Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/Z-wC7YBuDNb490pcHXG4cgsB_go.roa
File:                     Z-wC7YBuDNb490pcHXG4cgsB_go.roa (raw, json)
Hash identifier:          XQDO5vzPPmlEXj+vDu9BhBJZXtMN6kUN6gIL5PmbZCQ=
Subject key identifier:   67:EC:02:ED:80:6E:0C:D6:F8:F7:4A:5C:1D:71:B8:72:0B:01:FE:0A
Certificate issuer:       /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial:       080D
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Z-wC7YBuDNb490pcHXG4cgsB_go.roa
Signing time:             Tue 29 Sep 2020 09:58:16 +0000
ROA not before:           Tue 29 Sep 2020 09:58:16 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     54994
IP address blocks:        61.221.181.0/26 maxlen: 26

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2061 (0x80d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
        Validity
            Not Before: Sep 29 09:58:16 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=67EC02ED806E0CD6F8F74A5C1D71B8720B01FE0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ca:b8:91:5a:a7:e0:56:a3:d9:d3:40:d0:c4:
                    be:17:f3:34:ce:91:4b:c2:77:0c:bf:8b:65:73:9c:
                    96:cd:21:34:87:f3:a2:53:ac:95:cf:75:ef:ac:9b:
                    a7:2e:87:e8:1f:f6:e8:b8:9c:58:95:26:db:58:45:
                    dd:ec:c2:7c:1b:7c:ac:41:e1:d4:69:57:98:9e:73:
                    e7:fa:62:9f:aa:50:fa:3d:c5:d3:cf:55:5a:20:4f:
                    7c:61:7e:9b:4e:b0:16:11:0b:87:52:26:4e:f9:95:
                    8f:4e:50:52:b4:df:90:b0:86:60:b9:32:81:9c:8d:
                    c9:ee:3b:70:58:3c:a7:ad:6f:af:81:06:4b:f4:78:
                    02:42:c8:a6:b5:4b:82:b5:b6:30:3e:1b:51:5c:28:
                    ab:04:3f:b8:83:a1:2d:1d:36:5a:eb:44:4f:ff:7b:
                    93:ff:2c:2b:dd:da:bb:97:03:95:45:48:e9:bd:d3:
                    7c:62:88:69:bb:00:b0:95:c2:dd:e1:30:5c:5a:20:
                    98:6c:41:fa:ee:a7:fe:47:c5:9e:d5:61:0a:50:e8:
                    f8:7c:98:e7:26:84:cb:db:a0:92:40:b3:d2:4f:d5:
                    36:a0:d7:02:c5:ab:9a:0e:50:1c:1a:ee:b9:72:7a:
                    93:4c:b8:ce:d4:fc:2b:68:20:1f:14:a1:28:76:f0:
                    96:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:EC:02:ED:80:6E:0C:D6:F8:F7:4A:5C:1D:71:B8:72:0B:01:FE:0A
            X509v3 Authority Key Identifier:
                keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Z-wC7YBuDNb490pcHXG4cgsB_go.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.221.181.0/26

    Signature Algorithm: sha256WithRSAEncryption
         af:d3:e0:1a:f4:59:63:38:57:58:6a:fb:69:e3:8d:ef:a5:98:
         47:0d:c4:92:3c:5d:5e:c9:5c:3b:6e:b1:d3:3b:23:05:14:ad:
         0d:ec:80:2e:dc:d5:ee:d2:7c:5c:8f:8c:3e:83:9d:67:18:1a:
         7c:d0:ed:9f:33:90:79:b5:f8:1d:d7:98:71:8e:a8:dc:69:80:
         28:cb:27:40:83:aa:b4:1f:a7:50:9a:2b:28:ad:d8:00:0c:d0:
         b2:00:bf:9e:74:9c:f2:91:a1:18:30:7d:35:c2:d1:2f:87:e1:
         3f:01:8a:4e:76:c0:96:9d:5b:a9:3e:27:96:70:b0:b5:ac:a5:
         4a:c2:a5:a8:d2:48:6d:8c:91:e4:6b:da:e0:3c:fd:c0:06:a0:
         75:a4:81:2a:aa:1c:89:91:65:30:6a:15:60:56:ea:85:58:cf:
         b6:73:a6:ae:d0:b9:73:f6:34:12:96:0d:47:46:73:a0:81:3c:
         5b:f3:39:31:b6:92:ee:28:0e:1b:6f:7c:c0:17:18:e4:5a:07:
         27:65:5d:2d:de:2a:30:81:30:f9:e0:a8:b2:a5:eb:bb:bd:d1:
         ba:e4:f9:03:ec:be:5d:79:b4:73:85:3b:47:96:b3:fe:43:77:
         a9:bd:3b:15:b8:6d:04:b4:e2:0d:f1:f2:5a:41:59:fc:b6:5e:
         89:c1:c3:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----