Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/8-F44jJn_WvOKOB4EG5leuFtcPk.roa
File:                     8-F44jJn_WvOKOB4EG5leuFtcPk.roa (raw, json)
Hash identifier:          i54xuxrqEOOeEoGGoyegzj8k2it10SLdkG0z71hyyqk=
Subject key identifier:   F3:E1:78:E2:32:67:FD:6B:CE:28:E0:78:10:6E:65:7A:E1:6D:70:F9
Certificate issuer:       /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Certificate serial:       0CA2
Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/8-F44jJn_WvOKOB4EG5leuFtcPk.roa
Signing time:             Mon 16 Nov 2020 06:48:38 +0000
ROA not before:           Mon 16 Nov 2020 06:48:38 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18180
IP address blocks:        2404:178:36::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3234 (0xca2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
        Validity
            Not Before: Nov 16 06:48:38 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=F3E178E23267FD6BCE28E078106E657AE16D70F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:87:77:9a:12:7f:41:71:e7:81:bf:22:9d:71:
                    6b:3c:bb:e6:55:e5:ed:e2:a2:f1:4f:79:7b:9d:bd:
                    df:bb:ca:ad:1c:2d:c8:04:12:db:99:9c:04:6e:d4:
                    97:7e:3d:29:ef:f4:09:34:6d:c1:d7:4a:89:2e:2e:
                    77:81:e4:eb:b0:56:5a:e2:ba:af:cf:97:07:f6:b7:
                    9a:13:b9:3c:ed:3b:5b:1f:cc:45:a1:93:14:16:70:
                    0e:d2:85:33:9d:fa:13:77:43:6f:9a:22:39:c3:4c:
                    08:1b:56:ef:5c:24:f3:be:65:0c:77:ee:2c:d9:45:
                    21:68:4b:06:74:ef:58:0a:0f:ef:8a:f0:06:f4:da:
                    66:4c:12:45:5a:7d:de:24:5f:52:92:94:45:09:10:
                    28:3b:d2:aa:17:a4:30:61:ad:f4:71:0b:5d:11:34:
                    3b:fe:5d:56:54:10:32:90:54:e1:d7:3d:52:34:20:
                    09:10:fb:18:b8:e9:2e:d6:42:60:bf:f8:a7:7d:c5:
                    2d:7a:84:ac:05:da:af:7d:49:b9:b8:a0:8e:7d:89:
                    02:fd:fe:49:80:85:7f:7e:97:93:98:87:56:6a:30:
                    a1:10:a4:e3:b4:b5:9b:0b:b2:8c:62:19:bc:2f:54:
                    4d:7d:8a:ff:75:d3:7c:3c:58:9c:a9:e1:a5:29:69:
                    08:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:E1:78:E2:32:67:FD:6B:CE:28:E0:78:10:6E:65:7A:E1:6D:70:F9
            X509v3 Authority Key Identifier:
                keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/8-F44jJn_WvOKOB4EG5leuFtcPk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:178:36::/48

    Signature Algorithm: sha256WithRSAEncryption
         29:67:b7:f5:aa:f9:2a:9e:a2:39:88:61:24:09:98:45:9b:69:
         6b:28:6d:53:7d:1f:a2:13:ce:c1:72:2f:e2:4a:30:58:72:59:
         0e:45:c4:5f:91:7b:af:14:fa:f4:43:66:4d:22:1c:82:d3:5a:
         9a:51:53:e2:e3:8f:07:2f:a9:6a:b1:37:c0:c5:d0:b2:21:48:
         af:1b:6a:11:e1:b9:58:e2:69:b8:25:f6:1d:07:f4:ca:c5:16:
         02:2a:84:43:49:ef:23:ca:15:a5:f8:91:79:6a:8c:45:d1:dd:
         a4:83:91:a1:43:95:99:b2:00:7a:59:b2:b8:b3:d5:e5:90:5a:
         78:2b:2c:79:8c:c4:d4:a0:1f:06:78:04:d4:7e:69:7c:83:b3:
         ff:c4:5b:8d:e7:5c:3b:8a:6b:d9:ac:9a:a3:e9:ef:1e:42:e0:
         34:65:ca:e6:ac:f0:78:ce:09:b3:41:45:da:0d:3d:c1:c2:ab:
         2f:4a:bd:e6:c7:9b:35:df:b4:4c:ff:ee:a1:07:1e:0c:4b:51:
         af:85:89:2a:d7:16:4f:84:80:d3:e9:c0:75:a0:df:77:10:ae:
         88:19:70:f8:b2:13:dc:78:f6:21:bc:f2:f4:02:69:3f:36:b3:
         24:f0:d8:75:53:d9:3f:20:85:37:54:0d:7f:45:62:dc:6d:b6:
         f2:4c:b5:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----