Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/w1MH9szR5Ls-UdbyfYRSVtttrC8.roa
File:                     w1MH9szR5Ls-UdbyfYRSVtttrC8.roa (raw, json)
Hash identifier:          oIPoanGHkeI0tcki0Ovrim8udztDJkPlpavvgWpF8aM=
Subject key identifier:   C3:53:07:F6:CC:D1:E4:BB:3E:51:D6:F2:7D:84:52:56:DB:6D:AC:2F
Certificate issuer:       /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Certificate serial:       0CB4
Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/w1MH9szR5Ls-UdbyfYRSVtttrC8.roa
Signing time:             Mon 16 Nov 2020 06:50:17 +0000
ROA not before:           Mon 16 Nov 2020 06:50:17 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18180
IP address blocks:        2404:178:45::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3252 (0xcb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
        Validity
            Not Before: Nov 16 06:50:17 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=C35307F6CCD1E4BB3E51D6F27D845256DB6DAC2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:f4:a0:8e:06:59:79:a4:24:e1:d0:9e:22:9d:
                    98:2d:37:05:4b:8d:93:3b:83:9d:f0:de:57:bf:85:
                    41:ae:4d:d3:4e:ab:4b:b3:4e:1c:ed:e7:3c:72:e2:
                    66:dc:cb:e8:9c:bf:2b:de:54:f4:5b:a2:c1:40:9e:
                    a3:03:53:fa:5a:c5:83:d6:06:94:71:9b:da:42:94:
                    cc:21:11:6b:ce:02:2b:19:c9:fe:e6:1c:36:39:3e:
                    29:30:7e:20:52:1c:07:af:0d:b1:de:2e:be:ea:02:
                    36:f0:5a:79:f9:ff:b5:cd:75:6b:9e:08:c7:66:cc:
                    53:a8:73:61:60:0c:f0:77:74:8d:e3:6a:37:c3:fe:
                    07:0c:fd:0c:5a:a5:bb:bf:16:d9:6f:85:29:52:66:
                    32:5b:73:a5:79:a8:dc:62:2b:3b:46:1b:f1:e7:c4:
                    12:20:9b:e8:a2:a0:76:18:8a:9b:fe:c8:57:60:ef:
                    fc:a4:1b:5f:e4:66:39:43:6a:60:7e:50:f7:c5:7f:
                    2c:62:79:f0:d9:29:a5:53:ca:9e:05:d8:28:59:1a:
                    23:71:1b:5c:60:5a:b2:e1:a0:30:a2:4f:1f:c7:3a:
                    d1:ac:8b:d2:40:da:b8:7e:91:10:62:e1:dd:1c:c5:
                    1b:2f:ae:7c:1d:6e:2f:4d:08:bb:24:73:9c:91:a3:
                    7c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:53:07:F6:CC:D1:E4:BB:3E:51:D6:F2:7D:84:52:56:DB:6D:AC:2F
            X509v3 Authority Key Identifier:
                keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/w1MH9szR5Ls-UdbyfYRSVtttrC8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:178:45::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:32:20:52:d3:ad:23:5d:4c:52:29:2d:ca:14:3a:93:33:49:
         0d:55:4b:5c:a1:5b:03:53:d6:ef:ae:c8:a0:e2:dc:af:11:43:
         30:a0:1b:ea:97:10:40:e1:2a:08:83:94:be:2e:9f:8f:c8:c9:
         3e:c3:90:96:b1:b2:1e:2c:f0:67:fe:cc:53:0b:19:af:f9:35:
         b5:16:b3:d6:3e:a3:70:58:ba:6b:fc:5f:7b:82:7e:4f:dd:5a:
         30:03:40:7b:27:71:34:25:38:80:f1:89:b5:79:9c:b0:13:10:
         bf:c8:cc:d0:73:65:34:99:a9:69:a8:04:6b:fa:52:d8:fc:ad:
         86:f6:7e:24:5e:1a:4b:b2:4b:d2:be:ab:55:82:d7:0e:c5:c1:
         cf:4e:37:43:e8:8f:0e:05:fd:3f:c9:97:4c:bc:80:55:1d:c9:
         2f:e9:8c:f9:b1:4d:0a:1f:e9:6d:f1:83:68:83:86:4b:7e:d3:
         7d:ec:2e:01:00:05:c1:ff:13:dd:e9:28:6d:dc:8f:f5:37:0f:
         87:2b:c8:5e:47:df:b8:52:ed:a4:f9:ef:88:f4:8c:29:dd:95:
         5c:dd:58:38:60:78:62:0a:76:31:fb:5b:ac:6d:41:e7:a4:73:
         52:9c:81:5a:0c:72:a5:4d:1f:3e:a7:54:32:41:97:63:a1:85:
         ed:d7:ea:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----