Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/ROd-tR79NBUSWgPECRc6SrnsF5c.roa
File:                     ROd-tR79NBUSWgPECRc6SrnsF5c.roa (raw, json)
Hash identifier:          dvyzikKKSa7eLu+n5+XHreUHQTeumxsJCAQTpTDfyJc=
Subject key identifier:   44:E7:7E:B5:1E:FD:34:15:12:5A:03:C4:09:17:3A:4A:B9:EC:17:97
Certificate issuer:       /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Certificate serial:       0CBC
Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/ROd-tR79NBUSWgPECRc6SrnsF5c.roa
Signing time:             Mon 16 Nov 2020 06:50:58 +0000
ROA not before:           Mon 16 Nov 2020 06:50:58 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18180
IP address blocks:        2404:178:49::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3260 (0xcbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
        Validity
            Not Before: Nov 16 06:50:58 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=44E77EB51EFD3415125A03C409173A4AB9EC1797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c5:eb:f6:cd:d6:8c:78:fa:81:fb:e2:62:bc:
                    d5:1f:a8:da:84:f9:6c:58:48:df:90:b3:f3:42:71:
                    bd:0d:65:76:5c:b0:6a:99:c8:0d:64:58:62:ed:69:
                    a4:a7:35:b8:ca:f2:e5:3f:de:ed:9d:79:7b:61:67:
                    32:6b:ac:23:77:9a:86:53:a1:e8:77:fb:89:75:9c:
                    de:b8:37:85:1c:66:d8:77:06:c9:df:fc:cb:c2:63:
                    fa:d5:a0:fa:55:d2:8a:da:19:fb:e1:22:d8:fb:9e:
                    a9:eb:b6:44:a7:08:ba:5e:fd:f6:32:c4:40:e0:3c:
                    5a:61:b9:10:4d:34:24:b8:06:76:9c:fa:b1:09:8e:
                    33:6d:95:10:00:bc:6a:8c:84:29:39:ed:b0:8e:56:
                    8d:bf:33:7e:97:c2:95:f2:b4:d2:90:10:f4:2e:62:
                    fb:b8:37:83:f6:04:d1:5d:e5:40:f0:09:55:a0:0f:
                    71:5a:27:d4:1c:92:bd:2a:a5:0a:1f:b7:ef:c4:33:
                    e9:80:40:f5:b8:48:0e:7e:ba:de:e6:c7:94:19:78:
                    1f:07:0a:53:cc:a0:ce:be:a3:f9:69:64:21:7b:37:
                    31:bc:75:8b:d3:29:c6:f6:bc:43:9b:be:01:f4:e4:
                    ae:de:e1:a4:f9:e7:06:b9:32:53:00:1c:99:b4:d3:
                    d8:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:E7:7E:B5:1E:FD:34:15:12:5A:03:C4:09:17:3A:4A:B9:EC:17:97
            X509v3 Authority Key Identifier:
                keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/ROd-tR79NBUSWgPECRc6SrnsF5c.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:178:49::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:aa:ed:0b:e4:6d:12:0f:87:42:e2:3d:f7:e7:ad:ba:d4:ca:
         1e:48:3c:c5:0a:3f:10:b5:3e:9e:06:60:b9:5a:30:8e:c5:6c:
         bc:99:55:49:9b:c0:67:5f:1b:f7:d3:f1:c3:00:e1:3c:a5:a1:
         70:42:5c:54:23:24:7a:0b:8c:18:13:ca:a9:84:d2:81:08:89:
         1c:38:50:27:58:bf:56:44:99:64:95:bc:2a:eb:22:13:d3:f1:
         cb:97:6b:76:01:72:df:cf:9a:cf:43:9f:83:6a:c0:93:96:f5:
         e4:bf:37:21:ea:f1:37:01:45:91:13:cb:7c:29:27:e0:fc:29:
         49:e8:88:08:34:71:86:53:62:e9:db:29:8a:b7:4b:76:78:19:
         39:a5:c8:d9:f6:16:e1:d4:70:78:cf:15:21:6c:0a:cf:98:6e:
         2b:ab:3d:71:f1:ab:78:46:8b:eb:73:e6:96:1d:9c:2a:f1:22:
         0c:cf:36:39:10:a5:f2:2f:60:1c:08:b1:9b:54:02:c9:7b:39:
         76:75:15:38:6f:5d:5b:28:d4:a3:0f:8e:8f:31:0f:b4:42:5f:
         05:95:81:77:36:a8:2d:93:90:88:dd:ab:5d:14:56:8e:a1:d4:
         f9:33:12:e7:cf:e9:88:6c:fe:fd:7a:5c:d3:a4:21:5f:a0:7d:
         a6:cd:fc:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----