Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/0wxBrTGHALjhQW5bdwitJIi06Wc.roa
File:                     0wxBrTGHALjhQW5bdwitJIi06Wc.roa (raw, json)
Hash identifier:          JN9eqHy6sC0f8ufseXsH97Vx3iJaYCRxKl6pRg7BNTo=
Subject key identifier:   D3:0C:41:AD:31:87:00:B8:E1:41:6E:5B:77:08:AD:24:88:B4:E9:67
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0861
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/0wxBrTGHALjhQW5bdwitJIi06Wc.roa
Signing time:             Tue 29 Sep 2020 09:51:58 +0000
ROA not before:           Tue 29 Sep 2020 09:51:58 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9919
IP address blocks:        113.196.152.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2145 (0x861)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 09:51:58 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=D30C41AD318700B8E1416E5B7708AD2488B4E967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f9:3f:34:bc:f5:f9:02:f6:38:8e:1f:71:ab:
                    a5:f3:2b:ee:64:07:02:62:5c:25:0a:9d:e6:65:6b:
                    ce:09:46:bd:01:ed:e9:7c:61:f7:66:8e:c9:2c:e3:
                    14:20:84:c7:42:c0:fc:c1:36:3a:d8:43:46:6c:7d:
                    dd:c4:39:3f:57:99:40:39:b5:0e:80:69:2e:a4:ce:
                    c7:67:f8:e6:17:89:cb:46:9a:5d:e7:70:67:0c:25:
                    7c:b3:62:45:b7:9f:2c:e7:1a:2e:58:60:04:e6:c9:
                    7c:b5:27:0f:df:90:53:92:ac:36:ee:8d:17:64:bf:
                    9b:37:25:d5:6e:cb:56:08:4f:ee:bc:fb:cb:d4:5d:
                    83:8b:40:2e:25:9e:31:ff:fb:b4:90:2f:d9:cd:26:
                    eb:ed:dc:06:13:61:f9:e8:db:e2:94:2c:1c:54:8c:
                    7b:d5:b4:28:fa:c2:1f:6e:39:54:84:bc:ef:0a:98:
                    8d:84:b3:8d:9e:00:96:dc:79:33:93:f9:24:ca:da:
                    1e:ae:19:b1:72:1b:0b:31:9e:5e:06:0c:c0:5a:a8:
                    36:1d:1e:49:5c:d0:c0:b1:2b:c7:3b:f3:43:d3:82:
                    3c:a1:59:c9:da:61:44:6e:2a:63:9d:3f:f6:0b:46:
                    c9:b4:15:a8:e7:96:d3:37:a0:3d:bc:9b:ae:66:f5:
                    75:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:0C:41:AD:31:87:00:B8:E1:41:6E:5B:77:08:AD:24:88:B4:E9:67
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/0wxBrTGHALjhQW5bdwitJIi06Wc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.196.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         74:03:77:c8:db:21:b8:26:1b:0c:ad:8d:c6:84:9d:1b:38:60:
         0d:18:0b:ab:03:9e:d0:52:c5:3d:97:46:cd:8d:4a:0e:fa:e3:
         59:a9:e0:17:e9:36:5e:ed:0e:7b:57:91:0d:61:7a:16:aa:53:
         28:30:50:3c:77:5e:26:a0:5f:e5:af:45:98:a3:8d:aa:47:2f:
         ca:47:3f:bf:12:75:e2:b7:4e:7e:19:44:02:96:68:74:49:2f:
         d2:ab:1c:68:4a:40:ef:98:78:b6:93:e0:54:17:de:7c:81:28:
         53:d1:95:0a:64:94:d6:65:e2:6f:ca:7a:3a:06:bd:df:0e:08:
         58:68:ba:87:45:ba:76:82:ba:e9:1c:73:bf:86:4a:f8:69:4b:
         2f:d8:fc:cf:bb:c4:50:c9:03:da:0b:df:ef:60:0a:75:21:3a:
         eb:cf:dd:12:a4:2c:46:43:ad:e7:92:94:24:fd:ca:05:45:95:
         ad:98:ac:ee:61:1a:77:f1:13:76:49:b9:89:1c:0b:45:d5:48:
         c8:0c:7e:34:83:1f:9d:b7:7d:a4:7b:99:15:3d:80:52:9b:03:
         91:00:cc:29:6e:53:dc:55:99:cb:36:47:80:cc:68:7e:75:21:
         61:f4:cd:c6:9a:b9:cd:c4:77:4f:a1:b9:d6:05:4d:23:77:3c:
         35:8e:55:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----