Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TINP/3I3GcOv7TQHgfXF4kPHEc2QRID8.roa
File:                     3I3GcOv7TQHgfXF4kPHEc2QRID8.roa (raw, json)
Hash identifier:          xuKawrdXVDfirLcLl/3b33qlonExRrN5TWBSYZMroKc=
Subject key identifier:   DC:8D:C6:70:EB:FB:4D:01:E0:7D:71:78:90:F1:C4:73:64:11:20:3F
Certificate issuer:       /CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
Certificate serial:       0991
Authority key identifier: E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/3I3GcOv7TQHgfXF4kPHEc2QRID8.roa
Signing time:             Wed 29 Sep 2021 02:53:17 +0000
ROA not before:           Wed 29 Sep 2021 02:53:17 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     4780
IP address blocks:        49.213.128.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2449 (0x991)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
        Validity
            Not Before: Sep 29 02:53:17 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=DC8DC670EBFB4D01E07D717890F1C4736411203F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9f:cd:62:e1:ab:7c:15:17:07:b2:71:78:bf:
                    cc:67:6f:1a:29:5e:3e:b9:47:66:d2:d8:62:77:97:
                    67:44:03:af:27:1d:98:23:b1:6b:fc:78:0a:3d:12:
                    bd:82:98:dc:ff:24:34:1d:45:52:4f:23:43:78:28:
                    f9:d2:9b:22:1d:e8:09:6b:63:81:5b:05:bb:af:1f:
                    39:35:7c:9b:58:80:dd:4a:7d:7d:8e:3c:5b:40:26:
                    cc:e8:9a:f4:77:b2:d2:67:8c:ca:86:29:f2:ee:a5:
                    28:1c:68:cb:57:f1:93:77:43:f4:ef:9b:10:22:98:
                    3c:5a:3f:eb:18:1c:50:c2:4b:97:4c:19:29:d0:1e:
                    56:24:1c:24:da:7d:c6:49:3e:96:af:dc:4a:ae:5a:
                    77:f8:71:23:0a:ab:97:bf:fe:eb:6c:18:de:10:a6:
                    6d:bc:8d:27:b1:f2:2a:55:4d:48:00:0c:06:14:a4:
                    de:05:0a:79:53:4d:6e:4a:5b:6f:54:83:6b:5b:db:
                    df:cf:c9:07:06:03:dc:fa:99:99:4a:22:57:39:76:
                    ce:89:d2:87:e6:19:e5:48:9e:a0:86:dc:ce:71:8e:
                    6f:7c:8a:e5:3f:aa:fb:eb:7f:93:ab:03:5a:a5:8d:
                    85:80:8c:9f:4a:78:91:56:04:1d:35:72:63:77:05:
                    da:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:8D:C6:70:EB:FB:4D:01:E0:7D:71:78:90:F1:C4:73:64:11:20:3F
            X509v3 Authority Key Identifier:
                keyid:E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/3I3GcOv7TQHgfXF4kPHEc2QRID8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.213.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         31:b7:93:5d:4a:21:b8:17:d2:f8:bd:4e:ba:dc:34:a6:ed:b1:
         b5:96:04:8f:ab:c1:6a:51:eb:37:68:d4:58:1a:ee:38:68:18:
         73:bc:e5:52:0b:e2:b6:ca:a5:fa:f0:88:36:48:b9:f8:a7:0b:
         66:74:55:b1:63:a9:2b:e9:ee:33:7c:41:d3:a9:ad:9c:5a:c3:
         4c:93:6f:da:63:02:90:8e:5a:0f:96:15:83:2a:1d:73:89:88:
         a5:d4:c7:38:de:af:a3:19:3b:7f:16:cd:36:5d:2b:14:5d:08:
         29:83:7f:c5:a6:51:ab:3e:1e:a5:f6:30:38:b5:55:5b:2d:85:
         e8:43:d6:96:ac:5b:9f:70:45:1a:9a:c2:6a:58:b8:f6:b2:43:
         48:54:c9:05:a1:36:72:70:70:92:f2:52:a3:91:c3:a5:5f:c1:
         9c:79:c8:b1:7a:34:0e:92:1c:2e:c8:19:aa:25:9f:d7:d4:40:
         81:b7:27:8f:ef:45:9d:52:48:9a:5a:c8:79:63:ab:3f:d4:d1:
         04:e6:86:7d:fc:b6:70:c3:2c:9a:c8:5b:06:4d:f2:09:9c:c9:
         bf:4c:db:3e:6b:2e:2b:70:88:e2:ab:5e:e5:9b:fc:60:d7:31:
         3d:dd:29:13:a7:88:06:7d:8f:33:81:09:ec:47:b7:51:62:dd:
         33:58:64:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----