Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/fnXST4eYqgJMgVLrjmR1x1U79Oc.roa
File:                     fnXST4eYqgJMgVLrjmR1x1U79Oc.roa (raw, json)
Hash identifier:          dZ89lGQbEZ9fhknjCdkN7Wsgx/UbCLjQQmJ+leo+HPY=
Subject key identifier:   7E:75:D2:4F:87:98:AA:02:4C:81:52:EB:8E:64:75:C7:55:3B:F4:E7
Certificate issuer:       /CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864
Certificate serial:       03EA
Authority key identifier: AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/fnXST4eYqgJMgVLrjmR1x1U79Oc.roa
Signing time:             Wed 29 Sep 2021 02:37:46 +0000
ROA not before:           Wed 29 Sep 2021 02:37:46 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38840
IP address blocks:        2406:3540:fff8::/46 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1002 (0x3ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864
        Validity
            Not Before: Sep 29 02:37:46 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=7E75D24F8798AA024C8152EB8E6475C7553BF4E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0f:d3:b0:c7:21:b1:98:1f:e5:3c:29:fc:56:
                    2e:07:ae:7c:3a:11:11:10:8c:dc:68:2f:32:c4:42:
                    31:60:d0:26:01:0b:75:3f:2c:85:b0:f9:18:3f:f0:
                    81:09:a1:82:8d:f9:42:00:3d:5d:6a:17:db:67:6d:
                    e7:d7:9f:24:24:71:5b:d9:d2:b4:e6:1d:7e:dc:69:
                    6c:53:63:55:7b:a9:e1:fb:08:39:10:3f:b2:2d:b3:
                    10:ed:20:01:d6:32:3b:58:e6:b7:a5:f4:b6:b1:0d:
                    00:d0:cd:15:c7:d6:1a:8b:7e:ed:69:14:2d:41:02:
                    a1:de:49:59:11:dc:f9:2e:a2:c8:06:79:82:5e:8d:
                    d3:1f:9a:56:0e:4a:df:b0:fa:4b:0a:7a:d6:2a:71:
                    5a:ff:81:f3:c8:a4:e9:bb:1a:1a:ae:05:30:dc:07:
                    6b:a1:30:b7:25:6f:ef:df:7c:02:bd:d1:44:d3:6f:
                    a8:47:98:c3:ab:e5:e2:0a:92:43:4e:43:06:76:30:
                    37:20:8f:48:7c:44:66:09:1e:74:cc:ba:e7:94:27:
                    44:5b:99:ce:24:b5:a9:52:ee:84:01:dc:7e:33:89:
                    33:1e:c7:96:f9:c2:cc:21:c3:ef:36:7f:6b:cb:80:
                    81:e6:5a:9f:93:e2:76:66:72:46:e8:e2:b2:e3:e5:
                    1f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:75:D2:4F:87:98:AA:02:4C:81:52:EB:8E:64:75:C7:55:3B:F4:E7
            X509v3 Authority Key Identifier:
                keyid:AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/fnXST4eYqgJMgVLrjmR1x1U79Oc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:3540:fff8::/46

    Signature Algorithm: sha256WithRSAEncryption
         00:18:97:84:59:d2:b8:e3:de:39:78:51:c1:e8:1f:0a:19:a6:
         40:1f:ee:39:11:ce:0f:56:b0:96:10:f5:20:f5:40:15:20:14:
         8a:01:78:fa:91:42:8d:04:4b:37:d5:09:de:0a:47:eb:e4:7b:
         6d:fd:bd:d7:01:10:4d:57:f4:ca:ab:6f:b9:51:0c:bb:a7:12:
         35:a0:68:d7:c6:4d:dc:c9:31:e6:13:1e:12:43:d7:64:6a:66:
         05:68:fb:b7:be:57:21:4b:5d:61:81:b4:e2:27:51:48:c5:35:
         3d:55:9c:69:18:c5:5d:46:f9:3a:62:a8:44:a3:70:65:9c:fb:
         b3:02:15:cb:eb:dc:d4:c5:28:6f:28:45:bf:c2:a0:92:f1:14:
         29:bb:78:39:c7:26:4a:5d:73:66:89:4f:f6:80:2f:f9:98:82:
         f6:71:39:9e:02:90:cf:9d:69:21:b6:a4:54:5a:c4:df:63:9b:
         21:17:d4:5f:14:66:d0:65:1f:2b:de:42:8f:4a:a2:cd:2e:2a:
         f1:10:1b:d0:11:83:f0:11:eb:87:a0:f4:1b:59:b3:b7:56:1b:
         18:00:ae:74:20:96:25:51:cc:d6:7b:61:31:5c:48:15:34:23:
         33:46:28:f6:62:99:ff:58:0f:50:15:72:11:1f:15:4b:94:86:
         fc:ea:3e:95
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----