Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/Wxf5PGc1QXSz96l11NJzEC04Iws.roa
File:                     Wxf5PGc1QXSz96l11NJzEC04Iws.roa (raw, json)
Hash identifier:          R1JYu6ujl9MCHABo+vT4uj1+N0vmaEnMUSGZ9cfIi18=
Subject key identifier:   5B:17:F9:3C:67:35:41:74:B3:F7:A9:75:D4:D2:73:10:2D:38:23:0B
Certificate issuer:       /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial:       0A56
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Wxf5PGc1QXSz96l11NJzEC04Iws.roa
Signing time:             Sun 07 Feb 2021 11:37:29 +0000
ROA not before:           Sun 07 Feb 2021 11:37:29 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     15133
IP address blocks:        61.221.181.64/26 maxlen: 26

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2646 (0xa56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
        Validity
            Not Before: Feb  7 11:37:29 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=5B17F93C67354174B3F7A975D4D273102D38230B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:36:59:fe:4a:8a:f9:41:3a:9a:c9:b3:cc:eb:
                    24:43:5b:52:c7:c3:d4:a4:18:0c:82:fa:0f:ea:87:
                    64:42:dd:b7:94:1f:72:45:e0:82:74:d4:e7:96:0e:
                    96:a9:b6:89:ad:1f:9a:82:ca:86:f0:a0:48:39:51:
                    32:23:80:b1:fe:0e:cf:3c:9b:9c:98:e9:e2:0e:41:
                    4c:98:ff:73:36:2c:51:5c:88:f1:38:df:d5:50:f8:
                    ef:a4:45:2a:64:4c:d3:46:0b:cd:c5:71:c5:ec:b0:
                    17:2b:15:8c:a6:aa:95:ee:a2:c1:e0:98:aa:29:02:
                    57:fe:11:28:30:58:9b:4d:98:d0:b8:e7:dc:1a:ef:
                    a6:76:2f:f9:87:32:4a:6c:f5:eb:15:16:4d:63:7c:
                    d6:cd:f3:d3:61:59:ab:d7:16:bb:fe:83:e1:5b:ee:
                    51:b0:05:59:4d:a9:d9:5d:1d:1b:2a:93:ae:5c:b0:
                    ab:21:d9:ac:63:97:21:19:f4:80:89:a1:68:8a:a3:
                    1f:c5:5c:b7:d7:91:b4:97:99:39:2c:01:59:ee:df:
                    5b:c8:8a:73:65:ce:55:ec:f7:4e:9a:a3:d3:17:81:
                    13:f5:5c:cd:f8:ad:54:a8:ab:d8:c5:30:b0:71:40:
                    53:16:05:6a:1f:4a:6d:40:30:46:70:5e:de:4d:da:
                    4c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:17:F9:3C:67:35:41:74:B3:F7:A9:75:D4:D2:73:10:2D:38:23:0B
            X509v3 Authority Key Identifier:
                keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Wxf5PGc1QXSz96l11NJzEC04Iws.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.221.181.64/26

    Signature Algorithm: sha256WithRSAEncryption
         90:ec:f7:da:27:d0:a3:f2:d3:7e:6f:cb:ab:f3:47:05:28:81:
         4e:0e:08:58:d9:29:2b:17:8c:b0:b6:4e:de:48:4c:af:ea:07:
         55:26:1e:f8:10:8c:43:21:80:b0:cf:49:46:c1:93:ce:04:dd:
         66:98:79:33:7c:03:a3:70:63:ef:b8:d0:a4:04:c8:e2:d8:f3:
         4a:30:8e:7a:e3:01:18:b9:68:fd:4c:14:97:4e:a3:94:db:c1:
         2c:96:47:ae:96:95:15:d0:da:74:ec:d9:f6:91:e0:59:86:68:
         ee:9f:9e:20:e3:0e:7e:8e:c5:88:ff:11:13:ca:bd:e0:d7:62:
         9d:d6:1b:6e:7e:d3:db:2e:ef:57:26:3f:02:ca:ae:04:a2:11:
         5b:1c:d8:17:1f:6d:76:ca:53:f7:bd:16:a3:1a:49:12:04:3c:
         01:a6:ea:59:e9:5f:66:34:0c:42:c4:f2:18:9c:27:c5:f6:55:
         fd:93:64:29:84:81:86:e9:f0:44:cb:c8:41:69:76:39:0a:4d:
         d0:7d:7f:e1:33:bc:37:ad:a6:f7:0d:d6:46:d7:c7:a0:89:fb:
         14:43:1a:c3:d2:aa:f5:08:95:10:4c:13:c8:b8:86:ff:d0:8a:
         5f:62:74:b5:4c:b0:e0:2a:e8:31:81:0d:c4:73:5f:46:35:42:
         76:1f:4a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----