Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TINP/wg8OEGoIUyAtAZxvOuwSGR8hSOQ.roa
File:                     wg8OEGoIUyAtAZxvOuwSGR8hSOQ.roa (raw, json)
Hash identifier:          6MBve8iv1H3NB1l8X1jbqp2pdORcMGgOfx3Z0qCjffg=
Subject key identifier:   C2:0F:0E:10:6A:08:53:20:2D:01:9C:6F:3A:EC:12:19:1F:21:48:E4
Certificate issuer:       /CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
Certificate serial:       0993
Authority key identifier: E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/wg8OEGoIUyAtAZxvOuwSGR8hSOQ.roa
Signing time:             Wed 29 Sep 2021 02:53:17 +0000
ROA not before:           Wed 29 Sep 2021 02:53:17 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     4780
IP address blocks:        61.58.159.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2451 (0x993)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
        Validity
            Not Before: Sep 29 02:53:17 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=C20F0E106A0853202D019C6F3AEC12191F2148E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7e:c4:cd:1a:ee:58:44:ed:11:f9:01:17:a9:
                    2f:01:64:6a:b2:ad:3b:03:3c:c4:a2:30:cd:6c:fc:
                    f9:91:bf:dd:6b:2e:47:01:6b:20:c1:4d:25:c3:c0:
                    61:97:84:de:d9:64:cd:8e:e7:1c:04:8f:df:4b:73:
                    00:73:70:3b:6e:3b:c7:61:59:e9:74:66:1d:f5:b5:
                    1c:59:e2:cb:35:0d:18:05:45:53:9d:97:65:78:04:
                    eb:49:7a:dd:1f:2b:bf:a0:d4:3c:92:82:fd:e5:50:
                    04:0a:93:e3:54:c6:d3:5d:e3:b5:92:59:30:91:d7:
                    a6:84:be:8a:dc:fc:4b:a4:41:7f:67:90:6c:b0:80:
                    c8:f9:17:0a:90:5f:08:5b:ab:fe:4b:35:82:ac:10:
                    03:9d:f1:5e:1f:4e:8b:d8:b4:06:c4:46:b4:4d:f5:
                    98:8e:93:cc:4a:ae:63:4d:75:1b:56:63:db:e3:c9:
                    1c:31:24:80:89:21:2f:bc:fc:e4:92:8b:2a:0a:9c:
                    51:1b:8f:24:c6:50:da:9d:13:2e:db:5c:a8:bd:69:
                    5b:21:fd:39:5c:d1:66:1e:69:c9:1e:50:ff:1e:fd:
                    ba:b3:d5:86:01:59:b9:76:06:04:40:35:88:c8:5e:
                    4e:bc:43:4b:4e:6b:2d:f7:b5:43:30:18:bd:88:4a:
                    ea:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:0F:0E:10:6A:08:53:20:2D:01:9C:6F:3A:EC:12:19:1F:21:48:E4
            X509v3 Authority Key Identifier:
                keyid:E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/wg8OEGoIUyAtAZxvOuwSGR8hSOQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.58.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:0a:f2:3a:55:68:ba:96:08:27:66:7c:a2:6c:0e:f9:5b:8f:
         0c:9b:97:51:8d:44:a6:9c:d1:95:8d:9a:93:5a:e8:57:78:c0:
         85:f4:a6:fc:75:6f:a1:fb:1a:5e:38:08:1d:ff:32:f3:ed:33:
         db:42:9e:b5:7d:e1:fd:e0:f4:4e:c1:20:f8:da:89:3b:63:4c:
         df:91:93:16:a5:3c:aa:c1:df:95:30:7d:4c:d7:4b:aa:9a:a3:
         ee:02:15:20:02:ad:1c:58:58:71:90:a0:8d:cd:a2:29:e9:7c:
         e5:26:8e:52:28:df:40:4f:6a:e9:b0:01:d8:43:5d:59:a4:4c:
         76:fb:e8:5d:71:c6:34:bf:ed:bd:e0:87:78:29:fb:76:60:ac:
         0f:ac:73:5e:65:bb:25:8f:f9:fa:1f:77:42:af:04:a3:88:8a:
         0c:04:fc:37:60:3c:ba:35:58:2c:2a:34:97:49:72:b1:73:78:
         2c:88:ee:24:5a:8d:07:fa:ea:a9:5c:5c:59:9f:b7:d8:44:10:
         0e:9e:97:6c:ff:33:3b:34:ef:e0:78:a6:ac:e7:57:93:30:f9:
         bf:94:4e:02:33:78:9b:74:3b:0d:c5:80:ba:68:37:85:b9:8e:
         b3:de:35:cb:ad:8c:bf:9a:7b:d2:34:dd:30:f7:57:9e:e1:63:
         5d:b4:31:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----