Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/dnB8piD7lF8nbm5m2XOnsbtEFtc.roa
File:                     dnB8piD7lF8nbm5m2XOnsbtEFtc.roa (raw, json)
Hash identifier:          Z6hlw6IcfdxeLZ8NWXj5InRDOiC4PLVv/eK2XXUoad8=
Subject key identifier:   76:70:7C:A6:20:FB:94:5F:27:6E:6E:66:D9:73:A7:B1:BB:44:16:D7
Certificate issuer:       /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial:       078B
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/dnB8piD7lF8nbm5m2XOnsbtEFtc.roa
Signing time:             Tue 29 Sep 2020 09:51:36 +0000
ROA not before:           Tue 29 Sep 2020 09:51:36 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9674
IP address blocks:        39.8.0.0/14 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1931 (0x78b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
        Validity
            Not Before: Sep 29 09:51:36 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=76707CA620FB945F276E6E66D973A7B1BB4416D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8d:1b:d9:95:64:22:5e:51:89:42:60:0e:cb:
                    4b:25:b4:ce:0a:d2:58:58:e6:92:89:b9:0c:0e:f8:
                    e7:83:de:a8:92:64:bd:81:a1:2c:f2:ae:33:c0:1e:
                    24:4e:eb:ef:4e:e6:9e:6c:f9:2e:4c:2a:0a:a4:cb:
                    ed:13:1d:f9:bb:99:9f:af:39:a8:6b:2b:1f:76:37:
                    f4:83:36:a2:8f:10:55:05:8c:a7:11:07:9f:f1:52:
                    6b:32:4a:38:fb:f2:8a:8e:b0:e3:f6:3f:df:b9:a1:
                    d0:32:03:3e:67:ad:4a:3b:7f:67:1f:48:84:31:09:
                    83:a3:41:a2:1f:79:28:59:da:e5:d4:9f:75:3a:b6:
                    76:48:29:35:33:c4:c7:f2:bc:e7:9c:25:05:7b:32:
                    bf:71:2b:9f:49:bb:a3:bb:9a:9b:fb:2d:8a:9a:04:
                    78:00:3b:61:79:a6:22:89:4d:60:3e:db:ff:00:4c:
                    bf:7b:99:9e:1c:ab:0f:b7:8b:e6:ec:fe:27:4e:56:
                    1e:f9:77:5e:3d:37:a8:17:58:09:bc:de:65:98:56:
                    56:6c:b7:be:f6:47:6f:69:cd:52:c9:4e:38:21:70:
                    b9:2a:f2:80:39:71:cb:be:a2:da:e7:21:95:89:e1:
                    8e:e8:66:7c:6c:be:95:0a:93:07:fd:73:67:1a:21:
                    17:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:70:7C:A6:20:FB:94:5F:27:6E:6E:66:D9:73:A7:B1:BB:44:16:D7
            X509v3 Authority Key Identifier:
                keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/dnB8piD7lF8nbm5m2XOnsbtEFtc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  39.8.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         3b:eb:37:28:78:65:c0:86:95:58:7d:3d:fa:05:42:c3:74:36:
         0e:e9:7a:d9:0f:f5:2f:2e:f6:1a:97:c7:fa:66:46:55:9b:59:
         7f:3e:61:86:ac:66:37:b0:7b:10:bf:22:5c:00:9d:ee:f3:ba:
         90:59:77:4b:94:32:58:c1:4f:73:34:2f:cd:1c:4b:0e:1f:af:
         43:4d:04:5d:5a:19:a5:62:78:50:e9:3f:a6:79:d1:d1:8a:75:
         5a:bd:1b:5c:8b:a6:aa:06:cd:4e:fc:cb:43:8b:61:ff:7f:cb:
         ad:8f:9a:7a:c6:69:79:2a:4d:21:cb:64:14:9b:5e:70:1b:00:
         2d:0f:39:4a:b6:70:b6:a8:09:0c:c8:ca:5c:c8:66:ae:7a:20:
         1b:e1:a7:da:94:ed:6a:28:4d:7b:e0:10:54:7c:54:af:ac:f4:
         9a:0e:25:f8:bf:09:8c:9a:c5:cb:01:d1:03:e7:44:e5:d2:12:
         58:9f:33:27:f9:3f:61:79:e4:f1:6e:71:2d:07:29:0a:d7:a5:
         31:68:a5:7d:ff:41:a4:cf:f4:74:fd:c6:83:cd:37:dc:d9:14:
         1e:4b:55:aa:1f:fc:b3:bb:70:43:a9:11:71:cc:dc:c7:1d:b1:
         0c:c9:5a:7b:ce:ba:55:b5:67:b0:ca:81:6a:01:c5:c2:89:eb:
         62:82:0b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----