Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/fyQ74AQHbrOaZslZMdbeivegxTQ.roa
File:                     fyQ74AQHbrOaZslZMdbeivegxTQ.roa (raw, json)
Hash identifier:          0UDpfM7ZocwRuCpvNLdOO6e+16X06fj84q0nqR2CbQc=
Subject key identifier:   7F:24:3B:E0:04:07:6E:B3:9A:66:C9:59:31:D6:DE:8A:F7:A0:C5:34
Certificate issuer:       /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial:       09A1
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/fyQ74AQHbrOaZslZMdbeivegxTQ.roa
Signing time:             Sun 07 Feb 2021 13:15:30 +0000
ROA not before:           Sun 07 Feb 2021 13:15:30 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     17809
IP address blocks:        121.254.64.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2465 (0x9a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
        Validity
            Not Before: Feb  7 13:15:30 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=7F243BE004076EB39A66C95931D6DE8AF7A0C534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6b:1f:bb:f3:0e:82:31:f5:3d:33:f8:f6:ad:
                    60:db:0d:b4:29:dc:74:04:0b:2a:48:23:69:4b:41:
                    64:f9:3b:68:03:c3:a4:03:51:c3:1c:54:12:9f:b3:
                    ca:42:8d:c5:b6:91:89:c5:0f:71:71:01:5e:d5:1d:
                    20:09:af:c9:96:e8:5e:5e:f5:df:e4:b5:17:18:a4:
                    a8:48:3a:94:5c:2b:cb:8f:6f:79:87:b5:71:4a:4b:
                    39:b0:dc:b4:e5:4a:49:f7:06:c3:45:bc:48:d8:ab:
                    a6:39:36:ab:e9:15:23:a3:ca:64:ef:df:bb:7c:32:
                    55:19:d9:df:f6:f7:5d:90:2b:66:2f:21:ff:b4:78:
                    eb:1f:eb:0d:46:e8:d4:9e:3f:78:1c:75:70:a3:6d:
                    ca:55:b4:60:ef:0c:2e:fe:21:4c:5f:df:57:e7:20:
                    c9:26:84:ea:91:f5:18:b6:31:56:ab:87:be:f1:f3:
                    51:6d:35:cc:8d:5e:73:c7:c4:f9:0e:69:09:4e:ed:
                    1c:c1:f5:30:a5:4d:dc:07:48:c4:cd:e8:8a:17:b8:
                    74:4c:6e:5f:7f:f8:41:b8:6d:7f:e8:c4:46:2b:45:
                    72:7c:16:7d:09:be:4c:c0:e9:66:f8:15:c8:36:20:
                    45:0c:49:bb:91:ea:86:52:c1:eb:eb:59:07:4c:c2:
                    b0:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:24:3B:E0:04:07:6E:B3:9A:66:C9:59:31:D6:DE:8A:F7:A0:C5:34
            X509v3 Authority Key Identifier:
                keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/fyQ74AQHbrOaZslZMdbeivegxTQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.254.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         17:9b:b0:a2:b3:45:7b:ed:d7:27:68:e0:6e:a4:71:89:cf:2f:
         a8:bd:c6:97:11:6c:08:4f:22:99:46:a8:e5:ff:6c:56:60:2e:
         5f:5c:f8:8b:f0:27:cc:5a:a3:43:fb:5d:3f:ca:a0:ae:6b:46:
         dc:93:d6:7f:e7:99:43:8b:a8:76:c1:f7:79:29:04:64:da:8d:
         b1:57:54:fb:31:89:bb:94:91:52:6f:48:3b:d0:03:21:08:87:
         6c:28:ec:2a:4c:e0:11:b6:56:ab:98:03:85:37:59:77:3c:c3:
         9a:b4:21:bc:5a:f7:48:80:3b:01:8f:7f:6f:4a:30:f9:ea:8a:
         9c:d0:1e:56:d7:ae:a5:42:a7:54:47:38:8d:8a:1f:e1:bd:b9:
         13:11:4f:73:a2:76:1a:44:8d:89:c5:b8:16:2a:01:54:bd:14:
         75:c1:3f:98:61:f3:02:38:a6:5a:df:d3:71:0a:e5:f8:95:28:
         8e:4f:77:55:7d:e8:f2:bb:c5:8b:a7:c2:be:74:dc:01:29:f8:
         c5:b8:a2:7e:89:c8:e3:c7:ae:56:56:70:82:fd:df:5a:d3:88:
         1e:32:74:7d:b0:86:83:83:a5:c4:3e:61:e9:75:f2:72:31:fc:
         12:4e:46:f7:88:76:27:c9:72:2d:e4:c2:dc:b1:f3:a4:9d:83:
         01:d9:4d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----