Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TBCOM/eTgdfeWSxb6jS7K4kadqmZK20bE.roa
File:                     eTgdfeWSxb6jS7K4kadqmZK20bE.roa (raw, json)
Hash identifier:          hKlJ1rne78jIcgR8CJdDWrhUTTxsLb9vVqoeRMcgn7M=
Subject key identifier:   79:38:1D:7D:E5:92:C5:BE:A3:4B:B2:B8:91:A7:6A:99:92:B6:D1:B1
Certificate issuer:       /CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
Certificate serial:       0785
Authority key identifier: 83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/eTgdfeWSxb6jS7K4kadqmZK20bE.roa
Signing time:             Tue 29 Sep 2020 09:59:59 +0000
ROA not before:           Tue 29 Sep 2020 09:59:59 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131596
IP address blocks:        61.57.64.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1925 (0x785)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
        Validity
            Not Before: Sep 29 09:59:59 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=79381D7DE592C5BEA34BB2B891A76A9992B6D1B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b8:26:4f:69:f1:4b:17:5f:6b:97:85:7e:42:
                    d7:2e:d8:49:45:f1:c1:25:c7:13:70:65:88:7a:f5:
                    d7:d3:9c:8a:30:2d:fe:e7:f7:ea:f9:5b:39:59:fa:
                    f2:c4:db:1d:5e:ce:e2:23:60:f2:6d:d1:95:7b:19:
                    be:ae:f1:70:5f:23:41:8b:9e:ea:26:56:84:1d:11:
                    e8:aa:25:58:a0:9f:22:27:0b:3a:28:84:7f:6b:4b:
                    e4:57:dd:98:2e:39:30:e1:4d:b4:43:88:e5:47:60:
                    c4:f2:a2:6e:e0:47:ca:74:62:69:ba:9f:e3:60:bf:
                    50:e9:0e:2c:ee:5f:e1:58:0f:98:39:25:0e:20:c6:
                    33:66:a2:80:97:5c:af:45:8e:0c:f8:37:41:b7:bf:
                    f3:21:58:07:5f:e3:f4:df:2a:37:b4:92:b8:7e:a8:
                    6d:f0:59:af:c1:13:ef:d5:c3:5d:74:c3:91:e6:83:
                    7a:54:54:1d:80:2e:20:45:40:2a:ba:50:5f:0f:fe:
                    d6:0b:3c:d5:3e:46:c6:be:0d:d8:09:da:d8:fc:81:
                    90:c3:4b:43:da:1f:64:7c:99:c4:45:27:5c:fe:70:
                    81:03:38:c2:ac:cf:da:07:81:c0:ac:89:ec:63:ef:
                    d7:d4:ff:90:5f:18:e6:2c:78:ec:a1:31:2d:2b:a5:
                    00:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:38:1D:7D:E5:92:C5:BE:A3:4B:B2:B8:91:A7:6A:99:92:B6:D1:B1
            X509v3 Authority Key Identifier:
                keyid:83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/eTgdfeWSxb6jS7K4kadqmZK20bE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.57.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         8d:00:36:bf:59:ff:02:fe:1a:8e:c6:fd:24:52:7d:c1:d2:ea:
         f0:00:8a:1b:f4:f4:00:35:01:03:bc:42:be:5f:1e:7f:c4:55:
         3a:86:ad:10:67:82:fd:d2:ae:d2:f8:64:88:6d:cc:6c:18:e6:
         d1:29:74:09:db:a6:6e:d2:de:3b:48:ec:f6:92:42:40:1b:b5:
         b9:40:0a:f5:bc:29:e0:7b:9a:a0:c0:b7:af:ce:05:09:90:d5:
         69:9b:cf:9a:a9:af:f3:5e:5e:74:46:77:9c:9d:52:bb:9c:40:
         59:6e:91:69:7f:9f:53:24:c2:d0:85:15:c1:64:a4:36:04:5e:
         99:30:e3:00:a2:07:29:be:c1:d5:1e:26:da:56:3a:af:a3:fc:
         bc:71:dc:b0:58:c4:f2:7d:e3:dd:58:14:cf:cc:e1:f0:ab:e0:
         bc:62:21:92:d5:df:cf:67:0c:27:07:3e:9b:3f:ba:f5:9c:fb:
         40:1a:4d:03:7f:38:88:48:9f:1e:01:23:19:6b:52:d8:49:61:
         c2:1c:a8:84:40:b4:47:d9:15:c7:3c:00:a5:67:9c:21:af:94:
         9a:32:f8:82:8b:cb:30:8e:75:f5:9e:00:15:c0:a8:33:4e:ea:
         5a:d9:aa:9e:2f:48:6a:64:ea:3f:ad:43:d2:ef:e5:b4:55:0f:
         7c:14:4a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----