Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/0P7W1-ioNBOUAsSeAe289CIBX_g.roa
File:                     0P7W1-ioNBOUAsSeAe289CIBX_g.roa (raw, json)
Hash identifier:          6Kvb5y3QuYqc49X8aKDBZW//CeGT4JeNDICNuLhBLl4=
Subject key identifier:   D0:FE:D6:D7:E8:A8:34:13:94:02:C4:9E:01:ED:BC:F4:22:01:5F:F8
Certificate issuer:       /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial:       0C67
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/0P7W1-ioNBOUAsSeAe289CIBX_g.roa
Signing time:             Wed 29 Sep 2021 02:51:14 +0000
ROA not before:           Wed 29 Sep 2021 02:51:14 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     198949
IP address blocks:        210.61.3.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3175 (0xc67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
        Validity
            Not Before: Sep 29 02:51:14 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=D0FED6D7E8A834139402C49E01EDBCF422015FF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:3f:fa:a4:a8:77:90:20:8f:51:20:e2:26:e9:
                    b0:74:6c:bb:3b:19:c3:06:c4:1d:b7:2a:d2:4b:40:
                    a1:e8:35:97:2a:73:fd:20:9c:af:56:14:bd:00:60:
                    e4:3f:62:e6:96:68:d6:ec:ce:84:31:40:be:42:8b:
                    cc:75:da:84:58:bb:47:46:85:87:dd:33:b0:6c:a8:
                    e6:10:34:1c:3b:b3:13:a2:1a:c2:ec:66:62:9e:7a:
                    3e:b5:65:d5:83:47:e8:fd:2d:01:cb:a4:8e:a3:52:
                    80:9f:e4:f3:26:3d:18:53:40:72:d5:67:af:f3:08:
                    d4:41:cf:03:5d:ab:d8:8b:b6:88:1b:f3:38:2b:a4:
                    73:3c:11:c8:23:c1:55:ef:b0:bb:47:a6:74:69:07:
                    3f:13:42:90:e7:73:b9:fe:5e:5c:23:b0:4f:25:c9:
                    24:e7:94:2b:68:a1:09:61:19:9f:ad:d4:b3:5b:4a:
                    31:08:34:bc:d3:21:2d:32:35:2a:20:58:7f:5c:ab:
                    c6:42:e6:91:08:32:bb:a9:4b:f4:30:53:cd:a3:8f:
                    82:6a:57:3c:34:5a:a5:25:6f:3e:79:4c:c6:e8:ed:
                    9f:08:10:c2:29:6e:9b:5c:fe:45:96:ea:bb:db:b5:
                    3f:ab:9b:29:1a:94:30:6c:b7:85:70:ae:84:a6:a8:
                    ca:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:FE:D6:D7:E8:A8:34:13:94:02:C4:9E:01:ED:BC:F4:22:01:5F:F8
            X509v3 Authority Key Identifier:
                keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/0P7W1-ioNBOUAsSeAe289CIBX_g.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.61.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:f6:9d:4c:8b:5e:7c:4c:a8:e6:d8:36:9e:8b:f3:75:f8:2c:
         ef:f6:28:8b:d4:3e:e6:b0:04:f9:cc:55:1f:c1:2e:6a:f2:af:
         23:cb:94:55:06:70:a3:51:59:20:01:f9:80:d4:b4:6e:c5:3d:
         dd:08:a0:f0:34:ea:ce:6b:d7:c0:78:8e:01:e5:ef:c4:17:f7:
         80:58:51:a0:c7:fe:01:dc:73:74:d7:f9:1c:77:bb:5d:0d:bd:
         ce:e3:47:4e:34:8e:c6:7b:4a:b3:ec:57:2b:d0:e7:33:25:17:
         d7:28:7b:db:be:e6:5c:c0:1e:04:90:4a:81:61:c9:cc:82:97:
         b5:cc:df:46:46:2d:00:81:52:48:ff:a5:ee:41:c4:b9:0e:82:
         37:9b:0f:5a:de:b6:f7:1e:e3:76:17:72:41:25:a2:db:b9:b6:
         9a:28:b5:75:84:97:df:1b:62:de:d7:36:45:c9:b1:bc:0f:18:
         e5:b4:3f:8e:b6:e6:19:27:ad:e1:af:3e:64:e4:fa:2e:68:35:
         c6:96:f8:6d:cc:d9:22:b2:87:e9:f8:d8:d7:dc:17:38:d4:e3:
         4d:a2:ae:30:d2:c1:bd:32:80:29:d9:92:f7:23:07:67:18:31:
         86:24:da:78:88:d6:f6:8e:b7:4a:6c:74:24:39:1c:66:01:e2:
         f0:42:df:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----