Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TINP/7nze1tBVMoX2JBv5OgJa8Qoqaiw.roa
File:                     7nze1tBVMoX2JBv5OgJa8Qoqaiw.roa (raw, json)
Hash identifier:          7gl6075wkLVYW4CLPR2vC5NYgXds8i8CaI9+0K8fmnY=
Subject key identifier:   EE:7C:DE:D6:D0:55:32:85:F6:24:1B:F9:3A:02:5A:F1:0A:2A:6A:2C
Certificate issuer:       /CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
Certificate serial:       0999
Authority key identifier: E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/7nze1tBVMoX2JBv5OgJa8Qoqaiw.roa
Signing time:             Wed 29 Sep 2021 02:53:18 +0000
ROA not before:           Wed 29 Sep 2021 02:53:18 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     18049
IP address blocks:        61.58.128.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2457 (0x999)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
        Validity
            Not Before: Sep 29 02:53:18 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=EE7CDED6D0553285F6241BF93A025AF10A2A6A2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7f:d3:5e:fa:c4:19:01:eb:dc:50:f6:c9:d2:
                    0a:7d:50:25:02:73:d4:94:51:25:d2:68:65:21:db:
                    0d:13:5c:50:00:55:7c:f6:87:95:2a:c1:36:77:c9:
                    e4:55:35:3f:1d:7d:7d:72:d3:6b:ea:b0:fe:85:7a:
                    3a:ef:b1:a7:20:56:c1:c2:05:e8:4a:94:18:4c:d6:
                    2a:7f:9c:04:11:17:5f:4c:f5:03:75:49:9e:16:47:
                    ab:3e:0c:73:4e:85:bc:7e:6c:88:16:50:21:cd:ab:
                    e0:a1:6a:d1:0f:32:75:98:a3:01:c1:16:37:4d:7b:
                    42:c6:91:16:83:49:74:27:e2:0a:f0:83:ab:c3:09:
                    c8:1c:4f:5a:12:b9:4a:cf:5b:d0:a0:99:5d:73:69:
                    07:a2:0f:c2:e4:af:af:97:fd:a9:16:c4:e5:49:08:
                    e0:69:6d:7f:66:1c:cd:ef:7d:b4:0e:04:95:c8:fb:
                    27:e4:7f:bc:d9:9a:de:f7:0c:5a:40:80:7d:17:78:
                    00:f2:85:76:f3:c7:3f:7b:0b:15:c0:7b:e9:73:a2:
                    b3:77:1c:f5:e7:89:9d:02:ad:ab:98:c1:6e:47:5e:
                    bb:0d:6a:d0:8c:c7:32:4f:fb:f6:31:1f:f8:55:b1:
                    32:d6:50:15:2f:f8:2d:1a:a8:54:13:e8:e1:e3:ee:
                    3b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:7C:DE:D6:D0:55:32:85:F6:24:1B:F9:3A:02:5A:F1:0A:2A:6A:2C
            X509v3 Authority Key Identifier:
                keyid:E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/7nze1tBVMoX2JBv5OgJa8Qoqaiw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.58.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1f:e6:2d:b6:5b:02:00:eb:8d:c3:14:30:02:a3:22:c2:be:46:
         49:e7:19:b0:dd:a3:ee:6a:20:6f:0f:db:07:cd:6d:89:c6:e7:
         9d:17:5f:f8:9e:0e:e8:ca:db:43:84:86:ff:e4:18:83:5e:49:
         03:3e:01:38:f8:70:af:6e:75:c4:5f:19:97:4a:d3:5d:57:b8:
         7e:ed:11:22:2e:6f:4c:41:25:b9:ed:22:1d:de:80:99:41:0e:
         ff:93:c6:8a:e8:3e:e3:00:18:fa:a9:be:c8:b0:d5:7a:c0:3c:
         e1:c2:94:9a:02:cf:93:05:89:18:de:ea:37:d3:a8:3f:b9:e6:
         03:db:79:52:42:24:35:5b:1c:24:83:ac:39:ab:1a:5d:b7:88:
         09:98:94:23:6f:a5:42:e4:49:e2:04:66:fb:b2:34:4f:d6:0a:
         e1:5d:1b:d7:d4:d5:f6:2f:7f:60:8a:cd:db:7f:f1:28:e6:fb:
         0e:d9:4a:5d:60:c6:0e:08:4f:11:99:20:48:4a:fa:84:b0:31:
         ac:41:c0:3c:ba:5c:2e:5e:49:66:6f:2e:4a:de:7c:24:9a:92:
         de:29:0d:75:b2:40:bb:07:66:3b:2c:b9:29:ca:49:f9:ef:24:
         83:29:f4:81:cb:70:76:ce:70:e5:d3:26:b6:cc:49:ef:fd:28:
         cd:b9:0f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----