Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/GfQH76naLP9fxTRWW8_fwWxs5bA.roa
File:                     GfQH76naLP9fxTRWW8_fwWxs5bA.roa (raw, json)
Hash identifier:          3Xn/c4X7j+vHoxrBZr2wNE1htZ4BuzrZ9zNHHAuT/bY=
Subject key identifier:   19:F4:07:EF:A9:DA:2C:FF:5F:C5:34:56:5B:CF:DF:C1:6C:6C:E5:B0
Certificate issuer:       /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial:       0C48
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/GfQH76naLP9fxTRWW8_fwWxs5bA.roa
Signing time:             Wed 29 Sep 2021 02:51:06 +0000
ROA not before:           Wed 29 Sep 2021 02:51:06 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     10126
IP address blocks:        220.128.64.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3144 (0xc48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
        Validity
            Not Before: Sep 29 02:51:06 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=19F407EFA9DA2CFF5FC534565BCFDFC16C6CE5B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c3:fb:b0:43:cc:46:7e:99:37:9d:a6:bc:89:
                    b3:d3:5d:d5:76:e2:2d:1d:f8:d8:da:f6:0e:0d:0a:
                    5f:8f:38:a3:67:42:ab:ae:a4:7b:da:a1:c1:fd:81:
                    7c:3d:26:f6:7f:eb:51:92:ab:61:b6:f8:05:2d:80:
                    8c:20:80:ac:e3:fd:55:d2:87:5b:af:62:c7:33:a1:
                    93:c8:71:06:10:a5:dc:b1:5b:db:54:99:7f:b8:ba:
                    ff:18:0e:bc:d3:d9:27:6f:0a:a7:0b:42:17:47:a9:
                    16:b3:fb:1a:1b:e7:24:e6:d4:ec:b0:a3:db:a4:f1:
                    fd:06:44:e7:8a:78:10:38:21:1b:4c:ef:d9:b9:c6:
                    db:22:10:f5:bb:be:00:85:28:c9:fa:84:67:f4:20:
                    f8:81:c0:93:dc:f9:35:6e:73:ac:ed:1b:64:d3:74:
                    78:69:18:3a:a4:2e:f1:e3:c9:e6:75:31:51:08:db:
                    68:2c:b3:49:d3:a0:f3:ee:26:9d:98:88:61:66:4d:
                    70:fc:43:88:74:33:6a:28:e0:84:16:d4:c9:fd:17:
                    b5:04:67:7f:87:c4:94:f8:01:1c:e8:58:7b:28:d5:
                    4a:eb:7d:ca:24:8b:d3:61:b6:f1:57:39:a2:30:79:
                    aa:4f:e5:8e:3c:d3:df:02:05:2f:8f:37:3c:48:a2:
                    2d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:F4:07:EF:A9:DA:2C:FF:5F:C5:34:56:5B:CF:DF:C1:6C:6C:E5:B0
            X509v3 Authority Key Identifier:
                keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/GfQH76naLP9fxTRWW8_fwWxs5bA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.128.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         cf:d1:4c:f9:01:ca:42:cb:27:fa:27:17:26:51:b5:9d:aa:04:
         fe:df:2e:95:22:f8:1f:d7:ed:e5:7a:8d:32:4a:c2:d7:f2:55:
         65:15:94:49:ba:bc:63:96:4f:70:64:b2:2f:8d:8f:88:66:c1:
         d6:82:13:28:c6:48:24:03:df:01:4a:fc:b2:ab:e8:94:09:44:
         3b:25:23:2f:3b:39:49:3f:7a:d5:96:d8:d6:88:5b:fb:f3:17:
         01:66:a4:ee:2a:15:cb:01:1b:dd:88:63:c3:ed:7b:25:de:c5:
         23:78:25:45:5d:04:5b:94:92:ec:8d:49:a8:2f:d1:f2:da:02:
         00:1b:b1:81:4a:b1:93:73:f8:0b:a2:16:f8:ea:02:bf:8f:1f:
         7c:6d:71:bc:c4:22:24:ea:9a:6b:fd:35:71:2b:dc:92:0e:5f:
         81:92:2c:95:45:77:6b:16:aa:9b:55:50:e9:2c:19:de:b6:b2:
         3b:37:20:05:f4:6a:55:c2:13:c9:c1:45:e5:dc:6f:b0:01:1b:
         29:99:bd:09:94:a0:de:05:04:c9:3f:84:b6:b2:fc:f5:51:49:
         0e:3f:d6:b1:87:29:64:71:71:9d:d0:17:3c:8a:5f:78:69:c2:
         09:a7:21:85:e5:04:9f:ed:d5:2b:2f:3f:69:f6:c8:25:1b:7b:
         9c:95:0e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----