Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/VeeHSVvikmNjfMBrw3o8PeKXhOE.roa
File:                     VeeHSVvikmNjfMBrw3o8PeKXhOE.roa (raw, json)
Hash identifier:          vnXEreijkzPSPc2Lbyq4JZZuUNE05sm1fiY6rD9hUGI=
Subject key identifier:   55:E7:87:49:5B:E2:92:63:63:7C:C0:6B:C3:7A:3C:3D:E2:97:84:E1
Certificate issuer:       /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial:       0873
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/VeeHSVvikmNjfMBrw3o8PeKXhOE.roa
Signing time:             Tue 29 Sep 2020 09:58:45 +0000
ROA not before:           Tue 29 Sep 2020 09:58:45 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     10126
IP address blocks:        220.128.80.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2163 (0x873)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
        Validity
            Not Before: Sep 29 09:58:45 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=55E787495BE29263637CC06BC37A3C3DE29784E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2b:9a:24:b3:4c:82:47:dc:2b:49:34:66:b5:
                    ba:5c:d5:f9:e4:2f:8b:1f:5e:84:9d:9c:a3:16:03:
                    cd:b7:7a:90:91:5f:6e:1e:d6:11:85:f0:03:ca:e7:
                    7a:df:59:19:70:23:25:27:cd:1a:06:dc:35:47:24:
                    df:50:30:45:99:ce:36:bc:1c:c7:07:59:38:0f:da:
                    cc:9b:58:d3:9a:fc:4d:83:cf:92:7e:6a:ce:1d:ca:
                    7d:60:2a:37:13:58:8e:51:a5:c9:a5:bf:e1:e2:3f:
                    f7:bf:93:10:3a:71:f5:6a:87:34:18:f7:d7:1d:ae:
                    31:7c:e7:44:82:e6:b0:51:3d:b7:29:47:21:60:91:
                    5f:de:c9:38:14:60:ce:d8:b9:0b:b2:d0:e3:77:5f:
                    2b:a3:5c:48:06:81:14:56:cd:b3:6b:80:37:5b:11:
                    b9:48:b8:55:4e:d2:f2:d1:81:72:a3:87:13:e1:52:
                    c4:d3:5f:f2:e1:fe:63:58:72:b6:cd:25:9a:36:3c:
                    e0:f2:f2:e7:40:d3:33:c8:9f:e4:4e:23:25:59:0b:
                    1c:ab:7d:42:aa:b8:f2:9c:06:1d:ee:d4:fe:22:df:
                    8f:21:fa:1d:5d:9c:59:44:e3:1d:d9:84:e3:f3:36:
                    d0:c7:b1:99:30:1f:97:93:24:de:4a:a6:b9:61:d2:
                    67:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:E7:87:49:5B:E2:92:63:63:7C:C0:6B:C3:7A:3C:3D:E2:97:84:E1
            X509v3 Authority Key Identifier:
                keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/VeeHSVvikmNjfMBrw3o8PeKXhOE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.128.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0f:fc:59:9d:fc:90:ef:53:c8:7d:a1:46:b3:53:4f:22:de:62:
         86:40:aa:f7:90:2c:75:e8:a6:33:5a:86:c0:0f:8a:35:52:34:
         46:19:31:99:3a:21:5a:94:e0:96:1b:b4:46:40:43:be:c9:64:
         d4:b6:80:c8:45:88:30:9b:03:59:f9:4d:c6:4d:c0:04:90:35:
         7d:8d:3f:de:30:44:36:2a:48:58:1a:75:bb:12:d8:37:ae:11:
         d6:59:e6:77:24:18:43:14:5f:aa:f9:10:d6:e9:f3:f7:b1:10:
         3e:39:da:da:f3:a7:92:43:4f:79:e6:ec:51:3e:6a:df:cf:64:
         d7:a8:83:c9:66:46:08:f6:b8:72:75:e7:fa:22:d1:2c:8e:d3:
         2c:dc:98:d4:2b:43:3a:d1:e1:43:03:a0:f5:23:ae:eb:dd:39:
         f5:2b:66:6d:0f:9f:23:00:e8:d5:f2:07:5b:49:0f:89:b7:86:
         f7:5c:b8:89:67:03:bd:5c:34:60:94:a0:80:69:54:b7:7f:2d:
         dc:5d:07:2e:a7:87:7a:32:24:55:e8:56:62:de:ed:ef:c4:7a:
         02:66:54:a3:0b:37:68:4f:97:26:60:38:43:62:3b:25:1e:cd:
         85:70:22:25:83:d1:b9:81:e8:09:a7:4e:64:da:e4:1e:4c:d0:
         4c:eb:2a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----