Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/ZowPEr9LjNpA5I3eKz9Py2Kf4H0.roa
File:                     ZowPEr9LjNpA5I3eKz9Py2Kf4H0.roa (raw, json)
Hash identifier:          jyh1uAnR2eJfgkF9FaVYCQQu786V28sN+IaLEiDdiYM=
Subject key identifier:   66:8C:0F:12:BF:4B:8C:DA:40:E4:8D:DE:2B:3F:4F:CB:62:9F:E0:7D
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0908
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/ZowPEr9LjNpA5I3eKz9Py2Kf4H0.roa
Signing time:             Wed 27 Jan 2021 04:56:16 +0000
ROA not before:           Wed 27 Jan 2021 04:56:16 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18424
IP address blocks:        2405:8700:ffff:ffff::/64 maxlen: 64

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2312 (0x908)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Jan 27 04:56:16 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=668C0F12BF4B8CDA40E48DDE2B3F4FCB629FE07D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:70:5f:3c:36:5e:8d:12:13:1f:71:92:11:b9:
                    ce:a6:c6:be:6f:67:56:52:3f:d8:ca:83:d2:a1:f8:
                    86:9a:fd:f7:9a:45:93:cf:c1:d1:f9:9e:e9:f6:4e:
                    85:1e:3e:88:23:d7:12:99:e3:75:2c:62:59:60:c2:
                    1f:1b:eb:97:d5:07:c1:d9:2f:62:09:95:32:4c:d6:
                    3c:28:58:c3:95:91:fb:a8:dc:a2:3b:f4:ec:32:50:
                    94:04:f6:34:57:6a:08:7c:7d:e2:95:5b:64:22:57:
                    fd:14:32:dd:1d:82:22:13:ac:64:8b:a8:d1:5e:15:
                    8f:39:45:d5:be:81:20:49:f1:af:59:dc:d7:72:1d:
                    a0:df:19:67:a6:3f:53:65:56:ce:19:ff:7b:a6:7c:
                    3f:58:94:8e:2c:13:35:f1:82:37:1a:c2:69:66:73:
                    39:e0:71:ca:de:4e:85:fd:26:1e:cb:8c:31:9c:a5:
                    d6:35:cc:30:aa:20:10:14:ea:07:4e:d3:d5:d7:b6:
                    17:e1:d3:d5:76:55:ba:bd:68:bd:1e:6e:e6:ec:67:
                    f7:07:33:8d:f4:e3:56:23:55:4a:bb:36:d7:19:33:
                    6c:d3:41:f1:7b:dc:59:bd:8a:ae:42:7a:8f:43:65:
                    d3:84:06:ec:80:09:57:64:8c:ca:bd:77:ef:a8:74:
                    2b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:8C:0F:12:BF:4B:8C:DA:40:E4:8D:DE:2B:3F:4F:CB:62:9F:E0:7D
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/ZowPEr9LjNpA5I3eKz9Py2Kf4H0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:8700:ffff:ffff::/64

    Signature Algorithm: sha256WithRSAEncryption
         3f:8c:1d:1e:d5:d3:b4:20:b3:ea:91:77:e6:4c:8f:c0:ca:98:
         c6:9b:c8:8c:09:bd:c7:df:ab:b8:40:5e:c4:f7:97:4f:3b:9e:
         bc:80:2e:5c:a4:1f:cc:c6:b0:b5:7a:92:fd:b5:61:89:cb:61:
         a8:a2:46:06:5d:17:11:06:23:24:19:ab:9c:be:94:6e:5f:71:
         90:ed:c5:d0:e3:1d:6f:f7:e8:bd:24:da:52:54:ef:98:e7:c8:
         00:61:68:37:4e:39:61:de:a4:6f:d6:0d:a1:c4:50:66:8c:7f:
         b7:45:55:d1:74:e7:77:7e:99:c1:e5:07:31:79:a5:35:74:49:
         37:28:27:96:e1:db:2b:30:76:84:25:32:17:e8:e3:34:c9:91:
         c8:79:a6:a9:9d:b3:6b:e2:2b:30:bb:7f:2d:25:23:f3:44:fa:
         17:55:7b:1a:ec:76:9c:4f:6d:37:c7:5e:9d:2f:00:bb:54:d4:
         14:d3:15:ae:37:b7:c7:62:52:e3:b5:3c:ea:d1:aa:ac:9e:e8:
         64:e5:59:50:e2:ff:57:7f:3a:95:2b:ef:6f:f3:36:5e:9f:2b:
         a8:f0:ef:57:d8:0e:f2:eb:b7:db:0c:62:28:c3:2d:0c:5a:5d:
         82:0f:e1:f1:69:ea:cd:54:cd:98:f0:61:28:42:e6:10:14:de:
         09:d7:7d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----