Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PAGIC/vNowwXRqErdvHNdhCNlfo2C0vrA.roa
File:                     vNowwXRqErdvHNdhCNlfo2C0vrA.roa (raw, json)
Hash identifier:          q13LKsLSbr1B/yX7u0X5vJwQq8WgtpoNjaBYiWYrU94=
Subject key identifier:   BC:DA:30:C1:74:6A:12:B7:6F:1C:D7:61:08:D9:5F:A3:60:B4:BE:B0
Certificate issuer:       /CN=529B606DB86283BD4A08AF7EB33EF38A256631BB
Certificate serial:       0741
Authority key identifier: 52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/vNowwXRqErdvHNdhCNlfo2C0vrA.roa
Signing time:             Tue 29 Sep 2020 10:00:28 +0000
ROA not before:           Tue 29 Sep 2020 10:00:28 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     4781
IP address blocks:        210.63.98.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1857 (0x741)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=529B606DB86283BD4A08AF7EB33EF38A256631BB
        Validity
            Not Before: Sep 29 10:00:28 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=BCDA30C1746A12B76F1CD76108D95FA360B4BEB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:cb:43:19:00:0c:90:62:da:c4:26:51:9b:d2:
                    89:22:2d:48:33:34:18:1f:c8:eb:fc:c3:46:fb:27:
                    9d:40:9b:cf:81:ed:0b:48:64:ee:ef:62:a6:e2:08:
                    72:6c:3c:ce:c0:38:96:20:4a:e6:58:77:b4:95:ce:
                    d9:4f:ac:8b:3b:cb:ee:e9:cc:84:90:83:ec:b0:a5:
                    ef:4b:98:5d:59:60:7e:c0:7c:0a:b0:4c:c2:40:2f:
                    69:90:b0:4b:76:d4:ca:79:fd:02:88:f0:ff:bb:c6:
                    aa:93:2a:15:6f:c9:ca:82:bf:f8:99:de:b5:12:00:
                    af:31:6c:38:e0:71:d2:1f:12:89:84:30:c2:7b:9a:
                    35:c3:3f:e4:c8:c6:f5:56:1c:ff:63:06:90:60:3f:
                    00:6a:28:e1:52:51:f4:db:3c:4f:11:f1:e6:81:6c:
                    19:5a:6b:71:be:66:66:07:9a:60:3a:49:b0:13:5d:
                    ea:7e:71:c3:6d:76:cd:c3:bf:db:5b:d4:21:56:e7:
                    02:fd:28:d1:2f:5f:db:58:bd:0f:23:54:b4:88:ec:
                    af:0e:e1:71:b2:73:77:23:e4:4d:05:c5:94:75:b9:
                    16:14:54:07:7a:f4:eb:b6:41:2a:30:c1:a4:b2:93:
                    2c:3d:d6:ac:95:3c:a0:2b:42:8d:5e:81:69:0a:ee:
                    ba:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:DA:30:C1:74:6A:12:B7:6F:1C:D7:61:08:D9:5F:A3:60:B4:BE:B0
            X509v3 Authority Key Identifier:
                keyid:52:9B:60:6D:B8:62:83:BD:4A:08:AF:7E:B3:3E:F3:8A:25:66:31:BB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/Uptgbbhig71KCK9-sz7ziiVmMbs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Uptgbbhig71KCK9-sz7ziiVmMbs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PAGIC/vNowwXRqErdvHNdhCNlfo2C0vrA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.63.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:32:6a:d1:8a:74:b7:16:18:a5:bb:fd:cf:2e:56:2d:a1:85:
         a1:d7:78:e8:a8:8a:a7:36:de:28:44:f4:c2:13:60:a2:47:6f:
         5f:79:a8:7b:e3:f1:6f:f2:ef:4c:8d:c4:77:13:d7:2e:b6:33:
         b8:37:e3:03:bf:01:49:e7:1d:59:ed:93:35:e6:09:96:34:0d:
         82:6f:fa:32:ae:ee:c0:34:06:61:8d:83:20:be:83:c2:74:ad:
         0f:b6:1e:c1:0a:4e:52:b3:d9:35:e2:07:de:8d:bf:b7:7d:c3:
         95:9c:85:e7:f0:f2:dc:b9:b3:e3:3c:90:28:0d:1f:f2:b4:bc:
         a0:5f:cd:ef:69:d4:04:31:14:0d:c7:e9:cc:4d:24:95:84:6e:
         c2:cf:07:9a:e7:9c:a8:e7:c1:15:d3:86:c2:4f:66:b9:c4:ab:
         94:15:55:12:d4:12:76:0b:56:71:45:73:61:b1:d8:f9:8a:79:
         7d:1b:2b:07:0a:76:f8:70:a7:7c:f3:ad:69:24:24:02:2d:21:
         51:88:0d:63:b5:38:b4:1a:ce:88:0f:0a:b6:0d:f4:f7:eb:59:
         0c:a6:cb:8c:4f:f6:63:f5:4e:c0:ab:59:9b:7b:15:b5:04:d1:
         21:fb:b1:70:6b:92:a0:45:f2:0c:29:43:56:93:4e:d4:4d:2a:
         ef:3c:10:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----