Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/1lqrelrQzbCn4nq1dn-1C_qA4MI.roa
File:                     1lqrelrQzbCn4nq1dn-1C_qA4MI.roa (raw, json)
Hash identifier:          yu+ZTq6Mv90YAQnOcvc1BRscAjBmgUa9nc3haJ3pY1s=
Subject key identifier:   D6:5A:AB:7A:5A:D0:CD:B0:A7:E2:7A:B5:76:7F:B5:0B:FA:80:E0:C2
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0DF2
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/1lqrelrQzbCn4nq1dn-1C_qA4MI.roa
Signing time:             Wed 29 Sep 2021 02:43:01 +0000
ROA not before:           Wed 29 Sep 2021 02:43:01 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     4780
IP address blocks:        122.146.0.0/15 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3570 (0xdf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 02:43:01 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=D65AAB7A5AD0CDB0A7E27AB5767FB50BFA80E0C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:81:7e:e5:fc:1b:89:58:61:fe:f6:30:58:ba:
                    a6:41:19:78:37:9d:98:d3:a9:34:fa:2c:26:8a:86:
                    45:fa:ab:99:9b:26:f3:23:22:3f:de:24:50:54:c5:
                    f6:54:3d:32:e7:8f:f2:3c:be:bb:3a:03:95:72:54:
                    e6:72:6c:2f:8f:0f:d0:3e:90:9a:79:a9:76:b5:d1:
                    1b:1c:c1:70:3e:53:61:e2:04:bc:30:c3:87:e6:42:
                    f9:0d:dd:13:92:2a:66:39:41:c9:20:9d:ef:23:4e:
                    d1:91:34:b7:33:31:f9:30:4b:25:50:10:fd:36:4f:
                    b4:41:5e:0e:a9:fb:6b:0c:63:11:30:f8:1e:22:7d:
                    98:cc:80:6b:8c:36:ee:2d:e4:8d:d2:48:19:d2:b6:
                    cb:01:3c:fe:1e:eb:e0:11:a7:9e:d6:56:14:9b:7a:
                    18:a5:19:19:fc:64:b1:d4:bd:d0:d0:d7:52:d0:8d:
                    c7:e4:2d:83:28:0f:f0:df:9f:3c:2a:5a:fa:81:13:
                    92:ba:74:9a:22:df:60:b3:a2:c1:67:61:e7:1c:da:
                    5e:cb:97:75:5e:c4:f6:14:e5:b8:a3:96:56:a4:9a:
                    78:46:ea:7c:a7:92:1a:01:83:1c:f3:01:fc:32:f1:
                    81:9e:27:17:fa:e4:92:11:3d:43:db:8f:c8:82:ac:
                    07:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:5A:AB:7A:5A:D0:CD:B0:A7:E2:7A:B5:76:7F:B5:0B:FA:80:E0:C2
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/1lqrelrQzbCn4nq1dn-1C_qA4MI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.146.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         b6:9c:eb:4b:51:f3:45:59:b8:dc:5d:a9:04:46:fe:b0:4d:5c:
         82:28:e9:b2:32:41:70:52:5f:25:f5:00:54:4f:00:a6:0e:a4:
         5f:91:fc:48:96:8b:78:89:e7:70:88:9a:8a:32:c8:a6:da:dd:
         36:f1:d7:fb:0c:fe:5f:a9:d2:d2:bc:3f:d7:4e:d0:d4:b6:e7:
         9a:08:84:e1:8c:ba:f7:a3:e1:d9:b1:eb:fc:64:06:01:6f:00:
         53:f7:fe:b4:29:01:6b:a9:cc:4d:fc:11:3e:09:28:8d:57:65:
         46:0e:3b:e6:8d:fd:8a:a0:83:2a:37:07:22:84:4e:ac:e7:9a:
         6f:3a:52:18:cd:c6:c4:14:98:04:e4:42:d6:9e:72:b8:88:7f:
         c5:e2:c0:d5:d9:d4:8c:c9:47:37:c4:54:6e:32:45:c2:47:05:
         b6:1c:1f:3b:9e:77:b8:eb:9e:ee:fb:de:22:79:d1:c1:a1:3a:
         83:d2:c4:d1:a0:11:52:7f:3e:a2:9d:da:a5:cd:d3:cf:02:81:
         2e:15:c6:b1:56:de:48:01:ac:bc:d1:0a:d4:f3:12:3e:6e:26:
         a3:cb:2a:c5:d7:2c:9d:b5:d0:14:86:f1:0b:12:9b:80:ee:79:
         53:4e:aa:87:23:2b:c0:da:7c:cf:7b:20:5c:5e:7f:8c:54:e3:
         3b:df:6f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----