Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SONET/XyYwa6ZZklegQ1N7cLQS3xQQYfU.roa
File:                     XyYwa6ZZklegQ1N7cLQS3xQQYfU.roa (raw, json)
Hash identifier:          GCElvNCeSiJRaEPfWN3lON4nIM+TouJoMQbsKfO9nWo=
Subject key identifier:   5F:26:30:6B:A6:59:92:57:A0:43:53:7B:70:B4:12:DF:14:10:61:F5
Certificate issuer:       /CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B
Certificate serial:       0781
Authority key identifier: CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/XyYwa6ZZklegQ1N7cLQS3xQQYfU.roa
Signing time:             Tue 29 Sep 2020 09:59:21 +0000
ROA not before:           Tue 29 Sep 2020 09:59:21 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18182
IP address blocks:        39.1.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1921 (0x781)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B
        Validity
            Not Before: Sep 29 09:59:21 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=5F26306BA6599257A043537B70B412DF141061F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2c:c8:ea:c5:a8:f8:34:f3:8a:4e:d1:14:7e:
                    19:47:c9:9a:d1:14:5e:4b:c8:6c:87:ca:3b:c5:53:
                    5a:d3:62:db:f9:fa:b5:dc:1c:1a:de:8a:74:71:13:
                    6f:a4:97:3c:a0:c4:5d:b6:6b:6c:bb:68:25:39:1e:
                    e2:7c:49:30:4b:7c:df:00:fb:06:bd:af:d7:80:ae:
                    7a:20:e7:92:5d:bc:9f:2f:93:1f:8b:aa:2d:9c:b1:
                    da:37:c1:20:58:38:b7:53:b3:f7:6e:96:f4:57:72:
                    5e:a3:dc:ed:b4:79:a5:1a:c9:73:f4:b9:32:a7:b6:
                    08:8f:81:4c:b2:90:94:06:4b:b8:33:a6:75:21:7e:
                    65:1e:47:3b:18:6f:f8:53:17:e0:ad:cc:31:63:f9:
                    b7:6a:e6:e1:37:3e:d2:4d:b0:41:cd:eb:94:81:db:
                    8a:39:9d:60:7c:9e:a5:5b:9f:a1:33:fc:76:a3:60:
                    81:fd:04:56:1d:94:7e:86:29:41:ef:16:2f:cb:c5:
                    dc:f9:6c:01:8f:16:11:93:b5:d5:8a:fa:71:98:77:
                    7b:52:b4:59:b5:80:ed:1e:91:04:99:13:42:8a:f5:
                    4f:2d:d2:ad:2f:b8:ce:3b:40:ba:8d:30:e9:b0:2d:
                    5c:9c:78:41:ec:83:7c:33:c4:c9:b5:17:a5:88:55:
                    ac:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:26:30:6B:A6:59:92:57:A0:43:53:7B:70:B4:12:DF:14:10:61:F5
            X509v3 Authority Key Identifier:
                keyid:CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/XyYwa6ZZklegQ1N7cLQS3xQQYfU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  39.1.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         86:aa:1c:38:ea:b1:98:85:f4:bc:b7:bc:6c:e8:43:39:28:a8:
         f9:5d:92:07:b9:cf:df:be:c7:b8:15:d4:4a:82:e2:92:7b:27:
         bb:ad:ec:42:27:8f:cd:0d:41:06:ac:40:a0:d8:17:19:d0:41:
         85:fa:2b:97:62:32:21:5f:50:ad:f8:f9:51:cc:d3:c0:77:8e:
         c4:c7:90:32:32:df:6c:d2:6b:70:c3:c3:25:f5:e3:1b:18:fe:
         ee:9f:c3:66:9c:d6:83:11:a4:cd:64:44:f3:8c:e6:18:b1:2e:
         70:48:b1:bf:7a:9d:23:73:89:42:11:8d:64:16:0a:60:3c:64:
         17:b2:8a:7c:9a:ca:72:aa:7b:b8:26:1d:77:73:4b:e7:96:0d:
         f7:80:30:87:ec:b5:05:9e:2c:e7:b5:d4:49:3b:24:30:51:7c:
         15:3f:51:cf:ae:72:79:10:21:2b:98:16:ed:32:53:d7:93:87:
         77:ef:b8:bc:1d:f3:28:1e:1b:87:b7:ca:55:2d:55:70:68:48:
         89:96:c7:94:91:b5:de:e8:88:b2:ee:f9:d5:c4:42:91:d7:13:
         5e:ff:1d:7b:e2:fe:95:f4:1d:ea:77:ee:2d:74:b9:49:c3:3a:
         44:c4:ff:e5:bc:1d:60:98:94:d4:b5:77:1e:4f:0b:e2:a7:a1:
         55:38:e9:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----