Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/EOktAg2qLvd1x7VkvP7JM-iRAT0.roa
File:                     EOktAg2qLvd1x7VkvP7JM-iRAT0.roa (raw, json)
Hash identifier:          m7K6Z0qP4jtFHYKXcmk6mpicBeL6fgcpw9vb6OkvCz8=
Subject key identifier:   10:E9:2D:02:0D:AA:2E:F7:75:C7:B5:64:BC:FE:C9:33:E8:91:01:3D
Certificate issuer:       /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial:       0805
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/EOktAg2qLvd1x7VkvP7JM-iRAT0.roa
Signing time:             Tue 29 Sep 2020 09:58:14 +0000
ROA not before:           Tue 29 Sep 2020 09:58:14 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131660
IP address blocks:        2001:b000:594::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2053 (0x805)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
        Validity
            Not Before: Sep 29 09:58:14 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=10E92D020DAA2EF775C7B564BCFEC933E891013D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c9:45:47:2a:31:a6:64:5f:38:ba:c9:74:22:
                    a6:9f:a8:a9:ac:cd:d4:ec:ee:25:80:62:f9:bb:70:
                    54:bf:91:7c:15:27:e3:9c:bb:cc:d1:68:a7:df:d6:
                    60:ba:bd:66:1b:58:99:e3:96:8c:4c:65:26:ab:07:
                    18:9a:f2:1e:b0:8f:b0:e4:a0:d3:46:3c:09:17:48:
                    ab:14:0e:ef:d3:5f:b6:8c:d6:fa:a4:a2:bb:99:29:
                    3d:5d:29:51:f1:b8:e1:06:46:52:96:7a:03:ba:83:
                    e1:11:e9:34:c5:0a:6f:b6:4a:3e:0e:b3:a5:56:bd:
                    5c:0d:a7:26:a8:91:77:98:ed:42:3f:48:49:56:54:
                    c4:d6:c8:db:b6:2f:aa:cf:64:7c:58:01:3a:9c:91:
                    56:f9:3c:c9:a0:e1:16:1a:15:79:c3:a5:38:06:5a:
                    8c:49:5b:f6:3e:43:94:36:be:df:8d:7f:4f:da:be:
                    c3:eb:f9:1e:68:8b:58:29:f9:a2:25:c1:25:03:5a:
                    5f:5e:04:09:e8:aa:8c:56:d2:d5:e6:ba:17:20:73:
                    80:4d:06:ad:81:ae:fa:1e:82:29:aa:04:71:2d:a9:
                    6c:01:25:15:4c:b3:09:c5:17:76:d2:6a:6e:29:93:
                    05:15:a5:e2:79:5c:0c:af:1b:0b:f4:e5:a2:80:a9:
                    08:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:E9:2D:02:0D:AA:2E:F7:75:C7:B5:64:BC:FE:C9:33:E8:91:01:3D
            X509v3 Authority Key Identifier:
                keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/EOktAg2qLvd1x7VkvP7JM-iRAT0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:b000:594::/48

    Signature Algorithm: sha256WithRSAEncryption
         9d:36:28:7a:94:17:64:c2:fe:fd:a3:73:06:f7:4c:ec:f9:5c:
         ac:01:a4:79:80:83:ea:48:c9:47:66:81:79:0e:91:f9:73:f7:
         13:86:3e:3b:eb:a1:4d:00:2a:0b:27:06:5a:ac:b1:ce:7e:4c:
         1a:43:9b:73:cb:5a:a2:cf:91:d8:ea:2e:28:d2:18:c7:9b:3b:
         80:8c:55:f1:16:7f:96:bb:26:66:32:b4:8c:53:b8:1a:da:8d:
         0c:4d:91:66:3d:aa:ff:6e:e7:99:92:d4:f6:b4:0f:09:fa:a1:
         b0:f5:78:8a:aa:82:66:95:5d:fe:8d:3e:98:72:f1:cd:22:7f:
         44:08:a1:40:43:b7:c8:7a:1b:7f:3b:ed:06:92:09:1c:a8:49:
         2e:21:51:b4:64:34:d9:7e:60:f2:9d:da:56:1b:5c:44:b7:e4:
         3b:48:e8:01:39:86:cf:51:79:68:c0:9d:ed:10:fd:f8:76:3d:
         a9:18:44:b9:ce:da:de:08:41:f1:4d:6b:bb:8d:0f:3f:96:a1:
         73:24:16:b8:f7:dc:af:a6:b6:39:d5:b5:98:89:c6:38:8d:5d:
         70:f8:12:0e:5e:7a:03:65:8a:f2:b7:14:6e:ad:fb:55:7b:a0:
         38:cf:bf:1c:1a:b9:aa:37:56:f0:ba:a1:02:ff:f4:70:cb:19:
         b7:03:2c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----