e4:a9:12:63:99:b8:71:98:ec:
         3b:23:e9:21:4a:78:56:80:d0:c9:5d:0d:56:3d:37:ba:90:b7:
         69:63:3c:3c:af:85:ce:98:3e:13:ea:c8:df:e6:a9:d7:f9:87:
         b9:b6:e1:12:e7:4d:62:24:7d:53:0f:f3:d0:bd:6b:15:ff:7d:
         ae:64:91:15:5c:4a:8a:6e:de:54:be:c4:c4:74:95:fc:00:33:
         f2:66:3b:3c:36:b1:e4:22:fd:b0:72:15:1a:eb:4c:4a:a0:06:
         58:4d:de:4d:1a:19:f1:ba:10:56:ad:7e:5e:26:8f:3c:b3:8d:
         28:af:4b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----