Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/L6xq2CfvarX2uOEwDxYXuniiGZY.roa
File:                     L6xq2CfvarX2uOEwDxYXuniiGZY.roa (raw, json)
Hash identifier:          7UI7ukHu8gIfJ4IpzRoYc2nFlRJxGChmUBUsN/2jbYE=
Subject key identifier:   2F:AC:6A:D8:27:EF:6A:B5:F6:B8:E1:30:0F:16:17:BA:78:A2:19:96
Certificate issuer:       /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial:       0870
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/L6xq2CfvarX2uOEwDxYXuniiGZY.roa
Signing time:             Tue 29 Sep 2020 09:58:44 +0000
ROA not before:           Tue 29 Sep 2020 09:58:44 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     36040
IP address blocks:        202.39.67.128/27 maxlen: 27

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2160 (0x870)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
        Validity
            Not Before: Sep 29 09:58:44 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=2FAC6AD827EF6AB5F6B8E1300F1617BA78A21996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ff:8b:07:54:c4:0c:dd:7f:fa:30:c6:a9:cd:
                    4d:97:20:eb:22:86:d8:ca:41:86:6f:39:17:50:31:
                    46:9f:7d:49:ad:aa:49:a8:32:ad:f4:87:b5:fd:f2:
                    68:27:75:dc:0d:f9:ad:79:eb:4c:52:7b:9f:78:dd:
                    0a:51:65:ef:65:f0:e7:27:24:58:44:04:77:04:a3:
                    b2:f1:41:f9:39:75:34:27:c0:a2:55:ba:7f:ed:85:
                    e0:29:b2:de:66:ff:ab:09:fb:d9:d2:ee:c0:15:55:
                    39:c7:f8:79:e2:5f:18:c8:22:37:17:0b:ed:e4:58:
                    82:1d:15:e4:3b:ef:b2:c9:12:8e:b8:b0:f1:0e:43:
                    7a:2f:ca:cc:4d:83:fb:8b:13:7b:61:6b:8f:46:aa:
                    17:85:8a:e5:bd:a0:1d:47:00:b8:ba:d6:2b:21:1d:
                    f6:65:f1:fd:ae:bf:36:11:ad:82:6e:4c:5e:5c:d3:
                    06:8c:2d:c6:f8:02:4f:3a:a0:6f:de:80:8d:1b:ab:
                    37:0f:bc:3d:91:cb:c5:88:55:bd:24:1c:b1:c5:37:
                    24:04:df:ac:08:81:eb:43:f3:5a:68:df:f0:7a:e7:
                    fe:6b:0f:f2:94:60:3f:12:7b:84:51:27:55:68:00:
                    ff:f5:a3:c1:24:37:26:d7:de:52:ce:6a:4f:0e:07:
                    df:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:AC:6A:D8:27:EF:6A:B5:F6:B8:E1:30:0F:16:17:BA:78:A2:19:96
            X509v3 Authority Key Identifier:
                keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/L6xq2CfvarX2uOEwDxYXuniiGZY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.39.67.128/27

    Signature Algorithm: sha256WithRSAEncryption
         95:46:27:a6:0a:3e:e8:d1:a6:d7:8e:c7:51:c3:76:a6:b0:fc:
         73:67:1c:04:ec:1a:2c:75:41:18:cd:6b:55:86:18:95:7f:57:
         8c:14:4e:ec:01:4b:ed:9f:32:5d:44:9b:c1:a9:3d:49:71:76:
         35:45:e7:c8:91:e4:b5:27:1e:93:c3:08:5e:d3:16:01:4b:a5:
         1c:27:ad:a7:5f:60:7e:59:18:90:47:16:b0:b3:49:f3:7b:a5:
         d9:6a:c6:dc:32:4c:47:73:49:b9:92:57:16:1e:c9:24:51:96:
         64:84:e9:bc:71:df:ff:89:c6:2c:39:00:6a:71:53:f6:3e:ee:
         2f:77:c9:9c:d6:df:df:e3:f9:7b:73:b1:cc:e8:56:a2:d2:c5:
         2c:a5:40:bf:60:cc:be:84:9f:e2:e2:1e:f8:e8:fd:04:31:b6:
         0f:a1:76:db:e7:fa:82:a5:89:35:70:79:84:63:e1:a4:c6:55:
         ed:be:78:a0:8f:57:e9:00:c7:2b:66:53:e1:8f:cb:d9:77:cb:
         6c:48:ff:62:3b:32:fe:95:f3:04:d6:5a:29:fd:42:74:ac:40:
         3c:07:d5:73:07:eb:88:d5:d7:d8:e7:4d:f7:db:c2:36:70:b5:
         73:e5:67:99:c6:5b:9c:b7:94:60:8f:e0:f1:29:48:74:74:b5:
         5f:a8:28:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----