Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/U6g7N7Z_n8BnPuj8fSqm8Rd8hGI.roa
File:                     U6g7N7Z_n8BnPuj8fSqm8Rd8hGI.roa (raw, json)
Hash identifier:          YrEpqDgEIWObpe8gLufMMq3bySjcFhlq906dG19r8Tw=
Subject key identifier:   53:A8:3B:37:B6:7F:9F:C0:67:3E:E8:FC:7D:2A:A6:F1:17:7C:84:62
Certificate issuer:       /CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864
Certificate serial:       03E9
Authority key identifier: AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/U6g7N7Z_n8BnPuj8fSqm8Rd8hGI.roa
Signing time:             Wed 29 Sep 2021 02:37:46 +0000
ROA not before:           Wed 29 Sep 2021 02:37:46 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     131682
IP address blocks:        2406:3540:fffc::/46 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1001 (0x3e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864
        Validity
            Not Before: Sep 29 02:37:46 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=53A83B37B67F9FC0673EE8FC7D2AA6F1177C8462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e4:39:96:0a:f9:5e:69:a0:67:23:9a:ad:d0:
                    51:3d:07:14:ed:f6:f7:df:ec:4d:d2:a4:84:49:5f:
                    2a:21:7d:f6:6c:ce:30:e1:9c:00:85:5a:f8:72:4d:
                    8d:f4:29:aa:0a:1f:06:d3:6f:a2:70:f0:77:42:41:
                    a9:ba:40:2e:f8:a3:63:fe:20:92:3a:55:68:40:8b:
                    ce:32:8e:eb:26:fa:31:0e:d3:ef:b1:28:57:69:36:
                    c5:9f:16:69:92:f7:c0:b0:02:f8:70:ce:ed:c3:10:
                    3e:8c:63:35:9a:ea:56:e6:e2:c9:dc:e1:aa:29:b1:
                    e3:a1:1f:54:73:8a:27:0f:94:ef:98:87:43:40:1d:
                    51:0a:11:55:55:32:5c:ea:df:5f:65:2e:63:89:98:
                    5a:2b:33:95:90:95:d0:ce:ae:3e:13:b9:3b:28:69:
                    68:e0:52:c6:4b:13:6e:f0:da:b3:3d:fd:82:06:96:
                    2e:72:e1:34:d7:10:30:11:de:6d:0d:30:df:aa:99:
                    31:df:03:16:71:b2:e9:ea:d8:ca:6b:87:dd:3f:65:
                    a9:49:f2:e4:2d:4f:3d:6d:4a:23:d6:a8:7f:0b:da:
                    c4:b9:55:25:72:3e:f9:57:fe:a5:dd:53:60:45:16:
                    2b:f0:da:3d:00:2d:5d:29:d9:1d:93:4f:c3:d5:21:
                    13:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:A8:3B:37:B6:7F:9F:C0:67:3E:E8:FC:7D:2A:A6:F1:17:7C:84:62
            X509v3 Authority Key Identifier:
                keyid:AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/U6g7N7Z_n8BnPuj8fSqm8Rd8hGI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:3540:fffc::/46

    Signature Algorithm: sha256WithRSAEncryption
         87:e2:b4:24:44:65:36:d0:c8:0d:7f:2f:03:e1:33:36:89:52:
         8d:f8:f7:b7:81:f2:78:10:67:48:66:d5:c1:d3:9b:7f:27:e6:
         a5:3b:80:2d:ac:ce:cb:69:ac:ff:30:a1:1d:03:4e:4b:84:79:
         3b:d3:d7:86:ef:b5:fd:30:58:44:c6:f1:50:e8:c7:d4:be:d3:
         87:62:e7:25:93:82:5d:d3:9e:37:13:42:c0:13:04:e7:cd:89:
         bb:e2:18:0b:c6:9b:9c:04:2f:93:c0:77:5c:11:b3:16:b8:0c:
         35:5b:4a:5c:4b:b0:42:0b:5b:fd:ba:df:f9:67:86:11:85:0f:
         cb:de:7d:dc:75:65:d2:57:0f:8e:fb:bc:c4:88:67:e5:ce:22:
         4a:78:21:42:5d:51:07:d5:b5:e1:df:76:a5:99:e1:db:84:27:
         80:69:db:c1:07:80:16:ed:96:14:ff:6a:a8:24:e8:1d:44:a2:
         6e:6c:9b:9b:db:b1:f0:b0:73:0d:a8:49:08:2e:d1:00:0f:33:
         a3:b8:df:5e:30:ec:ad:27:3e:04:4a:7c:42:81:dc:88:81:db:
         1f:a4:e7:72:d3:07:b3:d9:c7:9f:24:bc:54:1f:3e:14:dd:3b:
         70:cf:12:1a:09:7f:51:99:db:dd:e8:c4:25:56:8d:35:54:94:
         5e:a0:22:13
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----