Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/KnK45jjWnjwpepLTstapbkIV4tU.roa
File:                     KnK45jjWnjwpepLTstapbkIV4tU.roa (raw, json)
Hash identifier:          JWv7A3yb91sPngpw1UO4AsViWCmNXuEbCGiw2hwtzco=
Subject key identifier:   2A:72:B8:E6:38:D6:9E:3C:29:7A:92:D3:B2:D6:A9:6E:42:15:E2:D5
Certificate issuer:       /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial:       0844
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/KnK45jjWnjwpepLTstapbkIV4tU.roa
Signing time:             Tue 29 Sep 2020 09:58:32 +0000
ROA not before:           Tue 29 Sep 2020 09:58:32 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     3462
IP address blocks:        122.116.0.0/15 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2116 (0x844)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
        Validity
            Not Before: Sep 29 09:58:32 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=2A72B8E638D69E3C297A92D3B2D6A96E4215E2D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:13:76:ef:94:a2:e2:fd:f8:e6:56:b4:58:74:
                    87:2c:dc:fe:7c:53:73:c7:7f:e9:88:01:5c:44:4c:
                    71:92:b5:39:18:2d:b1:f1:0c:2c:34:eb:43:6b:27:
                    5b:ee:10:1a:e5:ca:13:eb:8e:15:f1:d0:e1:9a:33:
                    6d:f2:53:19:ed:63:e0:71:fc:5f:42:0f:8d:d3:27:
                    f1:30:e9:b3:d0:ef:8a:18:27:65:ed:c1:61:85:83:
                    65:92:75:d5:23:c7:c2:77:a4:bb:c0:84:2f:64:27:
                    18:28:b4:f5:95:2a:dc:ba:12:34:87:b2:1e:04:fb:
                    07:73:a8:3e:9b:b7:a8:88:46:7b:74:fb:3d:d8:30:
                    7f:f7:77:9f:b8:7e:d6:4a:e1:9b:a1:73:69:0f:61:
                    85:88:50:e7:87:43:cf:48:2c:90:4e:df:65:08:2a:
                    84:67:27:d2:26:b0:29:0f:a0:ec:03:9f:55:4e:47:
                    79:0d:bd:4b:79:c2:a0:37:f0:33:3d:09:8f:4c:73:
                    5a:94:85:25:57:57:cc:dc:fb:7b:df:45:65:61:02:
                    0e:33:c2:d0:3c:e7:db:39:ac:18:2c:0e:82:ea:40:
                    73:bc:bf:2a:89:b8:90:03:f3:89:4d:4b:61:2f:71:
                    a5:c4:da:83:62:40:7b:68:ad:97:83:08:58:4b:da:
                    9b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:72:B8:E6:38:D6:9E:3C:29:7A:92:D3:B2:D6:A9:6E:42:15:E2:D5
            X509v3 Authority Key Identifier:
                keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/KnK45jjWnjwpepLTstapbkIV4tU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.116.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         9c:a4:9b:7e:be:b5:e3:a4:b3:53:79:83:bb:b1:31:2e:da:17:
         89:4a:37:fa:b7:93:95:96:5f:b5:6d:df:0c:43:06:e7:8d:55:
         b6:5c:c7:07:61:56:cd:5c:37:21:e8:d7:d5:91:56:50:36:63:
         1c:ec:ac:f9:88:66:c1:33:b4:79:82:95:69:3b:86:c1:44:04:
         aa:84:87:59:9d:9e:12:86:f6:62:e4:9d:67:19:a5:03:42:c7:
         0f:ad:df:f5:a9:98:77:57:d4:4a:aa:2d:73:22:9c:23:6d:a3:
         d3:39:28:3f:93:6c:8d:46:15:02:6f:93:1f:29:07:3f:f4:78:
         54:3e:56:93:52:a5:ee:50:93:34:4a:cb:e9:f2:3a:80:8f:a5:
         ea:10:88:e0:47:a7:9c:a8:ed:67:39:4a:60:40:2b:23:38:ac:
         c0:1b:4b:90:c0:19:ce:93:83:d9:55:2f:f8:04:b0:22:42:32:
         aa:ba:77:7c:60:17:e1:21:b5:17:79:55:05:30:fa:61:02:89:
         65:83:1e:f5:2f:d4:39:e6:49:9e:fb:62:f2:16:ad:5b:0b:e0:
         69:76:d1:ec:ac:1e:67:cf:05:84:53:dd:0f:ad:96:e0:ed:5f:
         06:0a:c8:cc:a5:fd:94:4d:ac:4a:35:80:66:63:b0:55:8f:87:
         1b:42:e5:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----