Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/ikE465z801iWO3QYN5zQZaWVzuY.roa
File:                     ikE465z801iWO3QYN5zQZaWVzuY.roa (raw, json)
Hash identifier:          A8Q5F7J5QWkfDc8FMinX+wYi+fncoOe1CTYYTz3YwF0=
Subject key identifier:   8A:41:38:EB:9C:FC:D3:58:96:3B:74:18:37:9C:D0:65:A5:95:CE:E6
Certificate issuer:       /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial:       084A
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/ikE465z801iWO3QYN5zQZaWVzuY.roa
Signing time:             Tue 29 Sep 2020 09:58:34 +0000
ROA not before:           Tue 29 Sep 2020 09:58:34 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     3462
IP address blocks:        59.124.0.0/14 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2122 (0x84a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
        Validity
            Not Before: Sep 29 09:58:34 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=8A4138EB9CFCD358963B7418379CD065A595CEE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9f:35:ea:bf:fb:3a:dd:ab:cd:86:31:c2:5d:
                    0b:f2:aa:6d:59:90:3f:88:a1:96:ea:bc:cc:b1:7a:
                    51:f3:42:d8:48:2d:20:ca:a2:a0:58:28:a5:bc:4e:
                    b9:0b:e9:5f:8a:de:0a:c8:d3:6e:97:1e:e4:7a:d7:
                    ef:6a:f4:10:4b:ab:6a:01:a4:e6:c4:24:30:4c:4e:
                    27:b3:d3:69:e8:7b:cf:80:71:30:a0:3a:16:67:f5:
                    87:a4:1f:b2:2f:35:66:6d:f5:3c:e8:e2:d6:36:a8:
                    69:f8:39:b8:17:44:35:25:73:dc:25:61:07:36:58:
                    18:35:50:be:fb:b4:04:06:50:6b:8c:b7:24:4d:7b:
                    b3:c8:e8:18:cf:08:3d:ed:01:29:f1:f6:d4:96:f2:
                    47:34:62:6a:83:83:13:de:5b:48:b9:ad:6d:31:54:
                    bf:91:40:81:dd:94:b9:9c:8a:c9:52:22:7b:6d:9a:
                    d7:11:e4:58:02:16:2a:a1:92:f7:ba:d9:27:e9:cc:
                    63:7d:31:2f:d7:5f:95:fd:b1:0c:4a:17:09:6f:97:
                    6a:ca:57:38:7f:f0:28:c6:ee:1d:7c:b8:17:2d:21:
                    d3:01:b0:76:1c:9c:46:c5:97:3b:dd:99:06:61:47:
                    41:99:fa:a9:f7:86:97:18:7e:e0:fa:ac:9d:4a:ad:
                    b1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:41:38:EB:9C:FC:D3:58:96:3B:74:18:37:9C:D0:65:A5:95:CE:E6
            X509v3 Authority Key Identifier:
                keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/ikE465z801iWO3QYN5zQZaWVzuY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.124.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         62:6e:fe:a0:bb:12:37:28:de:66:7e:96:b1:fe:77:8c:34:3c:
         0c:da:9a:0c:c6:ff:aa:36:ca:70:c4:4c:95:1f:84:ec:c1:96:
         78:64:01:ac:8d:41:0c:5a:7d:6f:8f:c0:4e:4b:bf:93:e3:17:
         da:49:72:a4:8a:d9:e4:b1:6d:f9:33:1b:3a:60:df:73:19:ba:
         ff:6a:e5:1c:a7:35:e8:e6:3d:0a:00:a3:b7:99:55:2e:0a:66:
         62:b7:fd:9d:cd:78:5b:8b:7b:2b:47:e6:d2:67:56:0c:77:d8:
         25:5c:9d:bf:11:9b:d8:34:5c:14:3f:0c:81:5f:80:91:4f:71:
         ac:45:21:d0:78:3a:5c:c4:3a:ac:63:70:17:b6:d9:26:28:04:
         92:66:33:aa:a7:c7:29:ed:12:f4:c8:ac:35:a5:20:2c:c6:d3:
         1a:fa:62:1b:46:2b:d1:e2:b3:6c:28:84:68:88:34:6d:37:d4:
         27:e4:ac:03:08:1a:61:65:d5:a7:58:b0:86:dd:6f:f2:7e:44:
         07:cf:da:ab:f1:7e:ea:30:5a:f9:9a:9a:30:79:0b:fe:24:13:
         45:e8:1b:d4:ed:14:d8:bd:8e:51:23:07:55:59:8f:18:5b:26:
         0b:fb:a5:c3:8f:43:0e:2a:8b:70:d0:26:7f:32:ca:66:fa:8f:
         2f:c9:3f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----