Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/hqBAqNp8K8_M87__ECcTzpkTaiE.roa
File:                     hqBAqNp8K8_M87__ECcTzpkTaiE.roa (raw, json)
Hash identifier:          MostNWOrfuPQsQzEIfwTp6ub2NutUUiZcehuV/6661o=
Subject key identifier:   86:A0:40:A8:DA:7C:2B:CF:CC:F3:BF:FF:10:27:13:CE:99:13:6A:21
Certificate issuer:       /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial:       099B
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/hqBAqNp8K8_M87__ECcTzpkTaiE.roa
Signing time:             Sun 07 Feb 2021 13:15:24 +0000
ROA not before:           Sun 07 Feb 2021 13:15:24 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     17809
IP address blocks:        111.67.56.0/21 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2459 (0x99b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
        Validity
            Not Before: Feb  7 13:15:24 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=86A040A8DA7C2BCFCCF3BFFF102713CE99136A21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e8:04:1d:9d:b8:f0:b0:5d:b5:20:11:a5:bc:
                    1e:e7:1c:c0:77:c5:af:a0:6e:d9:5a:33:a0:c8:05:
                    ca:61:1b:76:57:6c:84:29:f9:fd:b1:81:6b:a4:74:
                    d9:c9:17:71:97:61:42:f4:b3:48:19:d3:d0:7d:cf:
                    25:f3:9a:b0:2f:2a:98:be:4d:5d:54:3b:d1:14:8e:
                    df:0f:bd:5e:3c:f2:e7:aa:52:b0:0a:78:8b:5a:85:
                    3f:63:26:9e:62:98:87:2f:8d:5d:db:32:4b:d2:3a:
                    5d:5f:68:5c:c8:cf:41:85:cc:e2:75:f4:da:58:22:
                    8e:b4:61:97:dc:6e:06:be:17:b0:fd:ac:51:3b:98:
                    ea:b1:c4:0d:4f:42:ec:e4:0b:2c:fb:29:5d:38:f2:
                    dd:dc:1d:d2:c4:36:97:3f:fe:14:98:87:7b:f1:dd:
                    8c:69:bb:ca:c3:9f:aa:22:ac:e1:5d:92:10:49:4d:
                    a2:0e:94:9c:77:c3:9f:e8:a2:58:4a:dd:59:b0:3c:
                    3f:41:8b:63:0e:4c:59:bb:10:7b:fa:d8:56:07:da:
                    93:0a:1f:f6:b8:3f:f2:d7:7a:b8:8c:bd:8b:95:15:
                    87:d6:93:bf:24:1a:5b:14:15:4d:0a:01:56:e6:22:
                    cb:32:ab:cb:40:34:d0:68:3f:34:38:eb:69:40:37:
                    6c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:A0:40:A8:DA:7C:2B:CF:CC:F3:BF:FF:10:27:13:CE:99:13:6A:21
            X509v3 Authority Key Identifier:
                keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/hqBAqNp8K8_M87__ECcTzpkTaiE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.67.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a1:4a:19:74:34:c3:fc:f6:eb:46:6e:10:bc:76:43:19:8f:48:
         37:9f:10:1c:99:83:b8:6e:ef:a1:be:55:1d:d5:81:cb:6d:f5:
         eb:07:ec:bd:cf:ab:8b:6c:32:69:1f:03:c3:3a:58:bb:e0:13:
         a2:13:82:dd:86:7b:23:a6:05:43:d6:28:02:9f:e9:cf:e7:3d:
         b4:07:03:34:6a:61:ee:72:2d:04:e6:c5:4c:a7:74:9d:9a:65:
         dd:e2:77:61:26:b5:0b:4b:89:26:2a:8c:68:37:ea:4d:80:5c:
         03:d5:f8:e2:2f:46:e2:84:1a:5f:31:66:f6:1b:fd:29:59:6f:
         cb:b5:3b:fa:f1:1b:a8:37:a8:0a:ee:1d:2f:d7:05:ee:d3:d5:
         64:ff:37:6c:27:b8:95:96:72:33:06:35:49:bb:63:1a:f8:64:
         38:11:ff:fd:4f:af:d8:7d:8c:9b:9c:1b:b2:c8:be:40:35:f5:
         4a:11:87:4e:13:c5:ae:c6:bd:3d:f9:0b:ac:1b:40:cb:ff:de:
         46:d8:1a:b5:db:fb:fc:d4:4d:17:e6:07:54:4f:82:81:e2:95:
         2b:0f:2e:a3:cc:94:91:cc:b8:d5:2a:8e:c1:87:75:66:10:ad:
         de:97:b6:82:83:c7:fe:b5:56:40:48:42:9b:9f:03:2c:9e:9d:
         4a:df:6c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----