Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/IuOGazB5H1molgJfpRK1_0vXUPE.roa
File:                     IuOGazB5H1molgJfpRK1_0vXUPE.roa (raw, json)
Hash identifier:          evtgzfLqGfzvaMN1WWYGI9GYUezT/K92nLIcRKJlHfc=
Subject key identifier:   22:E3:86:6B:30:79:1F:59:A8:96:02:5F:A5:12:B5:FF:4B:D7:50:F1
Certificate issuer:       /CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
Certificate serial:       078D
Authority key identifier: 00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/IuOGazB5H1molgJfpRK1_0vXUPE.roa
Signing time:             Tue 29 Sep 2020 09:53:04 +0000
ROA not before:           Tue 29 Sep 2020 09:53:04 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     138145
IP address blocks:        2402:c340::/32 maxlen: 64

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1933 (0x78d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
        Validity
            Not Before: Sep 29 09:53:04 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=22E3866B30791F59A896025FA512B5FF4BD750F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:84:ce:0a:b7:34:42:c0:61:3c:e9:e0:65:67:
                    e0:7f:22:cd:4b:c8:bc:d9:1a:67:a6:13:72:58:4c:
                    08:4d:64:88:79:4a:48:27:58:a5:85:b3:61:cb:84:
                    54:5c:a0:c3:f9:d3:ab:01:d9:45:2d:e7:14:97:6b:
                    f1:6c:87:93:c0:28:29:2a:a7:a1:a6:fb:c4:6d:64:
                    f9:01:99:e7:99:94:8e:d6:dc:1b:eb:a9:46:7d:ba:
                    25:b7:b0:a4:31:d1:ff:89:cd:7a:24:86:a6:ab:81:
                    9f:39:42:73:41:78:f9:ac:7d:ca:a6:67:78:4e:e7:
                    4c:d7:6b:72:64:dd:2b:ce:6a:61:30:41:71:b5:83:
                    f4:7d:8f:be:f6:ea:94:8b:d1:da:14:2a:5b:bb:dc:
                    e6:71:97:bd:ad:59:cf:40:df:d5:ea:17:c3:10:f9:
                    66:0a:45:93:e6:32:01:99:e6:33:9c:e3:64:0c:d9:
                    df:c8:7f:2f:55:a3:81:63:2d:18:4a:3a:08:27:9f:
                    37:1d:2a:9e:59:8f:55:7d:be:b0:24:68:3c:f4:18:
                    d3:a3:47:2c:29:de:a4:d5:58:c0:d5:38:a2:94:f7:
                    85:82:1a:9f:47:66:67:bc:6e:fa:f0:33:73:ff:93:
                    81:8a:e8:a7:2d:c5:cf:e4:01:f8:a5:98:cd:3c:3e:
                    7f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:E3:86:6B:30:79:1F:59:A8:96:02:5F:A5:12:B5:FF:4B:D7:50:F1
            X509v3 Authority Key Identifier:
                keyid:00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/IuOGazB5H1molgJfpRK1_0vXUPE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:c340::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:e1:88:2b:1b:f5:2b:40:cb:e4:da:10:7e:4a:0a:e7:9d:42:
         c0:25:37:2a:67:a9:a6:5e:0f:35:e6:0c:44:25:42:63:3b:10:
         5c:ad:24:2a:8c:1c:67:92:94:17:b9:90:fe:31:09:49:4b:29:
         ea:13:85:c6:03:43:32:b5:7f:a9:6b:b1:63:c1:93:f6:47:7e:
         22:ca:c4:6e:00:79:de:5a:22:d0:c3:f2:d1:c7:53:1c:54:2e:
         75:67:08:6b:c4:2b:ad:1d:aa:ba:dd:c1:fb:a2:ef:19:92:0c:
         29:ec:b1:93:7d:09:08:de:6d:04:56:5d:46:95:0c:13:98:14:
         80:a8:47:c2:f1:e7:4c:3e:f1:00:11:ca:12:e7:32:7d:9c:04:
         8c:cd:6e:c0:86:d7:02:14:f9:2c:64:54:f8:cb:cc:1c:be:17:
         3d:68:5b:97:72:f7:5c:69:f9:07:7f:cb:b7:e2:5d:2e:15:46:
         58:e9:af:6b:f7:10:58:84:18:2c:db:82:89:4a:de:15:0d:b6:
         e0:8c:b0:f5:ca:75:c8:a2:0d:b1:e5:74:fc:95:c4:3f:fd:e0:
         34:5f:3a:08:32:b3:2f:d1:77:51:d6:b6:d8:8d:85:41:7a:c9:
         ad:fe:fa:a7:b2:85:e8:94:06:09:34:39:c2:d5:f7:57:9f:e4:
         7f:d0:ac:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----