Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/n6ax8HVSs0nuf9pG1y16Eig4vVI.roa
File:                     n6ax8HVSs0nuf9pG1y16Eig4vVI.roa (raw, json)
Hash identifier:          rSCR7b56M3HCiZ5A7iwjQJGSL7+fp+mV6oAVpZ8i9QU=
Subject key identifier:   9F:A6:B1:F0:75:52:B3:49:EE:7F:DA:46:D7:2D:7A:12:28:38:BD:52
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       0AE1
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/n6ax8HVSs0nuf9pG1y16Eig4vVI.roa
Signing time:             Wed 29 Sep 2021 02:41:12 +0000
ROA not before:           Wed 29 Sep 2021 02:41:12 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     1659
IP address blocks:        210.60.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2785 (0xae1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Sep 29 02:41:12 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=9FA6B1F07552B349EE7FDA46D72D7A122838BD52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:84:37:a6:3e:46:af:8d:d1:bc:df:35:f2:f4:
                    a3:e4:a1:19:1a:c7:9f:5c:c7:d4:96:2e:5f:74:4a:
                    63:1c:96:76:f3:d4:f9:bc:a3:74:0f:63:07:22:10:
                    4c:d2:07:6f:5a:37:a7:a8:9b:c2:80:b8:68:fb:96:
                    ce:8f:4d:20:eb:2e:43:b6:60:46:60:16:11:87:74:
                    07:60:3d:ae:7b:92:b9:9e:8d:92:da:23:0a:7d:ef:
                    e9:2c:a9:ef:b1:58:61:e0:51:5c:31:77:67:ee:b5:
                    b8:5d:7a:83:48:16:8c:d4:6b:dd:aa:f8:8d:e2:38:
                    cc:44:7d:67:fa:a8:46:8b:43:fa:49:00:c7:fb:a0:
                    2d:9c:e0:1d:ad:c8:66:31:9e:70:15:ac:7e:0c:a8:
                    38:59:71:e1:52:62:c2:de:d4:ec:80:d0:46:3b:f6:
                    e1:fb:ba:30:c8:40:f2:ac:f4:ff:b5:be:aa:05:cd:
                    46:be:ee:36:e7:64:33:00:eb:62:1d:f8:e1:0a:91:
                    93:b2:39:98:fa:ec:4e:b1:3d:4b:e8:60:91:d2:7c:
                    fb:50:60:18:62:4e:74:f4:ed:49:22:ad:7f:86:94:
                    50:3f:a3:1e:ed:3d:84:23:39:7d:92:c9:6b:62:7e:
                    87:35:77:7d:27:c3:79:ad:98:b8:c4:59:df:91:7c:
                    1c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:A6:B1:F0:75:52:B3:49:EE:7F:DA:46:D7:2D:7A:12:28:38:BD:52
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/n6ax8HVSs0nuf9pG1y16Eig4vVI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.60.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2f:09:41:46:b8:bb:bb:78:9d:90:64:9c:f2:3d:b5:e3:51:eb:
         37:1a:69:7f:a7:90:8c:74:51:5f:f9:ef:f2:97:16:f9:d0:2b:
         16:71:b0:bf:90:42:15:1e:02:0c:47:19:3c:eb:66:ee:4d:ad:
         ec:f4:d7:11:86:af:e0:5a:cb:84:62:c8:28:88:06:6a:4f:62:
         78:8b:8d:13:36:4c:80:4c:17:16:7b:6c:f7:71:95:1a:71:2a:
         ec:a6:dc:a1:14:8a:93:db:77:01:ad:5b:a5:55:a5:31:02:69:
         b5:c5:c0:02:13:4c:19:d1:3c:90:34:45:1d:c4:32:ca:eb:19:
         81:fa:a0:ea:0d:35:81:c6:91:78:29:a7:b4:a2:ad:06:29:17:
         6a:40:4b:cf:4a:51:7e:ed:59:25:20:db:b3:f3:23:de:ca:f9:
         0e:dd:6d:20:59:d1:7e:9d:d9:c8:13:0a:e8:8d:f2:b3:b7:f3:
         71:5f:28:b8:55:5a:b4:aa:b7:be:8e:10:10:79:3f:04:d9:0e:
         71:c1:98:4c:22:63:21:a1:a8:e3:2e:2a:59:0c:6c:21:24:24:
         2e:16:11:76:13:89:67:e1:b8:97:a1:77:f0:90:18:72:a7:03:
         15:f6:9c:02:43:b6:eb:ec:f4:bf:3e:75:b6:40:c0:1f:d7:bc:
         65:c2:72:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----