Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GRONEXT/nWDE6oanVu0YkuM9zbrzGN6NUcA.roa
File:                     nWDE6oanVu0YkuM9zbrzGN6NUcA.roa (raw, json)
Hash identifier:          WjKkoaIYhDwfPyFwGMdDG1aQAJ3dEJ31juLmBPn/JO8=
Subject key identifier:   9D:60:C4:EA:86:A7:56:ED:18:92:E3:3D:CD:BA:F3:18:DE:8D:51:C0
Certificate issuer:       /CN=1A610A62A8A72CD36C1D22C7085EDF1809518994
Certificate serial:       0621
Authority key identifier: 1A:61:0A:62:A8:A7:2C:D3:6C:1D:22:C7:08:5E:DF:18:09:51:89:94
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GmEKYqinLNNsHSLHCF7fGAlRiZQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/GRONEXT/nWDE6oanVu0YkuM9zbrzGN6NUcA.roa
Signing time:             Tue 19 Jan 2021 02:31:25 +0000
ROA not before:           Tue 19 Jan 2021 02:31:25 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131667
IP address blocks:        2405:a040::/32 maxlen: 36

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1569 (0x621)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A610A62A8A72CD36C1D22C7085EDF1809518994
        Validity
            Not Before: Jan 19 02:31:25 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=9D60C4EA86A756ED1892E33DCDBAF318DE8D51C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:da:57:95:d2:a3:26:d1:f1:f4:16:8c:29:c5:
                    e4:7b:f6:bc:1b:1b:54:7e:ff:7e:10:1e:d3:06:5f:
                    55:66:d6:db:46:09:e0:c4:1f:84:03:6b:32:df:6c:
                    96:02:cf:ba:4f:94:32:ae:28:b4:65:22:33:8b:ff:
                    3d:cd:c0:96:45:cc:09:55:77:3e:38:9d:6b:d3:5c:
                    89:0f:e3:16:9b:9d:29:9e:b3:97:12:8f:7c:80:b7:
                    a0:73:eb:93:b3:e4:49:4c:09:6c:c0:83:df:0e:36:
                    83:34:8b:49:ad:3b:fe:6a:c4:c8:4c:b5:63:82:64:
                    47:e3:89:69:c2:e9:23:97:74:ab:04:35:f0:53:ab:
                    94:b5:94:08:73:bc:3b:dc:7b:e4:3c:ed:08:64:5d:
                    c5:0c:da:9f:9e:72:3c:56:fd:9c:05:4a:3e:da:ab:
                    5a:c0:55:c3:08:7b:70:be:a9:7a:61:c0:9e:d6:57:
                    a2:1b:5e:8c:1b:bf:c8:7f:b6:68:06:13:69:b3:af:
                    6f:36:22:ac:e1:73:85:2a:4a:c6:f8:4a:b4:ec:ff:
                    2c:f7:6c:d3:51:e0:e8:b1:62:5e:4a:12:1b:b5:b4:
                    c9:df:98:6c:58:ed:80:4f:c8:67:6f:9d:f7:17:9c:
                    8f:b7:07:90:9e:c4:fc:5e:76:d0:d6:62:98:30:e0:
                    2c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:60:C4:EA:86:A7:56:ED:18:92:E3:3D:CD:BA:F3:18:DE:8D:51:C0
            X509v3 Authority Key Identifier:
                keyid:1A:61:0A:62:A8:A7:2C:D3:6C:1D:22:C7:08:5E:DF:18:09:51:89:94

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GRONEXT/GmEKYqinLNNsHSLHCF7fGAlRiZQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GmEKYqinLNNsHSLHCF7fGAlRiZQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GRONEXT/nWDE6oanVu0YkuM9zbrzGN6NUcA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:a040::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:fc:d6:7e:74:ea:d5:91:0d:29:07:c6:7f:b7:3c:22:d8:f8:
         86:72:87:17:d9:00:74:ca:26:64:4b:b3:88:ac:c7:4e:99:b3:
         de:07:9d:92:d0:ef:64:86:41:ac:66:9e:a8:d9:84:6d:d2:0c:
         25:8d:99:48:cb:54:6e:bb:9c:5e:ba:12:69:41:e1:32:e3:d9:
         89:4a:cb:18:2c:b7:0b:29:f8:28:9f:62:97:8c:67:26:01:25:
         ca:f1:4e:5e:04:d7:f2:a9:8f:b8:4a:03:a6:8e:5d:e8:3b:a9:
         0b:f6:3e:e8:71:5b:be:86:37:fd:0c:ed:79:6b:8a:fe:6b:f6:
         e2:62:aa:f3:41:7e:6d:ec:de:25:0a:da:f4:2a:89:e9:6a:ab:
         35:74:a1:bf:60:27:70:52:65:a1:d7:e2:84:9d:cc:18:6e:b7:
         a3:19:e2:8f:db:b9:82:e3:dc:7d:f9:8a:0d:0c:ac:e2:05:95:
         df:08:6f:24:02:c8:24:c3:3c:a8:c1:e7:91:d8:83:19:c9:aa:
         bc:fb:eb:d9:d8:a9:35:c1:17:4a:01:a3:26:78:b9:4a:69:be:
         af:27:c7:77:0e:2f:37:40:7d:6f:17:f2:34:cb:a7:4e:06:c8:
         f2:b6:c9:90:92:cc:9c:ac:1b:28:17:b3:8d:09:1f:f9:bf:d8:
         5c:24:bb:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----