Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/D9njpyCCmDjocVQXVkJewsUrPkg.roa
File:                     D9njpyCCmDjocVQXVkJewsUrPkg.roa (raw, json)
Hash identifier:          s44tpvbyukH/lm58nXWXAAu8jaeqtgYyXwqXb/2rwT0=
Subject key identifier:   0F:D9:E3:A7:20:82:98:38:E8:71:54:17:56:42:5E:C2:C5:2B:3E:48
Certificate issuer:       /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Certificate serial:       0C74
Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/D9njpyCCmDjocVQXVkJewsUrPkg.roa
Signing time:             Mon 16 Nov 2020 06:12:14 +0000
ROA not before:           Mon 16 Nov 2020 06:12:14 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18180
IP address blocks:        2404:178:13::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3188 (0xc74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
        Validity
            Not Before: Nov 16 06:12:14 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=0FD9E3A720829838E871541756425EC2C52B3E48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f6:da:b2:55:cf:b3:6c:17:d4:02:c5:01:24:
                    87:f5:82:1f:0e:ec:7b:b7:c5:20:fa:3f:bc:74:95:
                    0e:eb:b0:4a:a4:e0:a3:fa:15:de:a3:8f:07:60:73:
                    76:bc:ec:9c:46:e2:2e:30:6e:56:f1:9a:f1:b8:59:
                    e8:0e:d8:bb:18:81:6c:89:1d:51:51:0e:f9:a0:dc:
                    ff:73:1b:32:d0:e0:f9:35:59:d4:2b:2b:ba:04:69:
                    ba:a4:4b:9f:74:7d:61:e8:62:10:df:67:60:2f:33:
                    df:98:c4:2a:94:74:8b:98:b9:f8:75:0b:da:db:fc:
                    e7:26:ac:6a:60:f5:d1:03:1c:88:30:51:70:6f:d2:
                    fe:db:65:58:e0:b2:c6:b2:ed:5b:7f:3a:92:03:dc:
                    be:76:7c:ae:a5:e3:19:e3:cf:6e:ad:7c:df:d0:9f:
                    bf:6f:73:8c:00:96:82:59:b5:51:c5:82:b2:4f:d6:
                    bf:57:fc:0a:d9:f3:cd:92:bf:15:87:8d:e5:bc:02:
                    89:1a:f2:ca:25:f3:1b:91:40:dc:1a:ea:04:8d:04:
                    2f:4e:03:f2:b2:8d:33:a8:27:44:05:b4:06:4b:f0:
                    d4:61:30:06:25:be:1a:c5:55:f8:1c:69:c1:f6:90:
                    94:7a:ee:dc:9a:a3:2d:e4:60:10:39:46:ee:9d:ec:
                    c2:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:D9:E3:A7:20:82:98:38:E8:71:54:17:56:42:5E:C2:C5:2B:3E:48
            X509v3 Authority Key Identifier:
                keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/D9njpyCCmDjocVQXVkJewsUrPkg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:178:13::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:cb:f3:d9:ef:10:be:58:58:68:a5:9a:cf:d1:91:f1:a3:f3:
         cd:c0:67:18:ce:43:32:ad:86:ae:9f:95:ed:d7:7c:50:d9:4c:
         21:1e:76:62:66:c7:aa:d7:c0:41:10:0c:41:48:aa:3c:46:9f:
         09:56:79:d1:c1:ce:53:5b:6c:ac:7f:09:af:3b:4b:23:c2:83:
         2a:4e:d2:55:23:58:ad:1d:48:68:18:7c:a4:fe:c4:93:e2:df:
         6d:38:a7:cc:88:99:84:f2:2e:1e:bb:22:62:c9:19:81:d3:0d:
         3a:7f:74:45:62:b0:49:33:3e:0a:87:6c:e6:c9:f9:2c:ec:da:
         ad:c1:8e:45:20:50:c0:70:ef:ff:0d:38:f6:b2:86:f7:f1:d0:
         8b:be:f9:93:4f:17:90:d0:67:d8:8c:46:e5:44:b2:18:d4:8a:
         e4:41:38:06:3d:d4:13:da:eb:71:15:bf:2b:d7:74:8f:13:32:
         1d:87:01:45:ef:5d:14:d1:7c:ae:d6:84:22:96:ac:1b:26:09:
         1e:36:26:e7:4e:7a:88:f7:9f:0b:42:99:4d:f6:b9:b9:89:17:
         d5:01:9b:aa:71:60:58:db:3f:cd:97:6b:2e:f5:e0:b2:bd:c9:
         77:24:a4:66:bc:12:ef:37:cb:76:95:c2:3a:70:c4:fc:38:2a:
         93:14:a2:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----