Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TINP/sAdTkq7sJnTi_DacDZdPw8B-UQk.roa
File:                     sAdTkq7sJnTi_DacDZdPw8B-UQk.roa (raw, json)
Hash identifier:          hP9MhT4A0K3HEYEJ9q2eQachZig/6hwyNOrdYCNNPlI=
Subject key identifier:   B0:07:53:92:AE:EC:26:74:E2:FC:36:9C:0D:97:4F:C3:C0:7E:51:09
Certificate issuer:       /CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
Certificate serial:       08E3
Authority key identifier: E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/sAdTkq7sJnTi_DacDZdPw8B-UQk.roa
Signing time:             Sun 07 Feb 2021 13:06:56 +0000
ROA not before:           Sun 07 Feb 2021 13:06:56 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     4780
IP address blocks:        49.213.167.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2275 (0x8e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
        Validity
            Not Before: Feb  7 13:06:56 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=B0075392AEEC2674E2FC369C0D974FC3C07E5109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:8c:4f:ba:80:b4:06:79:84:73:bd:fd:5c:ca:
                    4c:07:f2:73:c0:fd:47:e8:50:dc:79:f7:64:92:f6:
                    6f:a6:2e:35:92:eb:02:5a:01:90:ed:c9:6f:47:01:
                    51:56:2a:f1:82:42:8b:e8:88:2a:e8:10:b8:3e:98:
                    bd:0e:0a:fe:ec:9f:4f:c6:a6:38:ae:2b:ab:9b:e6:
                    1a:b5:73:e3:aa:d4:6b:4b:b3:fb:e8:df:a2:18:ff:
                    8a:74:28:ae:58:27:b1:df:a0:d6:4b:a9:db:5a:3f:
                    d8:bc:56:b9:7c:03:90:5b:99:10:6e:0a:35:b5:b3:
                    bc:bd:f7:0c:3c:c6:51:18:1f:c3:8d:b2:59:94:86:
                    bc:9d:1a:29:2f:a1:8b:2d:c9:b0:3c:a1:4c:e9:fb:
                    c2:59:16:5a:af:00:30:8b:26:0c:c6:06:9e:23:64:
                    84:7e:8f:3b:21:6b:4e:43:ab:3d:6e:43:bb:62:6c:
                    61:df:01:54:d9:1a:c4:29:f4:11:05:01:23:cc:3c:
                    38:22:23:e0:b9:b1:3c:f4:fa:6b:26:ad:27:e2:28:
                    57:de:a2:60:6f:cb:c4:74:78:84:51:d2:43:96:ea:
                    74:00:8e:45:0b:ad:12:4e:58:68:06:9d:76:65:cf:
                    6d:9e:ab:1b:9b:66:ae:b1:e6:d2:bf:ed:e1:84:5e:
                    53:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:07:53:92:AE:EC:26:74:E2:FC:36:9C:0D:97:4F:C3:C0:7E:51:09
            X509v3 Authority Key Identifier:
                keyid:E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/sAdTkq7sJnTi_DacDZdPw8B-UQk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.213.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:30:2f:1a:61:ce:3f:ef:82:f4:d9:90:53:cf:b5:20:cb:2b:
         53:38:69:f8:53:4d:11:ab:6f:3f:4e:bf:2b:cd:87:ce:99:80:
         5f:88:8c:dc:78:87:4e:45:60:c5:2a:37:eb:5f:bc:93:5b:09:
         7d:ee:35:73:08:af:ab:a4:a3:40:e0:25:ad:ed:f9:c3:e7:17:
         52:99:5b:7f:2a:48:ca:26:08:d9:63:56:7a:c0:4f:0c:91:44:
         68:f5:ec:e8:8a:69:74:ee:79:20:5f:eb:59:6a:f3:c9:31:48:
         0a:91:6f:ed:7a:ba:96:b8:82:6f:d2:5d:10:b7:fd:94:bd:1d:
         76:07:7c:f6:2b:2d:58:31:e8:e1:8d:12:95:2a:a6:9b:fa:6c:
         fa:eb:5e:1f:7c:cc:d9:b8:10:e4:0f:55:75:1c:2d:b2:b6:4d:
         99:8f:d5:68:1a:db:81:57:73:46:cb:c8:97:68:54:b5:6b:13:
         4c:4c:05:e3:46:ca:5b:89:98:09:e3:28:bf:82:23:e2:be:c8:
         41:b8:70:a9:0a:73:43:30:72:db:4f:d4:68:20:48:23:68:b9:
         c6:74:6a:79:14:1c:25:db:1e:20:c4:30:b1:72:92:af:a7:9d:
         71:5c:d7:91:e5:63:8c:31:9b:62:bc:15:47:24:58:2e:f7:3d:
         8e:32:02:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----