Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/DfoiYN6VGuaou1xRppLuZbCWDu4.roa
File:                     DfoiYN6VGuaou1xRppLuZbCWDu4.roa (raw, json)
Hash identifier:          vbDbVUiS+Mjq3XKwVpTzKVDHt3QajOpxBp34WXPhv9M=
Subject key identifier:   0D:FA:22:60:DE:95:1A:E6:A8:BB:5C:51:A6:92:EE:65:B0:96:0E:EE
Certificate issuer:       /CN=87A4AFD9E7FC1FED4F9545DE41CE4413DACB0E05
Certificate serial:       0772
Authority key identifier: 87:A4:AF:D9:E7:FC:1F:ED:4F:95:45:DE:41:CE:44:13:DA:CB:0E:05
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/DfoiYN6VGuaou1xRppLuZbCWDu4.roa
Signing time:             Tue 29 Sep 2020 09:51:42 +0000
ROA not before:           Tue 29 Sep 2020 09:51:42 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131149
IP address blocks:        43.254.16.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1906 (0x772)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87A4AFD9E7FC1FED4F9545DE41CE4413DACB0E05
        Validity
            Not Before: Sep 29 09:51:42 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=0DFA2260DE951AE6A8BB5C51A692EE65B0960EEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:5b:d7:b4:73:9e:b6:72:97:44:c4:e8:4b:a9:
                    92:24:0b:7d:4b:06:8f:69:93:12:29:2f:38:09:95:
                    5c:49:ad:b0:e0:c0:53:c8:1c:c8:fb:60:59:39:9f:
                    a3:07:38:50:65:0c:0d:e3:e1:66:1b:87:71:3a:66:
                    ce:95:8a:5a:90:a3:dd:16:2c:20:dd:c2:35:a5:d0:
                    7c:68:7e:1e:d4:eb:a8:0b:8e:67:68:82:9b:10:64:
                    78:07:cd:ae:0e:82:7f:29:4a:23:0e:c6:49:ff:d4:
                    b9:4e:d1:c9:da:ed:e1:96:21:bd:b8:63:47:23:24:
                    2e:d9:b9:64:48:9d:a5:5e:f0:6a:05:c8:78:71:c4:
                    a1:ab:fa:c9:45:32:77:b7:be:e7:9c:19:5e:e6:51:
                    2a:aa:f9:01:ce:b4:88:bb:a7:df:16:b9:7e:02:48:
                    99:c1:9b:65:9c:6b:55:af:98:08:ef:f4:42:7e:07:
                    5a:9a:63:0f:67:18:9a:ee:fc:38:76:62:6b:08:82:
                    32:e3:b5:6b:5a:ec:4c:5f:b5:9f:6f:f7:a3:1e:f9:
                    3f:d4:a6:c4:86:39:55:65:bb:2c:c8:ba:ba:26:89:
                    38:0f:c3:b0:d6:49:06:b0:9f:76:20:ce:6d:62:9d:
                    b3:89:3a:d5:4d:2b:4c:48:c5:4b:80:bb:d7:33:31:
                    e3:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:FA:22:60:DE:95:1A:E6:A8:BB:5C:51:A6:92:EE:65:B0:96:0E:EE
            X509v3 Authority Key Identifier:
                keyid:87:A4:AF:D9:E7:FC:1F:ED:4F:95:45:DE:41:CE:44:13:DA:CB:0E:05

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/h6Sv2ef8H-1PlUXeQc5EE9rLDgU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YUANJHEN/DfoiYN6VGuaou1xRppLuZbCWDu4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.254.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:25:3e:1a:dc:5a:1f:a7:52:a5:65:22:36:a3:70:2d:16:3d:
         2e:0f:8c:6d:f9:6f:4e:6b:28:25:d0:3f:76:a4:46:e4:2e:43:
         52:1b:a1:24:c5:69:7e:77:b1:38:96:df:dc:ce:3a:6f:fb:1b:
         6f:5f:32:93:9f:dc:3f:7f:dc:f9:ad:8a:2b:73:0d:a3:38:da:
         e2:8f:f5:dd:15:59:7d:f2:3f:d9:a3:cd:51:d1:c7:dc:b6:29:
         ea:7f:b8:a0:88:74:19:f9:7c:89:32:c3:5d:1c:49:d8:7c:ae:
         ed:11:de:f8:95:52:32:2a:98:d4:b4:21:9e:5c:d3:41:ff:19:
         b0:7c:39:80:d9:2f:4b:7d:ef:26:67:36:fd:d4:3d:5c:c5:52:
         34:58:f4:fd:7d:8a:82:10:eb:57:e0:c6:de:44:d1:14:c7:95:
         97:6e:e4:47:41:69:47:6e:d3:88:70:10:de:21:a8:8a:c3:aa:
         19:4e:fd:72:be:e7:e7:93:12:70:96:0f:33:24:84:52:cf:4f:
         e7:0a:7c:96:75:c2:47:91:b3:34:44:1a:10:a5:28:0a:2f:0f:
         2a:23:83:1c:9e:d4:9a:ef:5b:78:db:37:17:cf:ba:7e:1e:0b:
         cc:3b:e9:30:8c:1d:28:af:84:0f:80:14:ff:72:31:64:d9:60:
         05:38:ef:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----