Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/kiLzpeP0XjaAotSn8D5aaHj_yRo.roa
File:                     kiLzpeP0XjaAotSn8D5aaHj_yRo.roa (raw, json)
Hash identifier:          iFMVS14qjH0ga3GOlmI1MlmFb5KGr1ZgAhVy296kE14=
Subject key identifier:   92:22:F3:A5:E3:F4:5E:36:80:A2:D4:A7:F0:3E:5A:68:78:FF:C9:1A
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       090B
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/kiLzpeP0XjaAotSn8D5aaHj_yRo.roa
Signing time:             Fri 29 Jan 2021 14:34:17 +0000
ROA not before:           Fri 29 Jan 2021 14:34:17 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     18424
IP address blocks:        2405:8700:eeee::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2315 (0x90b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Jan 29 14:34:17 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=9222F3A5E3F45E3680A2D4A7F03E5A6878FFC91A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1d:6c:1f:7c:4d:d5:9c:39:9c:52:23:a2:c5:
                    b4:0e:d6:d0:8a:2b:8b:33:f9:f8:3e:0e:5b:95:41:
                    20:c1:09:47:d8:b6:d9:73:b6:19:89:5b:9d:13:86:
                    d1:14:b2:85:9e:8e:31:c6:36:10:81:b2:2c:12:23:
                    92:5d:3b:fb:74:da:9e:12:47:f5:20:dc:b7:71:ef:
                    55:e8:d6:a5:0c:da:0e:4c:7b:74:29:e6:17:9b:76:
                    39:95:45:ea:83:f7:a8:85:24:a2:54:34:e2:4a:d7:
                    e5:a7:71:7b:1c:14:a6:63:ca:4c:23:08:23:8f:df:
                    5d:b7:97:68:ea:b5:4f:65:23:0a:7d:2b:29:65:5f:
                    b4:50:6a:f5:79:1e:74:0b:4e:2c:52:36:31:a2:be:
                    8d:d4:2c:67:13:44:73:62:46:22:18:b5:f5:71:f8:
                    6d:ba:62:42:62:10:7b:d0:f3:77:d7:00:bf:7b:83:
                    92:20:8b:a2:ad:95:31:cf:ea:87:a4:9e:14:89:ec:
                    74:c7:32:0f:01:6d:4c:15:d3:b2:5a:f7:e6:ab:b6:
                    46:99:23:5a:57:87:e9:45:1a:fe:97:08:77:12:40:
                    62:b9:3b:77:16:e7:e7:05:56:5a:1e:f0:6f:8f:54:
                    a0:05:79:c9:ac:73:c2:4c:3d:c8:e6:36:46:fd:4a:
                    cd:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:22:F3:A5:E3:F4:5E:36:80:A2:D4:A7:F0:3E:5A:68:78:FF:C9:1A
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/kiLzpeP0XjaAotSn8D5aaHj_yRo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:8700:eeee::/48

    Signature Algorithm: sha256WithRSAEncryption
         02:51:06:eb:ac:88:b5:75:87:54:0c:23:7b:89:1e:da:47:da:
         46:d0:92:ce:96:99:4e:42:de:f4:d5:11:b8:8d:d7:ca:6c:1b:
         51:08:0a:3c:78:c3:4b:f1:58:80:23:9e:c4:33:bb:cb:c0:d2:
         63:31:af:52:8d:f9:aa:ab:29:cc:a9:aa:9d:60:5c:48:11:9c:
         6b:45:d7:01:55:ee:89:55:39:de:e9:98:9d:28:f0:ac:01:4c:
         d9:d3:dd:db:4e:a3:04:7f:3c:c0:b6:7a:6a:78:56:0b:c0:b5:
         84:4b:a8:bb:0c:e8:39:09:70:9b:43:a9:0d:89:6c:3e:a8:1c:
         71:2e:49:f3:d4:eb:73:6d:7f:07:ec:fa:da:1b:17:4a:11:66:
         c3:3b:2e:d5:2d:42:85:17:bf:72:ad:32:f8:fb:ac:c1:74:ac:
         cd:26:0f:7b:51:61:07:03:a1:37:e2:02:86:72:69:22:a6:ca:
         93:f9:9a:fd:89:95:43:ba:b9:74:d1:2b:eb:66:fd:51:df:bb:
         c0:d5:dd:57:bd:66:71:3e:2f:10:02:03:1d:c4:b4:44:3e:db:
         2e:e0:14:60:df:c5:b2:0e:ae:aa:64:43:1c:45:c3:63:ef:09:
         0b:a4:62:c7:be:8d:83:3d:39:b9:26:85:c9:5e:f5:30:fb:a1:
         4e:1c:eb:3b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----