Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/6-n9XaWHOBFWTXbS4WGpgIN36gA.roa
File:                     6-n9XaWHOBFWTXbS4WGpgIN36gA.roa (raw, json)
Hash identifier:          QT5PUjL/MXrderO8527cQSw/nPHMjZ/L35nGSUyyg4w=
Subject key identifier:   EB:E9:FD:5D:A5:87:38:11:56:4D:76:D2:E1:61:A9:80:83:77:EA:00
Certificate issuer:       /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Certificate serial:       0DD3
Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/6-n9XaWHOBFWTXbS4WGpgIN36gA.roa
Signing time:             Mon 23 Nov 2020 07:23:55 +0000
ROA not before:           Mon 23 Nov 2020 07:23:55 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18180
IP address blocks:        2404:178:15::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3539 (0xdd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
        Validity
            Not Before: Nov 23 07:23:55 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=EBE9FD5DA5873811564D76D2E161A9808377EA00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:4f:ea:bf:08:6f:a2:84:4b:89:14:4d:ca:f9:
                    e0:e5:e4:bc:dd:a5:bf:97:60:02:94:3c:c1:5c:d8:
                    bb:15:c7:32:3e:17:d1:37:7f:5d:57:30:8c:48:a6:
                    8c:66:cd:e7:11:39:b1:75:94:09:f3:06:4a:71:ad:
                    17:47:5d:18:22:86:7d:42:23:72:02:61:da:c3:52:
                    eb:42:7e:d0:4d:1e:7f:20:c7:e0:d0:58:58:12:6d:
                    12:34:e3:60:fe:b1:36:da:d1:b1:84:a8:89:9f:5b:
                    55:a5:a0:87:0a:c0:4c:cc:be:80:4c:ab:b5:85:62:
                    47:7a:db:57:a7:6b:7c:99:dd:4a:92:09:8e:55:69:
                    62:1a:cc:54:f2:33:a0:0f:f5:e7:d1:02:f0:f8:6d:
                    4d:fa:30:57:bd:1b:f1:e1:ca:a3:7a:37:ae:41:4a:
                    49:e3:62:d8:91:5a:b1:2a:37:05:b1:99:79:38:d4:
                    5a:ef:31:8a:92:62:35:e5:9b:bf:98:1a:8c:b4:e8:
                    16:8c:04:14:25:de:80:89:4d:b3:05:eb:83:c2:d4:
                    87:72:a9:f8:6d:ff:4f:dc:93:54:63:ec:c4:3e:7e:
                    ae:07:70:a6:44:f1:2e:d0:58:a2:59:a4:94:c2:6d:
                    70:36:cd:09:94:c9:0c:72:f7:13:99:58:28:bc:5e:
                    8a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:E9:FD:5D:A5:87:38:11:56:4D:76:D2:E1:61:A9:80:83:77:EA:00
            X509v3 Authority Key Identifier:
                keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/6-n9XaWHOBFWTXbS4WGpgIN36gA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:178:15::/48

    Signature Algorithm: sha256WithRSAEncryption
         55:e2:a8:fc:87:79:8c:e5:88:a8:e7:30:45:57:37:f4:c8:1b:
         11:83:4e:59:8b:06:a7:a5:ac:16:7c:2a:af:9b:ef:e2:b0:66:
         e8:e2:2e:98:a9:8a:96:ea:93:4d:1f:0d:04:05:0d:eb:4c:63:
         61:9f:d6:99:97:49:90:d2:b6:a5:b7:38:83:24:1d:d4:b7:77:
         38:98:df:cf:b6:65:0f:1a:27:33:a9:90:c6:69:ad:62:8f:ba:
         7f:34:3a:a9:91:f6:51:3d:19:27:f1:db:eb:62:c0:70:c6:8a:
         ae:fa:78:92:ee:90:ad:34:9a:e4:26:f4:82:ae:70:d7:85:a0:
         e7:71:39:ba:43:71:05:03:56:05:28:f6:c7:10:a0:f0:7d:aa:
         83:f8:9f:45:ac:e4:23:25:a2:97:95:66:6b:29:ea:ff:c7:02:
         0b:b4:35:28:2e:31:46:67:4c:57:dc:35:9b:34:f1:f4:df:24:
         2f:6f:f0:4a:c3:c0:00:c8:97:06:c2:23:03:66:6b:99:76:60:
         67:92:f8:1b:16:fe:2d:ee:98:47:d8:6a:e0:b1:f8:f1:a2:4f:
         2f:83:79:e8:a7:41:3f:89:13:2c:10:a7:52:bd:97:be:69:84:
         64:cb:c4:01:27:16:4d:c5:c3:b4:dc:96:27:92:3b:87:e4:70:
         19:87:fd:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----