Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/-tKuM0_qnTUlQJZWLAg-c86Lpq0.roa
File:                     -tKuM0_qnTUlQJZWLAg-c86Lpq0.roa (raw, json)
Hash identifier:          FFmVBANIC0by0InN9rARN2vDt4C0+1Ju+IuExrCMYUs=
Subject key identifier:   FA:D2:AE:33:4F:EA:9D:35:25:40:96:56:2C:08:3E:73:CE:8B:A6:AD
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0E6B
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/-tKuM0_qnTUlQJZWLAg-c86Lpq0.roa
Signing time:             Wed 29 Sep 2021 02:43:34 +0000
ROA not before:           Wed 29 Sep 2021 02:43:34 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     131584
IP address blocks:        106.105.180.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3691 (0xe6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 02:43:34 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=FAD2AE334FEA9D35254096562C083E73CE8BA6AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9d:39:9b:99:e5:b9:c9:95:9d:32:85:f6:b6:
                    f4:d6:87:f6:47:cd:00:b6:b2:49:7b:a4:24:8d:d3:
                    8d:07:58:07:43:a7:56:10:12:24:57:6c:97:17:e5:
                    ea:45:bc:6d:4f:7a:24:20:dc:cf:f5:35:06:97:27:
                    c5:1b:9d:48:27:cc:c1:7b:f8:f7:1d:f3:3f:5a:dc:
                    7a:7c:cb:c4:2e:ba:db:c4:ce:4e:cb:a7:31:1b:ca:
                    04:e3:69:b7:6b:c3:e4:6d:d4:90:1b:81:d2:45:48:
                    c4:cf:95:4e:b3:6c:30:21:f0:cd:f5:58:47:9d:83:
                    6e:85:9f:f1:7a:10:7c:05:b8:f8:b2:f2:80:eb:10:
                    8a:a3:b0:ad:34:62:b8:b1:fc:63:9c:74:58:46:a8:
                    7f:b5:dd:68:d2:45:9f:c0:ad:63:b3:97:39:8a:5d:
                    87:7d:6f:9a:34:8e:de:66:bb:ee:e7:3b:24:96:fc:
                    19:bc:7a:1a:2c:90:90:34:1d:20:7c:3c:44:4d:13:
                    dd:78:cb:03:c3:49:35:e5:62:71:1f:a0:62:96:39:
                    dd:ec:e9:af:5b:f2:5b:a6:c7:12:01:09:d6:00:e2:
                    6a:b7:14:4d:5e:9f:e5:4a:95:6b:f7:b5:d8:cb:08:
                    40:a6:c2:9d:d2:f7:bf:16:6a:55:09:ab:b2:82:54:
                    89:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:D2:AE:33:4F:EA:9D:35:25:40:96:56:2C:08:3E:73:CE:8B:A6:AD
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/-tKuM0_qnTUlQJZWLAg-c86Lpq0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.105.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:ce:7b:5e:35:5a:3c:e5:89:44:77:6c:d2:e4:ec:c3:02:50:
         3c:ed:b2:ec:30:da:32:cd:f4:e5:69:d7:a4:1c:18:c3:33:8c:
         f9:ba:d4:05:ce:58:b7:b3:f5:9a:0f:3a:71:f9:be:07:c7:00:
         a5:01:19:b8:ea:a4:99:2d:b0:30:38:75:b0:6d:bf:82:dc:ef:
         fb:e6:12:0d:9d:c4:fb:18:dc:5c:dd:14:cb:f5:f2:a7:58:e4:
         c5:4e:bb:0e:d8:15:17:09:fb:02:74:f1:75:9a:af:08:60:2c:
         f9:67:cc:14:af:99:1f:99:bb:87:9e:86:2c:18:e6:63:88:aa:
         66:95:a7:f6:c9:20:56:2a:7b:0f:6e:9b:72:41:a0:d3:aa:c6:
         1c:df:5a:62:35:ef:fe:51:df:39:c5:65:1d:19:ec:75:51:2c:
         f9:80:1f:77:e6:c1:85:04:78:41:cd:7b:80:10:4a:94:36:d2:
         af:fe:3a:bb:36:b6:52:7e:47:7e:12:df:38:8f:9d:c9:00:ff:
         b9:29:41:8e:78:9f:29:53:a7:fc:8e:55:af:84:96:f0:f2:67:
         1a:3a:b9:01:be:ac:3c:68:32:1b:89:6c:da:8b:f0:56:14:20:
         b5:1a:3b:d1:2f:2b:25:f8:39:84:65:2d:06:7d:a4:66:93:12:
         87:e1:84:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----