Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/rHo94b3ddkbh4jPlft8mLPPT93Q.roa
File:                     rHo94b3ddkbh4jPlft8mLPPT93Q.roa (raw, json)
Hash identifier:          8jCGNLskWydVxBoj0BEWlqH95onoM/oYZnYhYDvJdnI=
Subject key identifier:   AC:7A:3D:E1:BD:DD:76:46:E1:E2:33:E5:7E:DF:26:2C:F3:D3:F7:74
Certificate issuer:       /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial:       078D
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/rHo94b3ddkbh4jPlft8mLPPT93Q.roa
Signing time:             Tue 29 Sep 2020 09:51:38 +0000
ROA not before:           Tue 29 Sep 2020 09:51:38 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9674
IP address blocks:        118.231.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1933 (0x78d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
        Validity
            Not Before: Sep 29 09:51:38 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=AC7A3DE1BDDD7646E1E233E57EDF262CF3D3F774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b2:31:c6:a2:b5:b3:ed:e4:e9:88:61:f1:38:
                    56:87:00:92:73:41:7e:11:5d:39:9c:7f:8a:5d:1a:
                    40:c4:b0:fc:65:e1:90:be:28:40:15:c6:03:b9:09:
                    46:07:4b:16:d9:dc:f5:84:84:3b:63:6d:a7:65:26:
                    40:b3:a6:f7:da:5e:83:c7:85:be:ae:ed:db:2a:57:
                    8d:ef:4c:b1:24:a4:5a:e2:d9:7a:33:c1:0a:f6:d7:
                    0c:97:ad:03:33:b1:80:0e:97:33:4d:22:91:6e:71:
                    8b:4d:98:36:f5:cf:d2:44:58:09:ef:63:4b:05:a0:
                    a1:e0:ac:a2:74:ef:22:50:9a:0c:5b:16:f7:81:45:
                    be:6a:af:c5:0d:2f:f6:ac:18:a3:5b:33:4c:98:04:
                    39:00:f4:37:7c:29:8a:06:0a:f4:6f:16:0b:59:f2:
                    ed:7a:28:e1:6d:d2:60:8a:07:72:eb:26:58:fb:97:
                    36:48:a6:07:c8:67:df:6a:6e:79:2e:4f:26:f7:15:
                    fc:be:0c:fc:3b:e1:66:38:74:da:d9:99:f5:a1:73:
                    11:ed:19:2a:ac:d0:74:36:e9:19:2c:19:12:f2:28:
                    9d:6c:70:2b:25:62:a0:75:40:bd:79:6f:36:2f:3d:
                    30:44:a0:d0:1d:cb:3f:61:27:37:6c:30:8d:4e:02:
                    a4:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:7A:3D:E1:BD:DD:76:46:E1:E2:33:E5:7E:DF:26:2C:F3:D3:F7:74
            X509v3 Authority Key Identifier:
                keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/rHo94b3ddkbh4jPlft8mLPPT93Q.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.231.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8c:1e:c5:09:c9:9a:b1:21:1f:21:ad:50:82:87:79:2b:66:11:
         f4:6e:26:7d:f2:b2:9d:b9:99:5e:76:50:8d:e1:ec:a9:13:02:
         2a:ae:33:34:5d:e4:b7:19:2f:aa:f5:aa:e3:b0:40:19:78:bd:
         b1:ac:94:3e:48:87:35:e2:1d:eb:59:55:29:b3:01:92:1d:45:
         47:f1:cb:7e:c4:9d:a3:63:5a:8e:16:5f:89:fa:43:9f:33:ac:
         a1:a1:90:7a:a0:39:47:32:9b:ae:40:66:23:e1:9c:ff:86:d3:
         1d:51:2c:9b:be:6c:2e:bb:71:1b:35:a5:3a:4b:90:2f:86:2a:
         13:eb:de:ea:dd:7b:cc:65:b0:69:ae:4d:29:c4:ea:ec:fe:34:
         e2:24:97:1e:70:8a:4e:1b:4d:04:6b:53:99:25:f5:69:d9:af:
         29:0e:15:e2:c3:7c:d4:28:0b:fd:14:c7:77:6d:e3:52:2e:89:
         58:16:49:47:af:d8:76:9d:98:5b:3d:67:00:8e:1e:bf:7e:b3:
         1c:83:1f:41:14:30:15:ea:cb:f7:27:f1:6f:7b:f4:a5:37:3f:
         87:e7:09:23:97:b4:13:73:69:6d:74:c7:dc:68:fb:bb:7f:cb:
         d0:08:e0:12:7e:d8:47:2f:92:9f:6e:73:88:d4:84:4d:6e:1c:
         db:73:61:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----