Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ULC/j4pKHRbzaHWTh7CReT0lA2JWwfg.roa
File:                     j4pKHRbzaHWTh7CReT0lA2JWwfg.roa (raw, json)
Hash identifier:          LEtMP9WxgsAE7oXrARHTfb+RWhg3Bi7egbSCvS9bcEk=
Subject key identifier:   8F:8A:4A:1D:16:F3:68:75:93:87:B0:91:79:3D:25:03:62:56:C1:F8
Certificate issuer:       /CN=BFBB7F7B5C58323490875849B8EDDA495EF17B1B
Certificate serial:       2C
Authority key identifier: BF:BB:7F:7B:5C:58:32:34:90:87:58:49:B8:ED:DA:49:5E:F1:7B:1B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/v7t_e1xYMjSQh1hJuO3aSV7xexs.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ULC/j4pKHRbzaHWTh7CReT0lA2JWwfg.roa
Signing time:             Tue 20 Oct 2020 04:15:56 +0000
ROA not before:           Tue 20 Oct 2020 04:15:56 +0000
ROA not after:            Sat 16 Oct 2021 04:29:56 +0000
asID:                     18178
IP address blocks:        2406:9740::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BFBB7F7B5C58323490875849B8EDDA495EF17B1B
        Validity
            Not Before: Oct 20 04:15:56 2020 GMT
            Not After : Oct 16 04:29:56 2021 GMT
        Subject: CN=8F8A4A1D16F368759387B091793D25036256C1F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:86:68:ba:4c:03:ab:75:7a:0c:28:c6:90:1d:
                    85:96:a7:a8:75:a4:75:fa:56:6f:b7:96:82:9b:55:
                    bf:18:fa:46:7f:27:64:ad:91:85:80:09:05:45:de:
                    53:93:4b:e8:06:81:32:cc:8b:04:28:c9:c8:76:5e:
                    38:db:93:84:ba:e5:3e:4a:c7:7b:7d:75:78:03:a9:
                    30:7b:4c:8c:09:9d:df:37:0a:53:fa:fa:3c:28:31:
                    15:79:d5:75:89:6e:a4:43:0e:b9:d7:a9:46:ce:95:
                    57:43:82:e2:eb:c9:dc:28:b7:5e:c1:f3:53:bf:cf:
                    94:b2:f9:15:22:73:c2:c3:14:76:65:d4:75:3a:74:
                    9a:68:b2:bc:df:94:43:35:68:63:ff:6d:de:15:5c:
                    93:30:b1:d7:2f:21:df:84:33:48:a4:8c:61:4a:30:
                    06:36:c4:38:df:1a:93:0e:a3:b5:88:e4:4a:19:f2:
                    9a:9e:b6:0e:b7:22:10:15:4b:15:21:39:8d:bf:60:
                    d3:c4:aa:d9:b5:c5:4d:70:b4:95:c7:82:82:32:43:
                    d5:63:aa:fa:04:49:b2:ef:03:b4:a7:18:8f:d9:14:
                    82:54:e9:01:37:21:65:f0:ec:8c:87:48:d7:13:22:
                    57:9f:bd:7c:7c:67:bc:1a:04:1f:59:a8:e2:6a:1d:
                    54:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:8A:4A:1D:16:F3:68:75:93:87:B0:91:79:3D:25:03:62:56:C1:F8
            X509v3 Authority Key Identifier:
                keyid:BF:BB:7F:7B:5C:58:32:34:90:87:58:49:B8:ED:DA:49:5E:F1:7B:1B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ULC/v7t_e1xYMjSQh1hJuO3aSV7xexs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/v7t_e1xYMjSQh1hJuO3aSV7xexs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ULC/j4pKHRbzaHWTh7CReT0lA2JWwfg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:9740::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:ea:b7:ef:70:63:79:3f:55:8a:ae:63:85:c1:1c:cb:14:75:
         cc:b6:7d:73:35:fe:a8:81:a4:75:8a:6c:24:50:27:c8:a2:ed:
         e7:a6:44:c0:2b:7d:21:8b:26:6d:c1:e4:6f:ed:36:32:4e:d9:
         da:db:88:60:94:a8:38:6a:06:25:9a:8e:09:dd:00:28:94:76:
         3b:85:a6:3d:10:9e:76:38:92:cd:b4:1a:48:5c:b3:77:d9:5a:
         cc:57:e7:87:00:c6:58:ca:89:10:e2:41:4b:29:f4:fc:bf:29:
         42:16:a0:f7:57:ad:a8:34:3f:32:d5:99:9a:c6:1b:f4:8a:9e:
         2a:9e:8f:82:a5:e0:3d:ba:68:5f:1c:72:9e:02:c9:48:0e:dd:
         0a:36:68:09:41:65:ca:53:9a:49:a8:89:77:ad:ee:10:4b:60:
         e5:c0:1a:ff:c7:60:ef:fd:ea:0d:cb:85:d6:6f:c2:bc:68:5c:
         8f:ac:ed:68:cb:ac:f6:18:4e:9d:07:1a:53:2b:02:72:c6:7a:
         39:8b:97:ce:3e:a3:d8:20:1c:94:97:dc:26:93:c0:86:15:40:
         9e:01:ea:82:ca:87:29:81:ca:19:c8:da:5e:be:dc:56:a7:79:
         c0:29:d3:53:55:d6:d8:b1:09:1e:9e:03:ff:ed:c2:6f:69:12:
         98:26:7d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----