Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/gxjaRSN2NC3r44E2MQj6rKIXJr8.roa
File:                     gxjaRSN2NC3r44E2MQj6rKIXJr8.roa (raw, json)
Hash identifier:          0YR7EyKRUIhMpt+5vM5Nyfzr4Sig5tNFoSrNK+Tu3Ag=
Subject key identifier:   83:18:DA:45:23:76:34:2D:EB:E3:81:36:31:08:FA:AC:A2:17:26:BF
Certificate issuer:       /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Certificate serial:       07A0
Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/gxjaRSN2NC3r44E2MQj6rKIXJr8.roa
Signing time:             Tue 29 Sep 2020 10:07:17 +0000
ROA not before:           Tue 29 Sep 2020 10:07:17 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9311
IP address blocks:        203.119.94.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1952 (0x7a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
        Validity
            Not Before: Sep 29 10:07:17 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=8318DA452376342DEBE381363108FAACA21726BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b6:27:c5:c0:cc:ad:53:f4:5e:7f:6e:47:34:
                    bd:c4:6e:93:0a:9e:d9:8a:05:96:ea:b7:b8:da:52:
                    c3:82:79:d5:8d:a0:76:73:a0:1a:e7:1e:77:84:e4:
                    04:62:03:d5:98:52:5b:d6:8a:24:b9:1a:fb:1e:a3:
                    39:01:d5:1e:f9:96:81:28:e8:b4:47:40:27:e6:e4:
                    0c:69:bb:54:ac:99:ae:9c:78:17:67:5c:f1:eb:44:
                    19:f5:8e:f6:1a:8f:31:6e:1f:89:2e:3e:06:c5:c4:
                    86:0a:d0:58:e4:50:10:48:a7:2b:9d:b1:5e:22:31:
                    ce:25:f9:00:28:05:da:bf:46:4f:4c:be:ac:c3:4f:
                    1d:69:5f:c5:e5:96:1b:4a:b0:33:ea:bf:68:e3:b5:
                    06:21:b1:1b:94:56:cd:16:b7:13:36:82:d5:48:31:
                    ed:40:94:52:bb:6d:a8:b3:aa:d1:50:d8:8c:fa:a0:
                    4b:65:b1:48:1d:9d:83:89:bd:e0:42:4a:f1:b8:5b:
                    8a:5e:d2:ef:81:30:64:e1:f0:bb:24:09:65:51:7c:
                    36:ef:96:72:15:90:6c:73:3e:7b:d2:01:61:e1:70:
                    e5:7c:f0:8d:ef:ae:1c:7d:1b:16:17:84:7a:36:ee:
                    17:5d:3c:ba:7a:92:7f:90:c5:6d:c5:a9:96:ef:e8:
                    5a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:18:DA:45:23:76:34:2D:EB:E3:81:36:31:08:FA:AC:A2:17:26:BF
            X509v3 Authority Key Identifier:
                keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/gxjaRSN2NC3r44E2MQj6rKIXJr8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.119.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:8d:5f:49:d6:20:01:08:1d:5d:76:c1:65:e4:e3:ef:49:72:
         c7:f0:c5:8e:e9:b6:11:d0:09:b7:67:02:a6:e1:44:3e:2f:c1:
         2a:15:35:7a:fb:5f:66:c9:35:cb:7e:4d:a1:63:52:2a:77:cb:
         29:c0:79:40:80:32:a8:5f:0d:89:26:9d:96:5f:0d:85:41:70:
         85:08:8d:8c:3b:ee:7b:1e:ca:7c:35:4e:7c:5a:1b:0d:ad:26:
         e9:6a:62:25:1f:ca:76:9c:96:16:9e:c7:cd:28:f4:63:18:ca:
         76:3f:36:cd:79:8a:fb:66:ee:a2:46:63:f0:be:63:37:e3:fd:
         37:39:ea:c0:20:b4:e3:93:c6:b6:f0:ed:f2:95:54:c2:03:6a:
         f9:18:a1:6d:1e:5e:aa:08:51:ad:ee:7f:de:80:fa:45:4f:98:
         c7:f4:7d:03:1e:16:74:a9:9e:d4:75:9c:70:8f:af:b6:3b:41:
         c4:d1:3a:c1:fc:bf:b8:06:38:58:10:33:3a:4a:71:30:83:bf:
         cc:7f:bf:d7:d9:49:50:38:dd:6a:a5:72:3d:b4:79:0b:43:95:
         ed:fe:91:2e:29:39:25:eb:35:68:1b:1b:25:a4:0b:de:af:3f:
         9c:61:c2:72:c4:40:e7:d0:eb:b4:45:58:9d:44:32:59:e4:97:
         6e:65:bc:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----