Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/vQ9krAT9OmTa7XibtJhySfqYSbI.roa
File:                     vQ9krAT9OmTa7XibtJhySfqYSbI.roa (raw, json)
Hash identifier:          90QqPwSWZPkV57+UsgwaIrFaPz1ZIbgYiOARxVWgKfc=
Subject key identifier:   BD:0F:64:AC:04:FD:3A:64:DA:ED:78:9B:B4:98:72:49:FA:98:49:B2
Certificate issuer:       /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial:       0C35
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/vQ9krAT9OmTa7XibtJhySfqYSbI.roa
Signing time:             Wed 29 Sep 2021 02:51:01 +0000
ROA not before:           Wed 29 Sep 2021 02:51:01 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     3462
IP address blocks:        59.112.0.0/13 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3125 (0xc35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
        Validity
            Not Before: Sep 29 02:51:01 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=BD0F64AC04FD3A64DAED789BB4987249FA9849B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:15:b9:41:c3:e4:67:0c:4b:67:99:64:24:7a:
                    96:05:36:12:5f:ba:86:1e:1a:97:c4:0b:15:2d:8c:
                    a1:a2:c6:4d:6a:26:4d:d9:08:56:2b:ea:5b:ae:97:
                    67:03:4d:bf:3a:f2:73:95:10:29:56:4b:51:f0:dd:
                    ca:40:b6:cd:68:a3:3d:0f:bf:94:0c:51:f6:c3:6e:
                    4c:7d:14:1f:6f:71:d6:e4:42:50:0d:5c:49:bd:8c:
                    12:33:c7:df:26:af:4b:3c:a9:54:87:a4:54:75:4e:
                    4f:0e:98:4c:e0:67:2b:c3:18:03:e2:8e:00:3f:4b:
                    d1:a6:a3:85:99:52:80:c7:c8:06:f2:6d:e0:e5:49:
                    86:e6:e7:da:7a:44:06:1a:d5:fd:fb:a9:5f:2b:ee:
                    51:cd:9e:48:4b:2e:92:46:30:1e:4d:ca:af:30:ca:
                    03:63:41:97:ca:ee:87:df:40:eb:24:97:1b:f6:d9:
                    eb:8c:a1:20:c8:79:33:5e:30:8d:13:99:ae:e9:8b:
                    5c:ef:d8:db:da:e4:d8:31:d3:52:8c:7f:27:8f:cb:
                    d6:04:34:6e:21:6a:92:0d:20:cb:fd:b3:62:c2:1b:
                    37:4a:d0:a8:28:8f:8a:3e:82:b2:d5:56:57:d4:30:
                    5c:9a:ee:40:06:e9:ff:00:a7:4c:b8:e9:e6:89:0c:
                    31:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:0F:64:AC:04:FD:3A:64:DA:ED:78:9B:B4:98:72:49:FA:98:49:B2
            X509v3 Authority Key Identifier:
                keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/vQ9krAT9OmTa7XibtJhySfqYSbI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.112.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         a5:e6:3d:2f:89:15:7a:4e:32:55:88:f8:11:84:51:83:97:a3:
         60:f3:12:45:51:98:58:b1:82:9e:37:78:4a:9a:1a:b3:82:c9:
         d2:99:da:6c:f2:79:f1:f8:97:18:06:a6:9e:db:75:97:e1:6e:
         01:ad:66:35:48:05:79:f9:60:3b:b5:81:da:7d:f7:c5:69:57:
         8e:0e:a4:05:da:17:6f:2e:03:52:99:0c:29:9f:cf:81:c8:ee:
         ee:c8:0a:1e:b9:85:b0:8a:c8:e5:2d:35:57:9a:4b:29:3e:92:
         6d:c2:80:73:89:c7:df:6e:7b:c8:69:9f:3b:ea:79:b0:a4:9e:
         61:9a:f4:cb:86:9d:3f:4e:4f:eb:bf:2b:73:d0:ca:9d:19:ce:
         ad:72:43:1f:bb:95:73:db:97:8f:15:e6:1f:17:f4:d0:85:b0:
         bc:e4:b7:a6:f1:9e:a2:22:ea:9c:4a:25:d3:be:51:96:9b:ce:
         80:ab:6c:30:22:0f:d4:a5:b2:1f:b7:39:84:f8:ed:b6:94:58:
         5a:61:ee:e8:e8:4f:c6:4a:3f:35:e3:d4:c5:8d:3f:1c:4b:84:
         c4:c2:74:a7:7b:42:31:2b:51:fb:7f:69:74:51:55:42:74:32:
         9c:4f:75:8b:b1:a7:a8:1d:cc:0a:1f:8e:fd:e9:6b:bb:e3:34:
         9a:55:9c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----