Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/b30J1r3xAYzZp_jzMUgOYwJCyLM.roa
File:                     b30J1r3xAYzZp_jzMUgOYwJCyLM.roa (raw, json)
Hash identifier:          2DxIaUBWqekSgE0Ljpyrbi3P84RwcF2OavwDJNbb9Sg=
Subject key identifier:   6F:7D:09:D6:BD:F1:01:8C:D9:A7:F8:F3:31:48:0E:63:02:42:C8:B3
Certificate issuer:       /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial:       096A
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/b30J1r3xAYzZp_jzMUgOYwJCyLM.roa
Signing time:             Thu 21 Jan 2021 10:23:16 +0000
ROA not before:           Thu 21 Jan 2021 10:23:16 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     17809
IP address blocks:        203.217.96.0/19 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2410 (0x96a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
        Validity
            Not Before: Jan 21 10:23:16 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=6F7D09D6BDF1018CD9A7F8F331480E630242C8B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:2a:e4:39:1c:df:96:44:f2:7c:9f:ec:7c:f6:
                    13:04:80:b6:f1:2d:30:77:db:58:9b:5f:0d:95:8c:
                    1a:a2:27:f9:9e:f9:cd:90:2f:22:53:06:76:37:68:
                    b5:dc:dd:33:8d:2c:1e:81:e2:01:cd:e9:a5:d3:35:
                    31:b0:35:fc:f1:66:8a:78:9f:bd:46:12:e5:5a:9b:
                    2a:78:b1:02:d9:fe:e1:24:29:ac:63:84:39:f9:e2:
                    ed:d0:e1:88:b8:7f:e3:1c:58:35:e9:58:99:b1:e4:
                    08:ae:ce:e1:00:fe:b1:a9:5e:28:bc:e7:98:87:04:
                    a4:7e:fb:98:b7:c6:6f:7c:bf:24:07:e3:1b:18:7b:
                    51:c1:7a:1a:a9:f7:21:b8:a0:d4:a5:ff:79:70:db:
                    0d:79:0d:ca:d5:49:6c:1f:dc:f8:a2:d6:77:0a:b1:
                    c9:29:79:c8:98:78:84:fc:8f:4a:36:56:a2:72:23:
                    cc:cc:26:9b:ac:2e:8f:01:6f:a1:db:d0:a2:3a:71:
                    14:19:d8:b0:e4:46:ba:84:71:40:03:06:62:ee:e1:
                    d0:81:c7:9f:4c:72:ea:59:a8:72:c6:28:de:34:bb:
                    30:a7:a1:75:60:ec:9c:71:4f:eb:2f:19:ae:c5:e4:
                    d0:b2:e0:ad:d0:8d:7e:4c:23:0d:0d:e5:d0:3f:e5:
                    2e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:7D:09:D6:BD:F1:01:8C:D9:A7:F8:F3:31:48:0E:63:02:42:C8:B3
            X509v3 Authority Key Identifier:
                keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/b30J1r3xAYzZp_jzMUgOYwJCyLM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.217.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         96:d1:ae:1c:2f:83:4f:66:83:07:00:ea:1b:b2:63:7a:14:d1:
         2b:a3:e8:44:49:98:13:6d:88:16:f5:51:f2:05:06:24:1a:6c:
         1c:e3:cc:d3:52:cb:70:3d:95:f4:7a:d5:93:9d:bc:09:a6:9f:
         f4:50:ad:5d:e1:a6:6b:76:18:23:36:4f:89:cc:96:8b:01:85:
         4e:0e:f9:65:c0:1c:2e:8a:d9:b7:66:75:e9:e1:f8:74:e8:bb:
         3f:93:92:bd:b7:80:69:4a:b6:50:72:76:ca:bf:62:78:54:89:
         c6:e6:d3:cd:b8:bc:6f:1c:09:a8:a1:bf:5c:2c:b6:68:0a:51:
         a3:7a:55:95:c9:44:17:1a:12:9f:63:5f:a8:ea:99:86:42:96:
         78:51:11:13:a8:7d:ed:b8:9c:58:18:26:84:e4:95:3f:71:78:
         58:e6:7a:91:cf:20:c8:52:71:70:7c:1a:b6:0b:05:57:36:68:
         5f:8f:db:e1:2c:a9:52:2e:53:d2:b6:c1:69:f1:7a:54:a3:0b:
         11:88:ea:d0:6b:a4:a8:67:42:b7:22:37:39:50:86:2d:dc:63:
         50:d4:fd:52:1e:24:4e:23:df:b0:04:4a:c8:4b:51:93:51:9b:
         70:cf:2d:b0:75:ba:99:f6:c1:40:58:84:74:78:04:0d:c3:36:
         29:bf:ce:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----