Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCHC/UH_DVaof9bEyxOFisozL6EydL90.roa
File:                     UH_DVaof9bEyxOFisozL6EydL90.roa (raw, json)
Hash identifier:          FdFntY45/SXiDoj4AEFZ92gvLegX+kVj08l2NuLtcn4=
Subject key identifier:   50:7F:C3:55:AA:1F:F5:B1:32:C4:E1:62:B2:8C:CB:E8:4C:9D:2F:DD
Certificate issuer:       /CN=ED38685FF3EA1F46685DE5F57C6A4B8104481891
Certificate serial:       077A
Authority key identifier: ED:38:68:5F:F3:EA:1F:46:68:5D:E5:F5:7C:6A:4B:81:04:48:18:91
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/7ThoX_PqH0ZoXeX1fGpLgQRIGJE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCHC/UH_DVaof9bEyxOFisozL6EydL90.roa
Signing time:             Tue 29 Sep 2020 10:05:05 +0000
ROA not before:           Tue 29 Sep 2020 10:05:05 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     7539
IP address blocks:        2001:e10::/32 maxlen: 64

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1914 (0x77a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED38685FF3EA1F46685DE5F57C6A4B8104481891
        Validity
            Not Before: Sep 29 10:05:05 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=507FC355AA1FF5B132C4E162B28CCBE84C9D2FDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fd:8b:55:ee:1c:06:db:b5:16:ee:73:62:54:
                    5d:0f:88:de:3b:4b:41:3b:e6:c2:1d:50:cd:86:e9:
                    54:93:89:9a:d7:c2:05:1a:44:76:a5:18:8c:77:5b:
                    42:16:5e:03:97:bb:d7:23:5c:06:52:12:24:91:ed:
                    00:0d:0d:f6:ee:49:c7:74:b6:45:7a:86:c0:ab:ec:
                    25:fc:d2:12:5b:73:1d:15:eb:61:8e:a0:57:a0:f2:
                    46:2d:b4:6c:92:5b:a9:35:26:66:15:c9:15:8f:3a:
                    65:cc:6c:b0:47:09:78:7f:f6:dd:56:d1:0d:f1:66:
                    02:d7:84:83:3d:48:3d:67:e9:8b:9b:44:b3:11:de:
                    d6:bf:f3:dc:f0:e1:5f:35:d0:3a:a6:af:94:d8:81:
                    5c:2a:18:4d:13:57:f9:b9:e9:34:a6:df:42:fa:bd:
                    76:09:13:e5:bd:50:da:98:6b:b3:cb:29:af:0d:cd:
                    41:89:8c:81:de:33:24:d8:14:a9:54:b0:51:21:8e:
                    45:84:e3:8c:66:61:9e:bb:7b:31:47:cb:e9:b6:83:
                    34:a0:20:c7:a6:4d:52:fe:73:d3:b7:ce:e1:be:98:
                    f5:f2:ad:0e:b0:d4:b2:69:b7:55:e6:c5:21:34:5a:
                    5f:36:47:ae:fd:75:78:75:dc:02:04:71:ca:5b:0b:
                    05:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:7F:C3:55:AA:1F:F5:B1:32:C4:E1:62:B2:8C:CB:E8:4C:9D:2F:DD
            X509v3 Authority Key Identifier:
                keyid:ED:38:68:5F:F3:EA:1F:46:68:5D:E5:F5:7C:6A:4B:81:04:48:18:91

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCHC/7ThoX_PqH0ZoXeX1fGpLgQRIGJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7ThoX_PqH0ZoXeX1fGpLgQRIGJE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCHC/UH_DVaof9bEyxOFisozL6EydL90.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:e10::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:bc:f9:dc:85:3a:15:19:84:68:a0:31:d4:e7:a1:49:d2:07:
         e2:7d:b6:d4:3d:b4:3e:34:ff:42:be:0c:5c:c5:94:86:79:3e:
         17:f8:b5:34:48:6b:83:c1:58:b0:3d:34:0c:db:c5:b9:53:c7:
         39:8c:3a:85:23:fe:63:13:fa:43:0b:04:7e:a3:8b:7b:e9:cf:
         6c:70:4a:d2:17:0f:ad:28:d5:a9:fc:d6:b8:8c:a5:81:8a:58:
         92:fc:3f:30:70:60:53:a1:c4:d0:7f:d4:ed:4a:2c:2d:5e:3a:
         4d:c7:0c:f5:2c:c7:7a:c8:6d:9c:ca:14:cb:2e:df:63:75:b9:
         2e:c8:6f:ad:56:a1:2d:30:df:49:4c:b8:d7:c7:1b:92:06:fa:
         42:28:93:76:8e:65:38:86:41:85:1e:71:ac:0a:60:50:51:2b:
         fd:c7:63:3c:35:f5:41:ce:e6:96:87:8e:79:73:2e:70:5c:1b:
         58:26:b3:a1:51:41:4c:9c:30:74:10:a9:4d:d3:8b:1a:3f:81:
         5f:bd:6c:e0:0d:50:0a:d3:3c:42:58:a7:a1:bb:46:00:28:56:
         8d:59:6c:65:40:8b:18:72:90:85:d9:d6:b4:33:7a:c8:43:04:
         ac:9e:9a:02:13:62:f0:68:7d:21:38:2f:4e:84:a8:13:fb:58:
         97:fd:fc:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----