Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HWME1204/EvWyJ5KxBb7D449SQ_WH39x6aj4.roa
File:                     EvWyJ5KxBb7D449SQ_WH39x6aj4.roa (raw, json)
Hash identifier:          yLlRrBBWFAra5IaiJhhDXoQOr/mN2KETvyOaYarU7IU=
Subject key identifier:   12:F5:B2:27:92:B1:05:BE:C3:E3:8F:52:43:F5:87:DF:DC:7A:6A:3E
Certificate issuer:       /CN=E95973EB86F597CAE612C67929ED9352E70B5528
Certificate serial:       0D94
Authority key identifier: E9:59:73:EB:86:F5:97:CA:E6:12:C6:79:29:ED:93:52:E7:0B:55:28
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/6Vlz64b1l8rmEsZ5Ke2TUucLVSg.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HWME1204/EvWyJ5KxBb7D449SQ_WH39x6aj4.roa
Signing time:             Fri 11 Dec 2020 01:30:45 +0000
ROA not before:           Fri 11 Dec 2020 01:30:45 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18046
IP address blocks:        103.126.180.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3476 (0xd94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E95973EB86F597CAE612C67929ED9352E70B5528
        Validity
            Not Before: Dec 11 01:30:45 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=12F5B22792B105BEC3E38F5243F587DFDC7A6A3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:4a:7c:e2:77:98:e4:2d:b6:e0:6f:e0:de:41:
                    35:63:3f:99:80:0e:1d:44:a4:e1:28:99:1a:90:db:
                    21:fe:9f:1a:a5:ed:d4:d9:b9:4e:21:68:1b:ac:b5:
                    dd:f8:d9:c8:81:b3:06:eb:db:ce:e4:34:3e:78:7b:
                    6a:d5:30:df:64:5e:96:08:df:20:a4:06:68:18:1d:
                    6f:2f:33:2e:14:66:d7:d8:cd:c6:d4:ed:48:3a:d8:
                    68:a7:73:41:ba:04:ad:4c:b4:4a:13:33:28:7d:ec:
                    2e:39:9c:0d:a3:06:a0:98:8c:50:a0:4a:b4:58:0b:
                    bf:f0:1c:f4:02:2c:fb:66:6d:f9:a5:e9:60:e5:22:
                    f7:a5:97:86:86:18:f1:ee:1e:26:51:43:70:dc:be:
                    61:6d:d7:68:1f:c6:f4:0a:36:5b:a3:e0:98:cc:9c:
                    38:b6:a3:2e:4d:a5:0f:d7:24:d6:c1:d2:87:68:84:
                    73:f9:d2:14:49:7a:d5:06:b4:b0:b9:98:04:5d:bc:
                    a8:8e:7d:5c:d7:6d:ae:ee:ed:b8:49:e3:41:74:67:
                    57:c5:9b:a1:6f:aa:6b:00:93:a6:7f:2f:bc:8d:1a:
                    80:1b:3d:47:83:d4:6c:3d:27:e3:ec:fd:03:be:fd:
                    6b:c5:af:8d:89:52:ea:ea:57:a2:b5:71:f5:1a:f1:
                    f9:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:F5:B2:27:92:B1:05:BE:C3:E3:8F:52:43:F5:87:DF:DC:7A:6A:3E
            X509v3 Authority Key Identifier:
                keyid:E9:59:73:EB:86:F5:97:CA:E6:12:C6:79:29:ED:93:52:E7:0B:55:28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HWME1204/6Vlz64b1l8rmEsZ5Ke2TUucLVSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/6Vlz64b1l8rmEsZ5Ke2TUucLVSg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HWME1204/EvWyJ5KxBb7D449SQ_WH39x6aj4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:80:47:b1:43:17:e5:c5:bf:98:ec:a6:a6:08:7e:c6:cf:ba:
         39:94:55:8c:38:83:cc:8a:6c:74:16:3d:42:05:0f:ec:27:c7:
         39:49:9f:9d:9a:10:91:5a:76:f2:b5:5a:ed:e8:78:47:74:23:
         56:9b:3d:49:6a:a0:e1:5d:24:5e:32:5a:e9:9b:80:8a:b2:f6:
         af:de:c2:81:6a:68:3c:9b:34:7f:04:bb:59:64:16:87:ff:1f:
         8a:08:87:0a:45:a6:b4:da:4d:4b:ab:df:13:1e:c7:62:b8:a8:
         c8:66:88:c6:2b:42:2e:3f:13:ab:89:a6:67:f8:e7:f6:3e:b8:
         41:bf:1a:99:c3:15:ea:ee:b6:35:7c:ae:fe:29:5b:71:dd:87:
         b7:33:73:a8:f7:da:29:28:ad:43:18:1d:c1:6e:26:77:85:07:
         07:40:8e:ac:f7:20:95:06:91:81:25:d1:6f:92:4e:4f:c4:99:
         db:a9:99:7d:fe:11:40:e1:50:5d:5c:d8:04:0d:9d:a1:d4:e4:
         08:61:01:be:b6:e9:40:00:6e:51:4a:0a:cb:2f:8e:c9:c1:c5:
         09:2c:ac:72:95:a2:cc:eb:f5:22:52:ed:0c:71:a5:49:97:40:
         b0:1e:1c:2d:38:41:69:1a:c1:7e:24:34:30:29:1b:42:69:3e:
         6d:95:42:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----