Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/mCOZKLXMVtx0Fmk4TsvgqtMEE_g.roa
File:                     mCOZKLXMVtx0Fmk4TsvgqtMEE_g.roa (raw, json)
Hash identifier:          sIGoBzmYp1qfS1NZ6grUGQ0gf5TSiZT+/QDHoC+J2k4=
Subject key identifier:   98:23:99:28:B5:CC:56:DC:74:16:69:38:4E:CB:E0:AA:D3:04:13:F8
Certificate issuer:       /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Certificate serial:       07A8
Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/mCOZKLXMVtx0Fmk4TsvgqtMEE_g.roa
Signing time:             Tue 29 Sep 2020 09:59:48 +0000
ROA not before:           Tue 29 Sep 2020 09:59:48 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9919
IP address blocks:        211.78.0.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1960 (0x7a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
        Validity
            Not Before: Sep 29 09:59:48 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=98239928B5CC56DC741669384ECBE0AAD30413F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ed:d8:cd:ac:47:e9:42:1f:53:6e:f7:72:7e:
                    e2:b2:26:b0:2d:01:1f:be:ff:54:77:8d:58:7c:a2:
                    cb:6b:37:d3:b3:f8:bc:c2:d4:35:ff:fa:67:17:49:
                    c2:0b:c0:e9:dc:d6:21:ed:e1:09:f7:d3:22:98:b4:
                    84:ce:dc:26:42:90:60:1c:f3:17:38:c7:55:5a:9b:
                    c2:df:81:3e:f2:bb:bb:42:5f:3c:c9:da:c3:08:b7:
                    73:e0:bc:c4:1e:fa:5e:82:33:9d:b9:20:bf:74:3e:
                    49:6f:72:ff:62:a7:8a:83:b4:08:4f:e1:91:5a:a0:
                    01:e4:e5:3d:c7:35:f4:08:08:7f:f3:9f:1d:25:96:
                    4c:79:6f:81:2c:3f:70:68:d3:c5:59:a0:df:fb:30:
                    54:a3:dc:4a:b6:60:7d:8d:88:73:c6:01:77:f3:8f:
                    db:72:37:c6:fe:5d:e8:bf:c3:ac:4e:fd:d0:24:4b:
                    dc:b2:c2:97:bf:c7:52:2c:00:28:d6:ef:b5:af:53:
                    e7:9c:7f:ff:2e:bc:53:94:7c:76:7e:02:d3:9e:18:
                    7d:84:01:9c:2c:a0:5d:63:92:82:2d:d3:9a:78:dd:
                    6d:cc:3b:6a:cc:d0:1b:d4:0e:1d:6e:ed:8d:c7:47:
                    b2:b0:cc:ae:6c:54:26:76:11:2c:aa:ba:5a:18:5e:
                    be:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:23:99:28:B5:CC:56:DC:74:16:69:38:4E:CB:E0:AA:D3:04:13:F8
            X509v3 Authority Key Identifier:
                keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/mCOZKLXMVtx0Fmk4TsvgqtMEE_g.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.78.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         7b:f2:6a:98:09:ab:26:40:ec:8f:72:13:e0:41:57:25:ed:38:
         6c:f0:0a:92:b7:37:df:d3:2d:6d:91:36:95:04:83:c1:4b:da:
         22:af:82:41:ee:7e:87:21:72:b9:9d:0d:9c:5d:8c:f4:31:90:
         be:df:ca:95:b5:25:15:b5:28:4a:3c:b1:bf:59:cf:24:12:52:
         a8:fb:88:4e:3f:cb:03:ef:c2:3a:bf:84:91:98:7d:60:fe:27:
         56:c0:c2:77:cd:ed:88:cb:fd:e3:12:87:48:82:2f:5b:5e:b3:
         66:09:dd:18:ea:88:48:be:47:2d:57:81:0a:06:ba:e2:77:38:
         5c:a9:ee:a3:e8:d9:76:ea:e7:81:29:91:43:ce:79:43:0c:c4:
         46:2e:94:0a:2f:cb:03:da:e3:f0:d1:dc:56:2d:f6:e2:01:7f:
         11:69:58:21:5e:61:30:fe:9f:02:9b:eb:52:67:ed:da:90:11:
         5c:24:08:d5:86:94:3d:d6:a2:1c:c0:21:97:22:91:d4:0a:a0:
         4b:f7:60:9d:93:6c:62:b7:0b:7f:70:48:38:c5:4b:26:ba:d6:
         db:35:7e:3b:97:5c:be:92:7b:1d:2e:fc:2a:e6:cb:f4:bf:c5:
         ee:cc:e9:81:78:c1:68:48:14:e5:c1:e1:ea:14:b9:a6:c4:08:
         d8:ab:e9:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----