Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/1npSIL_EcLhvaN_-PgnJ8e49w7Y.roa
File:                     1npSIL_EcLhvaN_-PgnJ8e49w7Y.roa (raw, json)
Hash identifier:          WqptftPTB9PJkmxJAIiE3qyVwmd33F8tJkshxCyL2Ro=
Subject key identifier:   D6:7A:52:20:BF:C4:70:B8:6F:68:DF:FE:3E:09:C9:F1:EE:3D:C3:B6
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       0E31
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/1npSIL_EcLhvaN_-PgnJ8e49w7Y.roa
Signing time:             Wed 29 Sep 2021 02:43:17 +0000
ROA not before:           Wed 29 Sep 2021 02:43:17 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     4780
IP address blocks:        218.210.0.0/15 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3633 (0xe31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Sep 29 02:43:17 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=D67A5220BFC470B86F68DFFE3E09C9F1EE3DC3B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:11:52:b6:f5:45:88:f0:63:5a:6f:83:dc:b5:
                    20:2e:6c:fd:a7:08:9c:e5:7d:e4:0b:1e:36:95:21:
                    fd:a9:b4:df:56:a6:56:4d:ba:25:f5:8f:66:cd:5d:
                    54:20:59:5d:07:de:c0:fe:e2:69:5a:98:22:53:6c:
                    d1:85:84:3e:b5:44:e5:fb:51:85:ec:7d:8f:3c:d2:
                    5f:74:91:2c:7e:f2:47:0a:8f:e5:30:fe:d4:6c:e8:
                    be:50:46:3f:ec:b8:0c:d6:64:0c:93:db:24:4f:70:
                    1f:60:e9:3a:2a:09:5e:8c:d5:92:a7:90:6f:0e:93:
                    ad:e7:14:30:0c:cf:f2:ab:1a:49:46:b8:0e:8a:97:
                    d6:d3:dc:2c:0b:40:09:50:78:9c:1b:37:b6:db:1f:
                    f8:b8:14:76:af:0f:f2:23:49:c7:33:76:bc:5d:11:
                    05:a3:39:8d:63:30:ec:d8:6b:45:d8:5a:ff:af:f9:
                    21:a5:c0:64:de:9d:91:e0:60:49:92:ef:f0:b8:dc:
                    26:e6:bb:5a:19:fe:30:10:1e:b6:28:80:28:a1:b7:
                    96:f0:f8:bc:67:70:24:f0:fa:17:cb:1b:be:95:ae:
                    ed:7b:ef:0a:f4:5f:49:57:33:fa:be:b7:62:d7:0f:
                    81:a0:c0:ce:ba:a7:8c:15:11:bf:2b:aa:ad:13:3c:
                    ab:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:7A:52:20:BF:C4:70:B8:6F:68:DF:FE:3E:09:C9:F1:EE:3D:C3:B6
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/1npSIL_EcLhvaN_-PgnJ8e49w7Y.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.210.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         bb:e8:9f:14:ee:42:45:96:cb:c3:c3:6d:0a:40:88:1c:17:7c:
         d0:d3:3a:79:ea:d9:ef:b3:eb:35:8b:47:79:67:55:a5:8a:81:
         d7:0d:2e:49:11:c2:55:41:d9:13:47:c2:08:41:42:4d:e2:29:
         0c:b2:dd:8d:e1:d2:b3:70:ac:b6:b4:2f:0c:5b:23:67:3e:c9:
         78:fc:fd:f2:ee:a6:cb:03:d6:f4:7c:62:ca:65:07:01:75:4a:
         57:a1:c6:0d:13:5a:73:4e:b7:2b:3c:7a:16:e6:e0:27:67:90:
         ef:5a:ac:e0:85:97:37:e9:ad:63:3a:92:1f:48:f0:8c:f2:29:
         b5:7a:dd:02:d1:6d:5e:1d:e1:e1:30:69:56:68:76:6f:79:c3:
         34:93:67:89:c0:5e:9e:81:b2:f0:2d:c6:20:a8:38:cc:9b:2c:
         3d:5e:c2:4c:53:c5:f8:d6:10:ca:0e:5f:1b:23:46:2c:5d:46:
         72:ae:05:05:ab:0d:a9:91:5e:aa:8f:e6:de:7e:a3:d6:2f:54:
         1e:8d:6f:bb:60:7d:da:63:82:6c:73:f0:f5:bb:f7:0a:ba:d5:
         84:02:17:70:ae:d7:67:d5:44:0d:41:31:18:32:c0:33:5a:d8:
         0e:8b:64:9f:32:a6:98:12:a9:a1:cc:ba:d7:c4:5b:a0:19:0c:
         b2:2e:b5:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----