Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/ezgD17HWrulGV1guPz0xXwMkFnU.roa
File:                     ezgD17HWrulGV1guPz0xXwMkFnU.roa (raw, json)
Hash identifier:          UQDUQyRot6bsmhbwfrsbjx9ob0oTzcs9NG8eIWkLWLI=
Subject key identifier:   7B:38:03:D7:B1:D6:AE:E9:46:57:58:2E:3F:3D:31:5F:03:24:16:75
Certificate issuer:       /CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864
Certificate serial:       02EB
Authority key identifier: AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/ezgD17HWrulGV1guPz0xXwMkFnU.roa
Signing time:             Tue 17 Nov 2020 03:30:41 +0000
ROA not before:           Tue 17 Nov 2020 03:30:41 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     17415
IP address blocks:        2406:3540:f000::/36 maxlen: 64

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 747 (0x2eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864
        Validity
            Not Before: Nov 17 03:30:41 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=7B3803D7B1D6AEE94657582E3F3D315F03241675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:77:4a:68:0c:0a:4f:43:ef:44:2f:ad:6b:f5:
                    6e:ed:ac:fa:9d:40:d5:9a:f3:3c:82:9f:79:11:9e:
                    ae:e6:1f:84:1f:0d:93:a0:7c:b9:79:07:f6:78:fd:
                    bc:14:ac:ba:b9:ab:b3:8b:13:ad:0d:a3:06:a5:e0:
                    25:2c:42:3a:56:d7:69:8a:f7:86:90:5e:8a:5c:d2:
                    a7:d5:1d:87:13:bb:62:f4:11:71:cb:ae:2b:01:08:
                    90:49:fa:d2:4d:3b:11:ff:40:1d:ad:98:6c:06:e8:
                    34:67:e2:7a:e5:4b:be:46:33:ec:9c:55:30:d1:9e:
                    63:29:7a:9e:47:cd:88:b6:e5:a9:9f:91:90:fe:31:
                    ff:a1:81:0a:c0:c9:97:a2:86:25:74:2b:05:8e:8c:
                    a3:7f:19:5c:ca:54:36:db:a4:90:c6:91:ff:e4:bc:
                    67:9d:5b:a3:4f:36:d2:34:ba:58:96:7e:99:6a:a9:
                    a1:6e:6d:c5:d7:47:12:56:11:50:4d:a2:6c:d7:e2:
                    56:99:f8:76:c8:ce:19:bc:ec:0e:5f:d3:78:a7:37:
                    1c:bb:55:14:e2:c9:d0:b3:52:4a:59:e3:60:fc:62:
                    69:96:5e:2b:89:21:27:fc:79:fc:1c:b0:e2:e4:ed:
                    85:f1:90:29:30:b4:4f:93:8c:6b:fc:5d:77:9c:a8:
                    f6:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:38:03:D7:B1:D6:AE:E9:46:57:58:2E:3F:3D:31:5F:03:24:16:75
            X509v3 Authority Key Identifier:
                keyid:AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/ezgD17HWrulGV1guPz0xXwMkFnU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:3540:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         3c:dc:b7:9a:b9:81:41:d3:5d:6b:76:6f:c9:8c:da:a7:12:d1:
         12:9e:8f:ac:5c:0b:bc:70:63:e6:fc:f0:30:4b:51:d8:65:39:
         dc:b5:0b:45:76:34:d1:60:6d:64:55:ae:0d:65:04:05:50:66:
         cf:86:3e:9f:44:23:22:37:ce:2c:3c:b7:18:67:48:cd:a2:7f:
         30:38:2f:bd:ef:dd:fe:96:30:f1:15:45:6b:63:1c:b6:8f:13:
         41:b3:41:25:db:7a:aa:f2:4b:06:4d:49:16:f4:d0:2e:82:11:
         36:f4:06:45:af:ed:0b:7f:e0:c0:60:5b:72:55:19:37:99:97:
         1d:f1:b0:6a:ae:a7:46:d3:74:08:49:7e:3a:fc:ac:82:ca:72:
         71:eb:d3:04:a4:fd:96:c3:1c:da:d6:c1:43:5c:a3:2c:e5:fb:
         48:2e:16:79:90:9d:6e:e5:07:17:94:98:40:4a:b6:02:d7:65:
         ce:fe:44:07:21:d6:b9:ad:d9:e7:07:a4:9a:c1:2b:aa:76:c4:
         6e:36:64:68:1f:5c:83:74:f1:6b:1f:79:cf:5d:f8:5f:ce:6c:
         aa:0d:1c:e8:07:ed:87:cc:d9:ef:d7:2e:b2:dc:57:10:82:12:
         fa:5b:d1:00:73:2a:d9:03:ef:a8:08:19:de:1f:56:a7:9d:1f:
         d9:f4:2c:49
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----