Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/iOtkcFdS9g8D2s1m3e8yH-VRUD8.roa
File:                     iOtkcFdS9g8D2s1m3e8yH-VRUD8.roa (raw, json)
Hash identifier:          d7LuWGwZo06SRQCDm/EzigIOe5aVGfjhA7vSO2XFZrc=
Subject key identifier:   88:EB:64:70:57:52:F6:0F:03:DA:CD:66:DD:EF:32:1F:E5:51:50:3F
Certificate issuer:       /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial:       08D2
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/iOtkcFdS9g8D2s1m3e8yH-VRUD8.roa
Signing time:             Wed 18 Nov 2020 07:54:51 +0000
ROA not before:           Wed 18 Nov 2020 07:54:51 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     17809
IP address blocks:        113.61.128.0/17 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2258 (0x8d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
        Validity
            Not Before: Nov 18 07:54:51 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=88EB64705752F60F03DACD66DDEF321FE551503F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:2b:b4:b1:eb:72:15:72:8b:b4:fd:2a:03:de:
                    20:8e:6d:57:84:96:e9:21:69:8c:66:0c:07:36:c0:
                    f7:0e:62:53:13:fd:ad:99:47:92:52:1c:12:e6:bb:
                    23:6c:4e:d8:71:ed:db:43:20:c9:e9:19:9d:8d:e1:
                    74:e9:fa:19:a0:a7:de:10:c5:99:dc:8f:13:0b:1f:
                    88:22:3b:58:84:50:d7:ea:eb:9e:24:0b:27:16:3a:
                    7f:4c:ee:23:cf:02:23:73:37:ee:46:a6:75:67:c8:
                    a8:a8:97:ef:ad:94:7c:a8:fe:79:be:9a:ce:fc:2e:
                    09:4b:76:bf:f8:af:0f:df:a6:8b:6e:5a:87:ed:e0:
                    ff:22:49:78:bf:64:9e:c9:62:4e:b1:a4:2c:0b:91:
                    5f:73:ff:58:b2:fd:a9:c6:8c:d0:d4:8b:40:72:c4:
                    4c:6a:3d:0e:90:c6:1b:d4:22:bc:5b:e7:e9:62:b7:
                    25:59:a5:75:7e:10:ee:62:e9:f9:ae:22:9f:1c:39:
                    a8:22:99:4a:03:16:52:e3:dc:7e:ca:08:c1:af:2b:
                    8c:2b:6f:a5:42:f4:35:b9:0a:90:d3:36:c5:4c:b8:
                    58:2c:8e:0c:de:0e:5b:d6:9e:7e:c5:8b:bd:cc:cb:
                    d8:7c:7a:77:fc:ff:15:5e:b9:f7:92:e2:71:cb:b8:
                    42:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:EB:64:70:57:52:F6:0F:03:DA:CD:66:DD:EF:32:1F:E5:51:50:3F
            X509v3 Authority Key Identifier:
                keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/iOtkcFdS9g8D2s1m3e8yH-VRUD8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.61.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         5f:da:81:22:b7:be:4c:74:25:e5:24:2a:df:41:4a:fe:06:05:
         7c:b9:1a:e4:5f:2d:e6:f8:2d:40:0f:e3:7a:d3:ae:af:b6:2d:
         51:01:3f:29:63:96:33:cf:4d:05:5a:13:93:5c:92:24:3f:73:
         fa:74:d6:09:ed:f9:aa:26:5f:21:d4:b6:79:8c:ab:ba:49:5b:
         e3:05:d7:d9:14:7e:66:f8:15:c5:19:f0:78:b1:9c:e0:a9:3c:
         86:d9:81:6c:1d:d2:f9:2d:26:cc:03:07:e2:4d:d7:3f:54:e4:
         9c:7d:6f:0f:54:10:00:21:3b:2f:14:d4:bf:32:f0:b3:08:6f:
         b9:2a:f1:72:11:fb:4b:9c:77:45:cd:85:8d:83:23:e6:65:83:
         32:cf:e6:48:29:59:83:da:9a:3e:f6:8e:e2:39:ee:8f:e8:c7:
         8a:65:83:e0:c3:d7:fe:a2:3c:86:60:0d:41:89:9b:bf:29:f2:
         b5:2a:73:c9:5c:f6:c5:9a:12:6d:8e:8d:42:13:46:67:0e:5b:
         86:38:2c:4c:5a:d1:76:51:22:05:2c:b6:75:37:23:98:57:e7:
         ae:ea:7d:22:23:a8:04:43:f4:92:ce:f6:7f:4e:18:c5:81:8b:
         c4:41:da:80:92:25:9b:2d:b5:cf:1a:aa:50:bb:93:6b:39:02:
         77:0f:a5:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----