Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/kBpqYpISTVQZcpW9ISb5HSks-Rs.roa
File:                     kBpqYpISTVQZcpW9ISb5HSks-Rs.roa (raw, json)
Hash identifier:          azt5J8vVvfRd4Ym2s+zP5iOBt8WHv1WKYpaYFyhK6SM=
Subject key identifier:   90:1A:6A:62:92:12:4D:54:19:72:95:BD:21:26:F9:1D:29:2C:F9:1B
Certificate issuer:       /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Certificate serial:       0CB8
Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/kBpqYpISTVQZcpW9ISb5HSks-Rs.roa
Signing time:             Mon 16 Nov 2020 06:50:38 +0000
ROA not before:           Mon 16 Nov 2020 06:50:38 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18180
IP address blocks:        2404:178:47::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3256 (0xcb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
        Validity
            Not Before: Nov 16 06:50:38 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=901A6A6292124D54197295BD2126F91D292CF91B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:58:ed:12:6b:ec:ba:da:66:62:37:0c:db:cc:
                    26:a2:14:0d:4d:e1:e6:00:62:11:91:c4:25:ab:2b:
                    f5:18:23:b9:5f:70:bd:85:c6:10:7e:12:90:50:cd:
                    b8:1c:06:12:ab:07:bb:c1:38:24:47:84:00:ac:0b:
                    43:d3:af:09:06:90:01:61:7d:95:a4:6c:b5:7f:3a:
                    73:b1:e5:c9:e4:f8:d3:d1:79:5a:55:7f:7a:93:8f:
                    43:6a:19:69:c6:f3:41:fd:49:69:b9:59:0b:cc:d6:
                    9b:7e:a4:11:46:5c:26:1b:86:2d:b5:9c:f1:05:7a:
                    9b:40:a5:f7:0b:ff:5b:5a:00:17:fe:30:2b:5f:4f:
                    06:d8:74:82:04:bb:fb:e6:4f:7d:f9:e6:22:4e:98:
                    61:d2:12:f7:96:95:b5:83:b2:e9:f6:94:2f:89:a9:
                    19:33:42:f9:3c:fe:43:64:f0:d3:0d:d4:02:92:88:
                    94:61:9c:95:24:43:6d:12:bb:9d:86:7d:70:5b:e3:
                    7e:4e:55:16:89:3d:a1:22:d4:b0:6f:6f:c9:28:7d:
                    db:ea:71:ee:28:db:33:a0:24:6f:31:67:43:ff:48:
                    38:54:7b:bb:80:48:d7:67:39:b3:fc:c7:cb:ac:cd:
                    c0:da:a6:8c:13:f8:1c:8d:fc:8b:d2:06:86:0e:80:
                    47:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:1A:6A:62:92:12:4D:54:19:72:95:BD:21:26:F9:1D:29:2C:F9:1B
            X509v3 Authority Key Identifier:
                keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/kBpqYpISTVQZcpW9ISb5HSks-Rs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:178:47::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:c7:e1:62:44:23:69:e8:51:7b:5e:43:a3:6d:ec:27:3d:9b:
         9e:0e:fe:3a:33:46:f0:9e:b4:f8:e9:53:cf:72:61:72:4b:f7:
         6d:7a:72:76:8d:f1:e7:01:e5:7d:ec:1c:c8:db:7b:9e:89:ac:
         bb:c8:7f:47:56:27:e5:36:04:bd:d5:4a:2b:8b:3e:73:50:4d:
         b5:38:f6:22:64:e1:5f:05:66:a1:28:c8:ca:7e:e6:4f:cd:95:
         f2:58:ad:8c:de:fd:c8:5f:bf:a1:a3:2e:cf:cb:4c:26:cc:95:
         98:78:02:79:e2:73:03:0d:4e:0e:f9:38:b6:43:32:4b:01:82:
         ad:66:a5:86:b2:30:2b:03:ba:98:b3:bf:bf:0c:2d:20:d8:4b:
         78:14:0b:73:90:6d:58:8c:6f:3f:0b:21:30:ba:da:7d:16:5d:
         0d:2f:63:8d:77:a3:59:ab:c9:51:f0:2e:e1:58:4b:b6:1b:d7:
         30:b5:57:7c:44:cd:fb:5c:14:76:1b:f5:b0:a9:32:68:56:53:
         9d:60:c2:36:8d:71:c1:21:d7:c0:58:40:f0:90:04:9a:62:d6:
         d6:18:11:ea:aa:eb:ef:4d:2f:dd:60:3c:3e:d6:9c:fd:18:7b:
         c5:58:99:f9:38:a5:80:56:c4:9d:43:b4:15:dc:55:45:28:9f:
         ca:55:ba:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----