Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TBCOM/17Fl2EM2RPedw5CQfSPsztR03aQ.roa
File:                     17Fl2EM2RPedw5CQfSPsztR03aQ.roa (raw, json)
Hash identifier:          d6iBREgCBzTEH+VjiuReZnzvuy3QV6FISCSYcnHPnT4=
Subject key identifier:   D7:B1:65:D8:43:36:44:F7:9D:C3:90:90:7D:23:EC:CE:D4:74:DD:A4
Certificate issuer:       /CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
Certificate serial:       0992
Authority key identifier: 83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/17Fl2EM2RPedw5CQfSPsztR03aQ.roa
Signing time:             Wed 29 Sep 2021 02:52:32 +0000
ROA not before:           Wed 29 Sep 2021 02:52:32 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     131596
IP address blocks:        2405:9200::/32 maxlen: 64

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2450 (0x992)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
        Validity
            Not Before: Sep 29 02:52:32 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=D7B165D8433644F79DC390907D23ECCED474DDA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:09:f9:0b:f4:9d:d8:79:43:82:a6:41:20:bd:
                    a8:91:2d:81:34:b0:53:64:0f:61:63:b6:11:1f:11:
                    ef:95:a9:cb:e9:6d:14:17:97:f8:29:ab:4f:41:56:
                    5c:ac:17:a6:4a:e3:36:ef:42:92:ed:1f:0f:80:8f:
                    f6:6f:99:15:c1:1a:a7:95:d6:26:55:28:85:88:61:
                    b8:c9:2e:37:37:06:46:b3:64:a9:fe:65:25:c1:d4:
                    24:e4:d0:d3:48:6d:87:78:eb:5d:b8:46:39:f5:52:
                    14:59:de:12:e9:b1:21:45:76:44:33:aa:a4:f2:e1:
                    26:80:8a:11:f7:c8:21:8a:98:db:1d:7d:61:80:99:
                    da:f5:b1:95:88:26:4d:29:c0:3a:75:bb:36:53:6a:
                    4a:3d:ea:d7:ce:4d:f9:3f:6e:12:5a:66:41:f5:4d:
                    61:7b:27:18:18:f7:2d:62:f8:3d:a6:25:c8:ab:88:
                    87:da:0d:cb:2a:a5:7d:31:5f:49:d2:76:4c:db:6f:
                    29:85:1c:13:79:42:6b:e9:ab:6c:57:6a:ca:34:59:
                    e8:59:9c:d7:df:77:44:7c:48:cb:9b:18:84:44:dc:
                    4b:47:ed:9f:a5:b4:3c:93:2f:3a:81:09:c2:4c:28:
                    0d:74:89:31:be:dc:a5:0e:ce:04:db:f3:82:6d:3f:
                    c6:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:B1:65:D8:43:36:44:F7:9D:C3:90:90:7D:23:EC:CE:D4:74:DD:A4
            X509v3 Authority Key Identifier:
                keyid:83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/17Fl2EM2RPedw5CQfSPsztR03aQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:9200::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:82:bc:b2:d9:28:fe:b7:ab:61:d5:ef:77:b2:d8:74:1e:d0:
         2e:67:69:23:0f:ca:0c:d7:6c:8e:17:1d:b7:df:8f:ef:bf:c8:
         89:42:6d:2f:f3:27:30:f3:23:93:0f:b9:a3:09:40:b0:97:1a:
         4e:f7:44:b6:02:5b:d3:61:fb:10:8d:1b:d9:f4:57:2d:38:91:
         1b:41:6d:eb:2d:e7:64:d9:07:64:bd:0f:c4:03:0a:43:a3:db:
         81:b3:28:82:f9:35:68:9f:59:82:b1:26:73:7c:66:ec:31:48:
         91:85:5f:46:36:3a:37:7b:08:48:c1:6f:7b:20:fb:4b:1b:a7:
         95:39:98:f0:72:7e:9b:b6:26:6b:be:d6:2a:3c:f2:e0:de:ff:
         1c:d0:ec:9d:b7:42:0a:38:62:a3:07:61:49:6f:c8:87:a1:da:
         ca:f0:10:87:09:4c:ee:01:3c:a8:ab:93:33:43:0f:27:89:a0:
         92:1f:df:2a:07:8a:f7:ab:e9:0f:dc:b1:9d:21:ab:3a:57:2d:
         ba:b8:26:a7:07:22:c0:45:aa:4f:60:75:c8:55:90:fb:50:85:
         a9:45:14:79:ed:c8:e1:db:5d:69:73:24:1a:7a:c0:bc:03:a7:
         0b:86:b0:a7:7b:22:4f:94:95:d4:b0:fd:54:8e:dc:b8:d5:fa:
         3e:0a:31:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----