Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/vi-KdJA2mxVU_CYAblAXj2KfkCc.roa
File:                     vi-KdJA2mxVU_CYAblAXj2KfkCc.roa (raw, json)
Hash identifier:          AmIbkp0M9zvK674KqEwSKOrvnEnpeB87dzTocZ1DWLM=
Subject key identifier:   BE:2F:8A:74:90:36:9B:15:54:FC:26:00:6E:50:17:8F:62:9F:90:27
Certificate issuer:       /CN=ED186F6314D7B5713EFFECFB93EBC3E82197E2EF
Certificate serial:       0DB0
Authority key identifier: ED:18:6F:63:14:D7:B5:71:3E:FF:EC:FB:93:EB:C3:E8:21:97:E2:EF
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/7RhvYxTXtXE-_-z7k-vD6CGX4u8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/vi-KdJA2mxVU_CYAblAXj2KfkCc.roa
Signing time:             Fri 29 Jan 2021 11:47:14 +0000
ROA not before:           Fri 29 Jan 2021 11:47:14 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131633
IP address blocks:        2404:29c0::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3504 (0xdb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED186F6314D7B5713EFFECFB93EBC3E82197E2EF
        Validity
            Not Before: Jan 29 11:47:14 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=BE2F8A7490369B1554FC26006E50178F629F9027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d2:a3:67:bb:9e:ca:e3:53:62:c2:c5:48:4f:
                    72:2f:32:25:61:39:8a:82:33:b8:88:4a:82:9b:4e:
                    dd:83:27:0e:e4:0e:6c:33:a6:d9:a6:90:95:fc:71:
                    8d:43:22:40:7e:f2:b1:b1:03:56:fe:a8:5e:e2:79:
                    57:c2:87:fc:ff:72:f0:d7:47:bb:c7:33:9d:2e:16:
                    de:39:2f:b4:b6:b1:df:82:69:af:04:a8:b4:24:b1:
                    11:da:cc:62:48:d6:9c:df:7c:c0:e4:aa:98:35:25:
                    03:44:ed:bb:03:f2:7d:b5:db:79:dc:41:21:97:48:
                    79:5b:8b:f7:b2:61:3f:f8:b9:87:ae:e8:f2:57:55:
                    6c:c9:5b:dd:c2:b3:76:93:98:8d:54:06:f5:44:78:
                    5b:42:67:c9:64:26:4b:8a:e0:01:98:58:46:2e:5a:
                    17:42:f0:9a:67:8c:dc:9a:f5:97:0c:3d:21:2b:22:
                    8e:f8:25:5b:4f:64:7c:32:56:fe:d5:76:9b:36:a8:
                    42:10:31:4b:dc:df:5b:00:b5:25:0a:95:ac:16:26:
                    78:ad:f8:21:0d:65:3c:54:e8:4f:a6:f5:c8:34:63:
                    b8:6a:60:20:fa:ec:06:f5:5f:1e:4e:b7:e3:5a:71:
                    2c:d8:c2:c0:2a:11:92:be:c5:2e:7d:9f:68:30:84:
                    2f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:2F:8A:74:90:36:9B:15:54:FC:26:00:6E:50:17:8F:62:9F:90:27
            X509v3 Authority Key Identifier:
                keyid:ED:18:6F:63:14:D7:B5:71:3E:FF:EC:FB:93:EB:C3:E8:21:97:E2:EF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/7RhvYxTXtXE-_-z7k-vD6CGX4u8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7RhvYxTXtXE-_-z7k-vD6CGX4u8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/vi-KdJA2mxVU_CYAblAXj2KfkCc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:29c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         ab:94:13:1d:95:60:58:07:7a:9e:be:98:19:0c:2a:33:4d:bf:
         c0:02:7c:52:3d:20:f4:97:db:7c:89:2a:48:96:f2:74:a5:6c:
         b2:a7:29:b5:82:27:2f:97:40:59:03:b2:60:99:a9:04:b6:6b:
         58:30:22:0d:04:d1:60:b8:29:a2:ce:f6:b3:09:50:27:75:2d:
         1d:de:92:90:48:fa:a6:58:17:76:bf:5f:9b:fa:02:38:87:dd:
         a4:8b:68:9a:85:89:c9:36:49:b0:9f:4e:16:a8:b0:5d:b1:d6:
         8a:5d:96:f3:2a:a5:6d:7c:ed:7c:4e:1c:95:2b:39:fb:a6:f3:
         24:58:7b:31:e0:cd:f7:ae:2d:0f:b5:a5:25:47:5b:75:e8:db:
         87:e7:f4:95:24:d5:0f:8b:7c:d0:86:0e:f3:ba:f0:2f:25:16:
         fe:a7:32:01:bc:73:2b:96:d7:26:d5:85:ca:3b:9a:31:26:32:
         cf:96:67:41:cc:10:c2:77:ca:71:71:3d:cd:40:9b:b6:32:74:
         ec:f2:4e:41:fb:36:06:b1:85:a6:37:9e:c6:26:47:67:87:59:
         11:be:3b:85:a8:e0:4c:8b:b4:52:51:72:33:1c:af:36:45:1a:
         c3:6a:78:2b:ee:37:01:84:ba:d4:6b:d0:7a:9b:89:15:55:21:
         2b:b7:3c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----