Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/E37aH4rgj3rlYoEf-mUOMF00IBs.roa
File:                     E37aH4rgj3rlYoEf-mUOMF00IBs.roa (raw, json)
Hash identifier:          oNUE+54I4UoLFvNcwui2MIbofZkeltvshF+H2Ip8Qko=
Subject key identifier:   13:7E:DA:1F:8A:E0:8F:7A:E5:62:81:1F:FA:65:0E:30:5D:34:20:1B
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       08E3
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/E37aH4rgj3rlYoEf-mUOMF00IBs.roa
Signing time:             Tue 29 Sep 2020 09:52:33 +0000
ROA not before:           Tue 29 Sep 2020 09:52:33 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     4780
IP address blocks:        2401:8000::/26 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2275 (0x8e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 09:52:33 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=137EDA1F8AE08F7AE562811FFA650E305D34201B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8e:c6:67:b1:27:01:9e:8d:98:a2:f9:ef:cf:
                    29:34:78:ca:a3:a7:d0:40:78:ad:b0:e6:7b:00:eb:
                    2d:7e:0f:a4:e8:12:c7:1c:32:20:b5:97:c4:f0:c0:
                    d6:3d:c9:16:5d:9e:43:92:27:1f:fe:1d:d0:f6:01:
                    11:83:d9:00:b8:5a:2f:bb:97:00:66:6c:c7:54:10:
                    98:ef:39:9c:87:f6:91:83:84:0b:d2:f1:41:5e:aa:
                    9f:5d:db:a3:22:82:9b:a7:dd:a7:c2:4a:3e:ea:c2:
                    85:de:7a:3d:85:24:17:4d:3e:52:89:a2:a4:c5:d1:
                    3b:63:53:46:52:6e:0a:7d:4a:ab:7f:cf:83:d3:6d:
                    23:6f:10:7d:c5:b7:5d:13:ae:cc:8a:0c:d7:ac:61:
                    4e:91:46:0c:88:5b:63:42:5b:a2:bb:98:fe:7e:51:
                    cc:66:4b:c2:9f:9b:1b:8f:2b:4c:fa:ed:b2:0a:01:
                    22:52:81:33:22:62:66:dd:7a:1e:4e:74:57:75:99:
                    f8:c2:f0:21:77:ca:79:41:29:32:f0:5c:d8:0c:dc:
                    af:e5:4f:d6:f3:92:96:fd:73:94:f8:f1:02:14:db:
                    0d:58:9c:8f:9a:c1:bc:44:93:57:14:9c:05:da:80:
                    98:cd:0f:88:ca:24:71:b5:73:a4:fc:cc:16:ce:0b:
                    fa:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:7E:DA:1F:8A:E0:8F:7A:E5:62:81:1F:FA:65:0E:30:5D:34:20:1B
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/E37aH4rgj3rlYoEf-mUOMF00IBs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:8000::/26

    Signature Algorithm: sha256WithRSAEncryption
         0c:eb:f0:44:73:bb:16:30:0a:bd:d7:0e:a5:5f:ca:0d:54:97:
         75:11:2c:f8:da:dd:5f:b4:cf:c2:44:48:94:fd:fb:3d:59:62:
         4d:7d:2f:2e:86:96:c7:45:00:de:41:4d:61:a4:ca:d7:6c:c9:
         b2:1e:16:5e:c7:12:10:d1:57:70:e1:2e:cb:90:6f:73:86:a8:
         1e:94:1e:8c:c3:96:c2:7c:1b:4a:0c:86:9d:7c:5d:27:5b:86:
         db:6d:81:20:0f:92:17:9e:98:4b:2b:3d:19:b7:ca:10:3f:51:
         de:82:70:b3:b0:a4:e5:c7:ee:25:6f:13:cf:c4:43:7d:86:a9:
         9a:dd:b6:e3:7e:94:7f:31:45:52:af:85:8b:83:bf:cb:d2:3d:
         36:79:3c:22:f3:d0:0e:25:d4:94:a4:da:7d:40:40:c6:74:6f:
         3b:d6:37:2e:16:58:df:79:6d:c7:c3:5e:ac:d7:64:0d:ff:13:
         e0:71:38:60:dd:27:17:64:95:96:64:26:c0:98:c8:f9:67:f7:
         67:2d:75:ab:81:56:00:07:da:9f:c6:94:c4:0a:6c:9b:c1:4c:
         28:88:73:34:fd:b9:1e:2d:76:53:08:df:d6:2e:3b:c8:54:ad:
         0a:ed:53:0a:5b:96:c2:ce:1c:47:55:a7:6b:f6:5d:ba:14:48:
         4a:e8:06:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----