Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNTT/WBUs6_621AEtK4NTMorlRKR_JoA.roa
File:                     WBUs6_621AEtK4NTMorlRKR_JoA.roa (raw, json)
Hash identifier:          5Y8vjShiQ1L9Mu1tPneisUSAZRy5FgGnXBA7BDtzFA8=
Subject key identifier:   58:15:2C:EB:FE:B6:D4:01:2D:2B:83:53:32:8A:E5:44:A4:7F:26:80
Certificate issuer:       /CN=9E2697FA70252F83F41D121EC0B5CB458B6FF214
Certificate serial:       08C9
Authority key identifier: 9E:26:97:FA:70:25:2F:83:F4:1D:12:1E:C0:B5:CB:45:8B:6F:F2:14
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/WBUs6_621AEtK4NTMorlRKR_JoA.roa
Signing time:             Sun 07 Feb 2021 13:07:51 +0000
ROA not before:           Sun 07 Feb 2021 13:07:51 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     2914
IP address blocks:        61.58.32.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2249 (0x8c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E2697FA70252F83F41D121EC0B5CB458B6FF214
        Validity
            Not Before: Feb  7 13:07:51 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=58152CEBFEB6D4012D2B8353328AE544A47F2680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:03:e5:22:1a:ce:0b:a2:f7:38:55:e9:56:c8:
                    dc:51:7a:d0:35:5e:d1:82:00:2e:5e:14:97:03:49:
                    9a:84:8d:8a:98:d9:f1:14:59:74:05:be:cc:87:2d:
                    0b:3c:ea:f9:b8:65:85:e4:a1:75:97:96:de:5a:79:
                    6b:3d:8a:e0:af:87:32:9b:32:88:30:52:bd:45:49:
                    48:76:4b:e8:07:f8:9d:42:e6:5a:27:59:c5:09:3f:
                    40:46:7e:6b:f9:a8:73:59:cf:70:43:13:a0:a6:ee:
                    03:aa:b8:06:12:4c:a5:81:da:6a:ef:34:1a:81:ed:
                    89:f9:96:7c:79:74:c8:c2:6c:de:db:85:7f:d0:71:
                    30:90:3f:20:d1:26:fe:cb:ab:57:79:24:a8:79:51:
                    0a:33:86:f6:0e:e9:74:e6:fa:94:4f:5f:7e:08:90:
                    8e:53:98:31:38:60:f7:cc:66:35:aa:fd:33:00:d4:
                    af:5a:75:1f:d0:8b:4b:49:00:91:e1:3a:f6:2f:e3:
                    4e:17:d0:0e:e8:fb:2e:16:3d:6d:ee:88:b4:0d:b0:
                    a8:77:e5:36:c1:46:aa:93:55:7e:aa:55:a7:5c:fc:
                    31:44:74:53:a8:6c:ba:09:be:eb:e5:86:5b:0a:07:
                    fc:c4:ed:8d:03:8a:d9:81:92:01:61:de:c3:3b:8c:
                    b4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:15:2C:EB:FE:B6:D4:01:2D:2B:83:53:32:8A:E5:44:A4:7F:26:80
            X509v3 Authority Key Identifier:
                keyid:9E:26:97:FA:70:25:2F:83:F4:1D:12:1E:C0:B5:CB:45:8B:6F:F2:14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/niaX-nAlL4P0HRIewLXLRYtv8hQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/WBUs6_621AEtK4NTMorlRKR_JoA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.58.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         46:8f:e3:05:7a:57:7b:57:bb:fe:22:27:9a:6b:f9:a4:e5:b2:
         41:ab:06:e7:5c:2d:09:4f:cf:98:a0:49:ee:ed:59:53:f3:39:
         bb:b5:d2:a0:cc:df:d6:b1:25:41:f4:9d:5f:4f:78:ed:ad:08:
         ea:35:26:aa:a3:ea:69:5f:55:25:f3:49:be:aa:15:4f:08:5a:
         e4:26:c1:ae:9c:9a:48:3b:c0:fb:bf:c4:66:cd:30:23:46:f4:
         ae:09:cc:84:a8:6d:03:71:0c:7c:2d:b0:73:1c:03:23:75:87:
         91:3a:7e:27:67:dc:e0:8d:bd:bd:55:ce:5e:7e:9f:06:29:bb:
         5c:a5:9b:78:69:4b:60:7b:d3:f6:b9:3b:41:3b:68:b8:a1:7f:
         bc:f0:cd:ac:37:92:bf:d7:19:37:6a:f8:e9:1b:1d:a0:52:e6:
         b1:20:30:a9:ba:b7:61:04:29:a0:9e:dd:35:30:12:59:8c:fb:
         8f:8a:14:4c:9d:0f:74:c4:57:25:6b:a1:fb:81:4c:8a:ba:48:
         c2:35:9c:1c:09:3f:59:fe:5e:69:d8:c3:ce:d5:35:78:fd:35:
         b9:52:20:17:8d:30:8d:17:80:8a:ea:b3:85:15:23:1a:52:65:
         18:8b:f4:2a:9b:b7:f8:b6:1e:d9:5d:61:1d:7e:a8:71:13:ef:
         07:cb:50:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----