Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/jj6uPEAIcis2Kpk924auIxXOPug.roa
File:                     jj6uPEAIcis2Kpk924auIxXOPug.roa (raw, json)
Hash identifier:          aSigCxAWHKgVRYwXM+mduTIFjjSq+OWkg6UcjMWFZTQ=
Subject key identifier:   8E:3E:AE:3C:40:08:72:2B:36:2A:99:3D:DB:86:AE:23:15:CE:3E:E8
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0A4B
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/jj6uPEAIcis2Kpk924auIxXOPug.roa
Signing time:             Wed 29 Sep 2021 02:52:52 +0000
ROA not before:           Wed 29 Sep 2021 02:52:52 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     18424
IP address blocks:        2405:8700:3000::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2635 (0xa4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Sep 29 02:52:52 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=8E3EAE3C4008722B362A993DDB86AE2315CE3EE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:77:b0:f4:80:9b:45:bd:1f:6e:cc:bb:14:d0:
                    7b:5c:c5:26:6d:89:38:56:c2:6b:c5:78:64:4b:16:
                    0d:5f:34:f0:83:76:79:2a:18:7d:95:38:3d:33:9d:
                    0f:c6:18:a9:e6:0d:74:1a:12:81:8a:a2:dd:0d:a7:
                    49:39:00:fa:87:d3:bd:96:6e:f4:ef:1e:d5:16:62:
                    97:28:d1:db:ae:1c:2f:57:0f:5e:d6:b8:02:79:d8:
                    dc:bd:1e:3f:e9:0e:32:24:a8:1e:d2:b8:61:57:9e:
                    0b:d2:33:98:e7:99:1c:ed:e2:36:e3:13:24:66:f0:
                    d3:99:02:1b:b2:f9:75:e8:71:08:97:32:66:d3:3b:
                    b2:d7:ec:b4:f1:18:01:15:5d:21:13:df:59:eb:2e:
                    d2:31:4a:a2:c2:27:85:ef:0d:cd:6b:44:ff:eb:7b:
                    82:65:b9:b2:8e:ef:28:5f:90:34:94:65:75:64:35:
                    7e:c8:a6:96:96:97:c3:73:ca:8c:25:2a:3e:f3:c8:
                    69:3e:e4:8e:33:18:96:2d:0b:b8:8b:30:d9:20:e2:
                    63:47:9c:57:8c:57:a9:8e:cf:53:9c:ea:53:13:09:
                    19:2d:de:0d:17:e9:34:c8:34:d4:32:10:77:a7:08:
                    5e:14:cf:18:7b:b9:16:55:80:a1:ae:90:46:7f:c4:
                    fd:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:3E:AE:3C:40:08:72:2B:36:2A:99:3D:DB:86:AE:23:15:CE:3E:E8
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/jj6uPEAIcis2Kpk924auIxXOPug.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:8700:3000::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:e7:23:5c:d5:22:8b:40:fe:d7:c7:6e:59:f0:1d:85:20:44:
         9f:55:de:78:e0:3c:57:a6:05:97:02:e6:6c:ff:9e:7c:18:57:
         d2:41:6b:65:f0:8d:7b:78:0a:2a:d9:25:ee:f1:de:03:6a:01:
         ca:f7:1a:d6:d5:78:71:1c:fc:8e:a7:ff:58:a4:eb:9f:ce:21:
         b7:78:43:2c:cb:c7:98:77:b2:b2:95:9e:f6:03:87:1a:c9:23:
         d5:be:83:30:d1:25:72:e0:58:0e:21:c9:29:f0:e5:97:90:ed:
         ba:ef:36:a7:35:61:9e:a1:03:de:08:dd:b3:af:a9:9a:df:01:
         87:3e:8c:0c:a9:cc:76:0a:21:ce:00:9e:84:3e:f4:9e:51:b8:
         3b:8d:56:6b:3a:27:3e:4a:2a:6b:dd:3f:20:50:9a:a5:71:92:
         e9:b0:b9:b5:72:f4:1c:d5:eb:f1:ab:d5:e4:15:05:5c:0b:ec:
         70:bf:9e:e2:8b:71:c5:a0:f2:57:45:ea:0f:a2:18:57:dd:08:
         85:9a:7d:81:96:c3:e1:60:e8:6f:54:3e:9b:50:5b:c6:a3:f4:
         75:39:0b:23:f7:d0:71:0a:43:72:a2:cd:02:80:97:5e:63:4f:
         b2:3f:8e:f9:aa:6b:40:61:7d:79:35:99:75:4f:49:2a:b6:a7:
         af:83:f7:07
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----