Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/jaDgdGfiXh5QtSzmqlem7Wgoaus.roa
File:                     jaDgdGfiXh5QtSzmqlem7Wgoaus.roa (raw, json)
Hash identifier:          qfExUoAiYw0FhrI+f8LhC25laAaNK8srsF9MEJfbtBg=
Subject key identifier:   8D:A0:E0:74:67:E2:5E:1E:50:B5:2C:E6:AA:57:A6:ED:68:28:6A:EB
Certificate issuer:       /CN=165495E8D327E4F62D5A16438F080E608A34D0D3
Certificate serial:       096F
Authority key identifier: 16:54:95:E8:D3:27:E4:F6:2D:5A:16:43:8F:08:0E:60:8A:34:D0:D3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/FlSV6NMn5PYtWhZDjwgOYIo00NM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/jaDgdGfiXh5QtSzmqlem7Wgoaus.roa
Signing time:             Tue 29 Sep 2020 10:03:38 +0000
ROA not before:           Tue 29 Sep 2020 10:03:38 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131642
IP address blocks:        2404:bac0::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2415 (0x96f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=165495E8D327E4F62D5A16438F080E608A34D0D3
        Validity
            Not Before: Sep 29 10:03:38 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=8DA0E07467E25E1E50B52CE6AA57A6ED68286AEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:38:c6:51:aa:f6:7c:0a:fb:c4:0d:be:04:48:
                    fb:9d:f3:8b:6e:53:a3:fe:64:33:b5:2c:6a:d3:7d:
                    34:e1:b4:3b:58:96:8d:46:92:20:b7:46:a9:62:20:
                    3b:06:dd:2c:85:77:a0:ff:6f:96:5f:1a:af:c6:8a:
                    a0:28:fb:0d:2d:a6:50:27:28:89:b2:ea:76:b3:41:
                    2f:b2:fb:c0:32:d5:f8:a9:01:e5:1a:33:f4:17:a6:
                    b7:09:13:d9:50:65:6b:35:e7:93:3d:34:1c:0a:b4:
                    7a:e8:58:0d:83:13:68:42:79:b3:dd:b8:04:ff:14:
                    70:bd:b0:f4:bc:01:67:40:e2:16:dd:a9:c5:13:3e:
                    e2:ee:61:a8:1d:e6:1e:d5:83:c7:1b:28:27:44:5f:
                    91:9a:e9:e2:ba:8c:8a:e7:96:9d:2a:86:03:e0:da:
                    35:2e:21:0c:54:31:40:37:95:09:32:2a:b3:c2:00:
                    f2:7f:a4:b6:31:9b:69:d2:f1:50:fc:2b:e0:ef:f8:
                    ff:9e:b7:e2:ed:fd:b5:f8:e7:c9:f7:77:e3:fc:12:
                    f6:f0:0b:2d:d8:a0:9c:c3:c3:09:db:5c:1e:66:b1:
                    e5:ad:24:14:96:1a:ec:8e:4c:fb:3a:6b:14:6b:35:
                    23:bc:da:db:3d:40:c0:aa:1d:56:3e:c6:84:63:36:
                    15:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:A0:E0:74:67:E2:5E:1E:50:B5:2C:E6:AA:57:A6:ED:68:28:6A:EB
            X509v3 Authority Key Identifier:
                keyid:16:54:95:E8:D3:27:E4:F6:2D:5A:16:43:8F:08:0E:60:8A:34:D0:D3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/FlSV6NMn5PYtWhZDjwgOYIo00NM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FlSV6NMn5PYtWhZDjwgOYIo00NM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/jaDgdGfiXh5QtSzmqlem7Wgoaus.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:bac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b2:81:f6:c6:bc:1a:e4:7a:7e:46:c7:de:b6:f8:68:8a:77:2a:
         a7:f6:cc:23:1c:ef:af:5a:ce:5e:d1:fc:4d:2f:c5:83:02:43:
         9d:13:87:aa:7b:20:1f:01:69:39:37:a2:e9:71:2d:9e:18:f6:
         09:e1:7c:16:70:95:e5:69:32:60:d0:93:59:7a:07:ff:f9:10:
         14:ac:c3:9c:b1:eb:32:7c:60:73:4e:6f:f3:40:65:76:50:db:
         84:7e:a3:85:8a:6d:d8:44:c6:37:37:b5:b2:bd:35:0d:49:e7:
         42:f4:11:28:3a:69:06:c8:a7:80:4b:98:d6:14:e0:d7:f2:ad:
         3b:81:23:66:b2:f7:6c:24:37:0a:cf:92:fa:7a:df:c9:a0:2d:
         ff:15:82:48:d5:e3:2e:6d:7d:41:42:6c:57:c4:f4:97:c1:47:
         74:94:ad:4e:3c:b3:e7:e2:18:e2:c0:1d:26:8d:70:1a:c9:f5:
         68:58:a8:11:24:3e:fe:49:c6:91:43:a5:66:5d:e5:6b:89:a7:
         54:85:53:4e:81:e4:ab:ae:37:5e:a9:57:45:8e:80:96:01:dc:
         45:03:0e:8a:aa:94:6e:e2:4d:83:bc:fd:2c:2b:cf:35:83:f7:
         a2:28:03:c1:91:8f:fe:54:70:c6:95:fa:d7:7c:90:b4:8f:a3:
         ba:f6:ef:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----