Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGDA/6T_JxQitlI17zfB8-bHEKmhmeW4.roa
File:                     6T_JxQitlI17zfB8-bHEKmhmeW4.roa (raw, json)
Hash identifier:          SH5EY6HygwHerWsQFa7NhkzR14PqY92wHjgU9AxGZyI=
Subject key identifier:   E9:3F:C9:C5:08:AD:94:8D:7B:CD:F0:7C:F9:B1:C4:2A:68:66:79:6E
Certificate issuer:       /CN=257DB7B9919975697366B7014F8CFE28EF364E73
Certificate serial:       037C
Authority key identifier: 25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/6T_JxQitlI17zfB8-bHEKmhmeW4.roa
Signing time:             Wed 29 Sep 2021 02:53:59 +0000
ROA not before:           Wed 29 Sep 2021 02:53:59 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     131657
IP address blocks:        2406:48c0::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 892 (0x37c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=257DB7B9919975697366B7014F8CFE28EF364E73
        Validity
            Not Before: Sep 29 02:53:59 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=E93FC9C508AD948D7BCDF07CF9B1C42A6866796E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8f:04:f5:7f:30:cc:19:64:0a:22:3c:49:14:
                    24:86:1c:4f:16:c9:27:64:47:ec:12:05:7c:90:4b:
                    32:ee:49:ad:81:4f:f5:ef:05:23:8b:c5:12:b7:53:
                    d2:e9:d4:ab:ed:ed:73:e8:b7:ce:8e:87:66:49:be:
                    06:ba:76:8f:d0:77:e7:95:41:e1:a6:9d:6d:de:c6:
                    dc:88:87:49:9b:2b:bb:87:d3:32:23:30:ca:61:41:
                    f9:df:bc:e2:6f:85:d0:fa:6a:3e:3a:24:10:c4:10:
                    7f:1f:fc:b2:f0:78:a0:cf:83:70:4a:7d:f2:6e:97:
                    44:1e:21:49:a2:ee:23:69:76:ba:17:c0:29:25:fa:
                    be:c5:8c:92:11:23:ba:67:f6:91:44:e5:eb:56:ca:
                    63:a2:61:80:1c:ed:f1:55:6f:c3:87:68:07:00:2c:
                    f8:f9:3e:d2:59:b5:aa:bf:41:f1:bf:ea:ec:76:11:
                    eb:7d:e6:18:65:06:f1:ca:b2:41:23:1c:ae:d7:9d:
                    e9:1f:9c:41:2d:9c:80:dd:f7:72:3f:ef:c2:d1:33:
                    4a:0b:bb:9a:d7:ff:67:ae:bf:7d:32:a4:7e:6e:fd:
                    42:04:7f:80:f6:ba:7a:2e:ac:d3:36:19:1b:0c:81:
                    7a:d5:09:e2:33:fe:a4:ae:09:40:55:d4:c5:8c:58:
                    54:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:3F:C9:C5:08:AD:94:8D:7B:CD:F0:7C:F9:B1:C4:2A:68:66:79:6E
            X509v3 Authority Key Identifier:
                keyid:25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/6T_JxQitlI17zfB8-bHEKmhmeW4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:48c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         36:3f:b2:00:f4:11:c1:69:34:83:80:a4:68:30:97:45:69:d1:
         fa:60:f2:8c:58:df:cc:57:72:54:df:c3:92:f4:41:e2:6e:0d:
         60:c1:b6:93:d2:20:3b:31:4d:ac:be:a5:2e:da:90:09:4a:00:
         19:9b:50:43:e0:da:7e:99:15:e3:4f:87:81:93:b3:d4:de:38:
         33:95:15:35:b9:b1:4c:29:e2:bd:fe:0c:f1:ac:85:4b:a4:46:
         03:40:91:20:6b:47:4b:d7:d9:ae:ed:11:3f:0c:c7:eb:83:67:
         07:32:d0:69:30:b6:81:7a:fd:67:bc:66:3f:e2:36:91:6f:73:
         04:20:ed:3a:9b:27:2e:ef:4c:c6:c8:a5:07:45:ba:f8:d3:72:
         0b:67:60:59:17:ad:4d:92:6d:41:ff:4d:5e:80:ed:98:af:0e:
         57:a0:b1:eb:04:62:f3:22:72:6b:c8:ed:e5:38:f8:f1:e0:1c:
         25:19:7c:21:d5:5f:a3:37:13:4e:a8:72:8f:ed:7a:68:8a:99:
         50:9b:0b:11:6d:97:8b:c3:20:06:8e:95:b6:b6:7b:88:fb:9e:
         32:44:4d:98:18:77:eb:1f:99:1a:14:b9:b2:7d:05:06:39:30:
         02:55:0e:5e:3e:e6:0f:ca:f1:0c:06:58:2c:cf:40:4b:ee:fb:
         fe:81:7b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----