Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/TEbg_i1FfbHgaTU8VDTzERGperA.roa
File:                     TEbg_i1FfbHgaTU8VDTzERGperA.roa (raw, json)
Hash identifier:          aKroLPz+8jhpDmWliKzNCU3NoD7dLbSMwOevjaHfhoY=
Subject key identifier:   4C:46:E0:FE:2D:45:7D:B1:E0:69:35:3C:54:34:F3:11:11:A9:7A:B0
Certificate issuer:       /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial:       0BFC
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/TEbg_i1FfbHgaTU8VDTzERGperA.roa
Signing time:             Wed 29 Sep 2021 02:50:44 +0000
ROA not before:           Wed 29 Sep 2021 02:50:44 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     15133
IP address blocks:        203.74.4.64/26 maxlen: 26

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3068 (0xbfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
        Validity
            Not Before: Sep 29 02:50:44 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=4C46E0FE2D457DB1E069353C5434F31111A97AB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4a:ba:e2:40:4f:de:57:7f:bc:3f:bd:18:06:
                    d4:85:c5:ae:d7:6f:25:6f:16:df:2a:9e:de:84:ce:
                    0b:86:c3:da:02:a0:ba:cd:07:89:3a:13:d6:3e:1c:
                    68:fb:3f:25:94:fa:01:0c:fd:d7:b9:d0:02:78:d6:
                    4b:41:9e:eb:b5:c5:ec:f2:f0:8b:64:df:08:8a:3a:
                    3f:4b:e4:94:ac:54:bf:27:32:49:cf:10:9a:26:f7:
                    7c:47:2e:5e:74:ea:4c:55:00:6b:ec:6c:cc:bf:03:
                    09:aa:f7:b6:36:9f:c7:3b:a5:b0:af:a2:0f:d0:79:
                    71:17:07:93:06:fb:ed:bf:c1:66:45:e3:fd:09:ad:
                    d7:13:a2:15:6f:fd:08:d5:02:e1:ec:dc:9f:ea:42:
                    90:7c:41:40:f9:1f:30:d6:25:0a:30:1d:2b:bf:f8:
                    ae:e2:76:99:ec:d5:d5:a9:df:67:af:b9:01:7c:f0:
                    e3:eb:2e:7f:6a:b8:7a:a2:79:95:75:40:fa:4a:c7:
                    70:0c:40:0c:59:9b:1e:b6:36:c4:39:09:58:30:ac:
                    0a:ba:1b:34:f1:c9:3a:40:d2:13:5c:7d:7b:7e:e7:
                    55:43:55:31:c2:a2:88:ff:7b:0a:17:dc:4b:87:15:
                    c2:0d:ca:62:e3:14:f5:8d:95:ef:7b:13:ff:77:fe:
                    94:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:46:E0:FE:2D:45:7D:B1:E0:69:35:3C:54:34:F3:11:11:A9:7A:B0
            X509v3 Authority Key Identifier:
                keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/TEbg_i1FfbHgaTU8VDTzERGperA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.74.4.64/26

    Signature Algorithm: sha256WithRSAEncryption
         83:92:2f:8c:20:d7:82:07:c3:6f:f9:6e:26:99:23:78:1a:ed:
         0a:f4:8f:96:8e:6c:18:0f:02:2e:0e:3c:34:48:14:16:8b:09:
         f4:ba:a5:e0:7a:38:c9:6c:9b:e2:db:54:ec:fe:71:9b:3d:0c:
         88:11:1e:c4:88:e2:13:d7:c9:31:6f:a7:50:82:06:d0:fb:b2:
         6f:17:c2:26:f9:13:c4:c6:00:ae:f9:38:7c:28:99:eb:d1:16:
         45:c0:33:fa:03:49:46:bb:f8:2c:b4:0b:73:3e:1f:f4:be:86:
         a6:14:26:01:cf:26:c7:cc:58:2c:28:49:25:da:20:a9:48:bb:
         74:64:d5:f9:f8:b2:a3:16:91:3f:c2:ea:25:8b:9f:88:98:bd:
         b3:6f:ee:8a:95:3e:88:9d:46:94:11:c9:a6:ab:e7:e8:44:3c:
         6c:56:8f:3e:39:c8:f9:0a:64:8b:e5:20:c5:dc:ef:cd:c2:ab:
         73:77:58:92:c3:16:9b:8b:a9:d8:3f:7b:29:3a:44:22:df:03:
         73:5b:c1:82:c2:2a:70:c8:ca:c4:9f:09:d7:66:5d:4b:ca:12:
         42:ff:ee:0d:8b:97:29:a2:8c:6b:1c:81:4e:59:65:81:fa:0e:
         f0:aa:38:2d:ca:33:cf:0a:91:2c:2d:ef:2b:f4:7b:19:d8:66:
         5e:4a:1a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----