Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ITRINET/UV90tO5JYUHFLOIjb8lpKwSdXdE.roa
File:                     UV90tO5JYUHFLOIjb8lpKwSdXdE.roa (raw, json)
Hash identifier:          mLheAxpfqkdRVXrqGCHMNXTFrUbK4nfkxS/KD/14FcY=
Subject key identifier:   51:5F:74:B4:EE:49:61:41:C5:2C:E2:23:6F:C9:69:2B:04:9D:5D:D1
Certificate issuer:       /CN=2F9BECFFE7DA09CA053A2F9681412B19FB004A74
Certificate serial:       0771
Authority key identifier: 2F:9B:EC:FF:E7:DA:09:CA:05:3A:2F:96:81:41:2B:19:FB:00:4A:74
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/L5vs_-faCcoFOi-WgUErGfsASnQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ITRINET/UV90tO5JYUHFLOIjb8lpKwSdXdE.roa
Signing time:             Tue 29 Sep 2020 09:59:24 +0000
ROA not before:           Tue 29 Sep 2020 09:59:24 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18422
IP address blocks:        2001:ed8::/32 maxlen: 56

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1905 (0x771)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F9BECFFE7DA09CA053A2F9681412B19FB004A74
        Validity
            Not Before: Sep 29 09:59:24 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=515F74B4EE496141C52CE2236FC9692B049D5DD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:71:21:cd:a3:40:9e:a2:ca:46:85:59:65:a4:
                    ea:53:92:8a:d3:a3:be:1b:5c:20:8d:ac:38:9a:1a:
                    af:b3:8c:a4:c1:8c:a4:d1:4c:28:e3:8f:45:c4:09:
                    54:05:e4:54:04:3f:09:dd:5e:32:48:d2:cb:a8:1a:
                    a8:bb:4f:ec:42:cb:4d:3c:82:63:06:ee:c1:7b:84:
                    bf:53:43:1e:7d:47:99:9b:27:30:24:5f:1f:55:e7:
                    b3:2d:e6:c4:cd:16:99:c0:92:01:9a:2f:3f:5c:91:
                    e8:94:1a:7c:8b:fc:81:bb:8e:65:43:0e:a7:3d:0d:
                    c5:9a:8b:3a:7d:db:79:44:5b:11:2f:fe:a3:dc:12:
                    9f:ff:b3:57:cb:db:1a:b2:16:fa:c3:f7:66:80:c6:
                    cf:23:6b:9e:cf:09:69:d0:7d:78:03:e2:5e:cd:a2:
                    f6:78:02:88:65:b0:83:76:55:5b:21:17:1a:d1:c0:
                    46:e5:57:4f:80:68:17:24:0d:76:5f:6d:4b:ac:ee:
                    3b:ff:61:24:8f:59:48:ca:7e:75:22:e2:97:6b:d0:
                    7e:2b:20:75:8f:13:c3:2d:f5:4e:5c:2f:2a:5a:e5:
                    be:ef:e7:1c:cc:3e:7b:60:bf:8d:bc:d9:98:a1:8e:
                    66:67:4d:d5:00:b2:7e:42:f3:c0:c5:b2:49:8f:f6:
                    2b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:5F:74:B4:EE:49:61:41:C5:2C:E2:23:6F:C9:69:2B:04:9D:5D:D1
            X509v3 Authority Key Identifier:
                keyid:2F:9B:EC:FF:E7:DA:09:CA:05:3A:2F:96:81:41:2B:19:FB:00:4A:74

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ITRINET/L5vs_-faCcoFOi-WgUErGfsASnQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/L5vs_-faCcoFOi-WgUErGfsASnQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ITRINET/UV90tO5JYUHFLOIjb8lpKwSdXdE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:ed8::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:a3:50:9a:5c:00:05:7a:7d:cd:61:5f:aa:b6:cb:28:60:fc:
         11:c9:2d:a6:d7:ef:9e:13:91:53:6f:07:b7:29:b8:1f:77:62:
         5a:56:11:9c:50:1a:c9:f1:8d:e6:97:53:4c:29:a5:09:01:eb:
         ed:fb:08:b2:72:70:3b:39:2c:5b:82:a4:3b:a4:7e:6e:27:3f:
         29:3f:ba:96:8e:3a:22:16:90:42:f8:2b:e2:96:7f:b9:ee:14:
         64:b4:fd:09:4f:41:48:cd:13:b4:de:53:0b:54:9e:1d:21:ca:
         29:56:32:98:aa:04:c2:93:4b:69:9c:3f:4e:aa:46:26:0d:3f:
         8b:a7:35:dc:51:fa:5f:b1:0d:71:cb:fc:3e:ea:34:f7:f8:8e:
         3e:33:3a:a2:1d:13:49:50:b8:da:7d:a6:69:9a:de:2f:54:77:
         ae:be:f7:de:69:96:17:60:7f:8a:44:af:55:cd:99:70:21:6f:
         88:ca:f8:57:fc:ac:f7:bd:27:50:a5:5b:31:71:48:19:02:6a:
         73:4f:ad:61:f5:34:39:34:61:47:56:46:29:c4:42:f7:30:20:
         4b:31:8a:78:b0:71:32:34:c2:fb:95:f8:f2:ef:1a:e4:fa:f3:
         0d:c2:9a:a1:09:af:2f:e3:6c:b1:2d:c9:17:72:7b:40:28:ba:
         d7:af:83:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----