Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/eTAqI_-80HkHkrLF1bWAuVoLfVg.roa
File:                     eTAqI_-80HkHkrLF1bWAuVoLfVg.roa (raw, json)
Hash identifier:          2oxRb2lDnYIhTVQEljMUuGirgt9yGM1mzPug1oOpDWo=
Subject key identifier:   79:30:2A:23:FF:BC:D0:79:07:92:B2:C5:D5:B5:80:B9:5A:0B:7D:58
Certificate issuer:       /CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
Certificate serial:       099C
Authority key identifier: 00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/eTAqI_-80HkHkrLF1bWAuVoLfVg.roa
Signing time:             Wed 29 Sep 2021 02:44:40 +0000
ROA not before:           Wed 29 Sep 2021 02:44:40 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     38047
IP address blocks:        2402:c340::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2460 (0x99c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
        Validity
            Not Before: Sep 29 02:44:40 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=79302A23FFBCD0790792B2C5D5B580B95A0B7D58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:22:1c:44:79:ac:f3:e2:df:dd:ad:f8:aa:bb:
                    fc:8a:2c:4c:8c:99:8d:f8:1e:ed:e3:97:c1:3f:be:
                    97:73:c2:22:9a:85:e9:73:2f:f9:6c:d8:16:6c:70:
                    c6:89:29:98:ed:b1:16:2e:9f:cf:04:98:3f:50:2e:
                    9d:6c:77:50:9c:8c:b9:df:16:d9:e0:5e:d6:fb:90:
                    8f:a3:38:5f:d1:b4:93:c4:dd:53:99:d9:1f:ca:2d:
                    72:45:8b:74:99:86:4d:e4:81:0f:81:b3:7d:80:63:
                    e1:3e:19:da:d1:50:c1:df:bb:f4:67:b8:4b:17:78:
                    6e:ec:e8:12:82:6b:2b:13:6c:5a:74:fc:e1:16:0a:
                    01:61:72:aa:97:4d:c9:c2:ac:39:51:c3:4b:8a:96:
                    ef:5f:2c:fb:5c:8b:b6:eb:9e:95:c1:f6:d1:db:80:
                    31:f9:6c:9e:89:f3:f7:fe:af:35:78:43:98:c6:05:
                    50:95:42:8c:38:62:80:05:12:24:6c:26:0b:02:67:
                    57:bb:f5:1b:56:21:35:0a:71:b6:92:4d:59:95:c6:
                    61:56:f1:a5:9a:87:72:fc:d4:99:05:83:99:90:e1:
                    3d:8b:4f:cf:95:91:a5:85:4a:b1:cf:b6:ac:e0:de:
                    37:56:6b:73:e2:d8:5e:a8:bb:4a:ca:5d:22:8e:b3:
                    05:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:30:2A:23:FF:BC:D0:79:07:92:B2:C5:D5:B5:80:B9:5A:0B:7D:58
            X509v3 Authority Key Identifier:
                keyid:00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/eTAqI_-80HkHkrLF1bWAuVoLfVg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:c340::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:06:0c:d2:09:82:93:72:68:a4:67:a5:95:fd:29:bf:e2:7b:
         48:b5:5b:1a:49:65:d1:8f:1f:37:f7:95:76:0d:36:b9:8e:35:
         af:95:16:58:31:bb:f9:ba:e2:e1:eb:5a:e8:76:2e:76:ed:40:
         00:2e:dd:43:95:ce:02:9e:97:a0:05:36:75:78:1d:40:c5:09:
         8a:1a:66:47:a1:7e:c7:e1:45:0f:5a:72:08:02:57:02:ea:4a:
         cb:d7:7b:31:ee:59:00:e7:76:69:a5:78:43:b7:bf:5e:59:b6:
         03:0f:51:30:dd:67:8c:ea:fc:bc:31:a7:ea:10:51:1c:70:99:
         36:4a:b4:09:de:25:3e:8b:0d:db:57:19:86:d9:6f:9c:d8:2f:
         2c:7f:38:bd:38:cc:e4:9d:70:dd:35:de:2f:56:ba:23:81:9a:
         7e:5b:86:cf:73:2b:81:82:7d:36:09:b7:16:56:66:ea:91:1e:
         15:07:96:38:4d:fd:c9:18:5b:61:28:d9:a5:0c:06:ec:f1:b7:
         96:34:25:a1:48:9d:2f:6e:a1:09:24:07:07:5c:10:0f:26:3f:
         c9:5c:c1:d1:e2:71:7a:43:be:1b:6d:a9:99:cb:e9:5e:aa:d7:
         1c:0d:8e:b0:c9:b1:7e:fd:5d:d5:3d:57:f1:d2:69:fc:94:c5:
         62:90:bc:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----