Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/R6KYie_ohOf3_NYstY301qEAND8.roa
File:                     R6KYie_ohOf3_NYstY301qEAND8.roa (raw, json)
Hash identifier:          G3BJeobjpZcC76fAhtyNCWDnKLQy2S4T2/WuKXf4ilk=
Subject key identifier:   47:A2:98:89:EF:E8:84:E7:F7:FC:D6:2C:B5:8D:F4:D6:A1:00:34:3F
Certificate issuer:       /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Certificate serial:       0C80
Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/R6KYie_ohOf3_NYstY301qEAND8.roa
Signing time:             Mon 16 Nov 2020 06:13:12 +0000
ROA not before:           Mon 16 Nov 2020 06:13:12 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18180
IP address blocks:        2404:178:19::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3200 (0xc80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
        Validity
            Not Before: Nov 16 06:13:12 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=47A29889EFE884E7F7FCD62CB58DF4D6A100343F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4c:27:3c:a1:dc:d7:bb:0c:a5:b7:2d:52:8e:
                    80:22:57:e0:8b:08:c0:9e:bb:8b:05:1b:b2:86:5e:
                    17:09:00:82:24:5f:ea:80:35:73:6b:14:7a:d0:87:
                    68:16:11:9b:5a:cd:de:7b:b0:95:e1:2c:e7:f4:cf:
                    2e:fc:9e:6e:9a:a1:08:d3:66:b7:0c:2a:e5:d2:a9:
                    c9:75:21:54:0f:34:20:bc:97:a2:0e:ee:79:ec:45:
                    66:03:e6:44:8f:6e:6b:5d:39:fc:f0:1d:aa:db:7c:
                    3c:42:3c:9e:23:7b:96:df:5f:44:13:39:42:66:6f:
                    7e:89:c5:ab:70:1a:63:16:97:e8:1a:58:83:f2:1c:
                    f1:4b:1d:54:5d:db:65:d1:0b:d9:70:6e:b3:75:aa:
                    1f:f7:eb:af:be:8a:bc:8d:85:7e:60:ef:8c:b5:92:
                    cf:d7:59:d9:3e:56:e8:21:c9:ba:8a:1b:e7:34:3c:
                    f8:3e:bc:4d:71:68:01:6a:be:f4:80:00:3a:a9:f0:
                    3b:91:ef:86:a7:88:f2:c3:65:b1:17:6d:e2:0b:64:
                    00:9a:65:5f:c9:c9:ed:ee:eb:a9:fd:ba:97:87:02:
                    16:41:3f:fa:f0:45:6f:2a:5e:8e:21:6e:24:be:84:
                    4f:0b:50:74:5a:c9:e9:98:c5:9f:59:b2:a3:e0:43:
                    9e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:A2:98:89:EF:E8:84:E7:F7:FC:D6:2C:B5:8D:F4:D6:A1:00:34:3F
            X509v3 Authority Key Identifier:
                keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/R6KYie_ohOf3_NYstY301qEAND8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:178:19::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:48:3c:d3:08:ba:16:19:3d:6e:b2:73:1d:70:67:3d:89:c3:
         67:b5:b4:84:c6:d4:75:b1:cd:48:2a:ce:f1:e5:6d:4f:b2:06:
         50:d6:eb:98:ae:d5:fe:07:77:bf:2b:d4:70:54:d4:cd:ee:27:
         60:0f:c3:9b:38:33:d8:fc:a2:db:b8:86:34:2d:1b:84:ff:cf:
         96:1d:19:4c:bb:37:22:43:a2:bc:80:6f:58:fc:bc:27:cc:74:
         11:ff:b7:ea:2b:3f:1a:80:a4:21:78:7a:c0:96:51:16:95:b7:
         fe:a0:4c:b9:4d:66:c0:33:ca:c2:d1:76:a9:fb:ac:31:3a:c1:
         21:83:0c:ba:76:a6:82:bc:1b:81:84:6f:fc:18:c7:f7:e8:85:
         4b:e2:cc:7a:ab:6d:89:3e:be:d0:9a:a5:0c:3b:f4:8c:eb:32:
         28:39:53:64:06:7b:b7:80:35:ce:bf:45:63:b1:f9:d8:95:bd:
         1f:1d:1f:39:c6:d5:90:6e:27:93:fa:ae:30:a8:ea:b8:14:6c:
         f0:66:61:e0:fd:3a:d5:d0:2f:4e:a5:74:00:ae:57:e5:bc:ee:
         b3:21:85:14:db:a1:57:c1:8b:ef:d2:4a:54:f7:6b:c8:25:03:
         4d:4b:9d:28:8c:7a:86:6b:da:57:71:a3:21:35:68:51:98:5b:
         73:fb:07:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----