Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/MYvqluWbtSu3R0t7DgnbwaXLhLA.roa
File:                     MYvqluWbtSu3R0t7DgnbwaXLhLA.roa (raw, json)
Hash identifier:          TVphsk6zPx/0wz7/Hk2N6SDZy1kdWhfUpPkHxLqE30Y=
Subject key identifier:   31:8B:EA:96:E5:9B:B5:2B:B7:47:4B:7B:0E:09:DB:C1:A5:CB:84:B0
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       0AE4
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/MYvqluWbtSu3R0t7DgnbwaXLhLA.roa
Signing time:             Wed 29 Sep 2021 02:41:13 +0000
ROA not before:           Wed 29 Sep 2021 02:41:13 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     1659
IP address blocks:        210.62.64.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2788 (0xae4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Sep 29 02:41:13 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=318BEA96E59BB52BB7474B7B0E09DBC1A5CB84B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:47:2b:c8:41:2b:44:be:df:81:6c:9b:3b:6e:
                    69:9d:f7:c6:37:63:ad:23:d2:4e:59:f1:3c:6d:da:
                    e1:66:9f:fa:34:3a:ab:ef:c3:4e:01:ec:02:11:b5:
                    d9:50:fd:94:ab:d2:14:fb:d3:70:c4:63:80:d2:df:
                    e8:21:0b:44:0a:b9:c2:14:31:5a:7e:93:26:83:d6:
                    28:f8:a7:da:35:22:ce:6d:f6:a9:98:79:c6:dd:08:
                    61:36:29:c1:0f:13:3f:cf:20:0e:43:c0:1d:69:2a:
                    fc:61:be:7e:c2:59:41:44:1c:d4:58:ae:de:8f:1d:
                    99:a9:dd:8d:68:78:c1:5c:11:3d:c5:c2:eb:25:eb:
                    79:68:be:db:9a:c5:ec:4b:ff:63:72:a8:77:5b:ca:
                    64:c6:ff:d8:1c:41:ee:0a:4c:ab:a3:3f:30:4c:4a:
                    a6:f5:02:a2:96:7b:d6:b9:23:ca:5e:d8:b2:01:19:
                    aa:5b:d7:3d:1b:03:13:43:24:bc:45:15:4f:20:8f:
                    6f:b5:84:53:aa:75:c5:64:c4:7b:24:a2:2b:57:22:
                    64:bf:66:81:c5:07:f8:12:e8:9d:77:c7:44:41:01:
                    4a:78:0f:2d:97:09:f4:5e:64:b8:e8:25:2b:5e:79:
                    72:3e:f5:30:27:90:6d:f3:99:8e:c4:7a:48:42:7c:
                    72:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:8B:EA:96:E5:9B:B5:2B:B7:47:4B:7B:0E:09:DB:C1:A5:CB:84:B0
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/MYvqluWbtSu3R0t7DgnbwaXLhLA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.62.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         25:10:51:32:29:ec:9e:a3:d9:6b:32:66:5f:5b:81:00:c5:3c:
         91:56:38:4e:dd:95:73:9c:bb:67:07:fe:33:d5:10:95:74:8b:
         4d:9e:bc:a3:34:1c:35:ba:42:2d:82:c4:88:b6:78:a4:5f:07:
         43:38:98:6b:07:25:61:c5:d4:33:fc:b7:91:57:35:2b:2b:d2:
         74:a4:b5:f4:41:13:27:ae:95:b3:53:83:9a:ad:e6:19:4f:63:
         bc:79:69:c9:41:2f:bc:b9:47:81:a4:08:a6:66:be:cf:48:fb:
         03:17:e5:bd:86:bf:73:1a:a9:3f:1b:d6:a1:7b:d6:c2:47:d7:
         ec:91:f8:ca:55:c8:07:1c:a1:5f:e8:91:84:a8:c1:d9:0d:71:
         ab:c0:ab:b4:19:af:3c:98:db:05:19:e7:76:7b:87:05:2d:8e:
         0c:de:0a:82:ec:4a:ee:45:d0:7f:19:1c:2b:05:91:7c:74:e0:
         28:d6:b2:ec:e8:6b:1a:b5:ca:fb:b1:49:a0:ec:4d:e4:f5:b9:
         85:c7:f8:56:0c:70:04:d7:9d:c6:a8:dc:42:f0:01:e2:d2:25:
         4a:18:0f:12:d5:cd:fa:62:4c:8d:1c:0b:fb:14:42:c1:e7:24:
         19:03:25:0a:6c:52:86:14:3f:95:0a:ff:14:c5:b3:ba:52:3a:
         77:04:65:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----